Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75731bf7-6155-3e00-aa35-25b8cdafddf6.roa
File:                     75731bf7-6155-3e00-aa35-25b8cdafddf6.roa (raw, json)
Hash identifier:          nHZZkl24ZZkVMGDmeQns+73veL6Ut9gN7SnEA9xep3U=
Subject key identifier:   A8:C3:56:30:2F:98:D5:3E:BD:B7:38:D1:A3:60:7D:FE:73:94:14:8F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD516D69F5EC8D2A6C21C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75731bf7-6155-3e00-aa35-25b8cdafddf6.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:51:6d:69:f5:ec:8d:2a:6c:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=35e19b59-3b29-425a-9939-e130bf5a6d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:c6:03:51:bb:0d:a2:b1:2d:c9:f1:a5:6f:
                    dc:d5:6b:be:1f:9c:bb:65:2f:f7:cc:95:59:ae:b9:
                    e7:52:56:bb:41:4b:1e:2d:2f:18:64:81:64:80:01:
                    29:e9:e8:d9:a9:5f:e6:40:35:88:c2:76:98:aa:17:
                    ae:b9:cf:42:73:84:89:ab:9b:f4:b3:13:5f:df:72:
                    4e:ab:87:37:99:11:f7:4e:94:5a:15:45:cb:ee:5d:
                    6d:c8:87:58:60:12:cd:59:16:fe:f3:94:00:a9:51:
                    7c:3e:93:a2:b2:81:b5:52:70:74:f3:ad:2b:73:2d:
                    d0:fa:78:07:8c:d8:fb:4f:c1:23:de:3d:fd:57:cd:
                    e8:7a:dc:c6:2c:56:8d:84:28:65:bf:60:ee:ac:4a:
                    f9:8c:e8:b2:32:aa:fe:90:32:f7:33:19:77:a6:60:
                    e9:e3:58:ae:9d:cc:85:c0:d7:d2:95:00:ea:26:04:
                    e7:44:ef:d1:1d:dd:ec:08:8e:2c:a9:7e:57:c3:45:
                    92:77:0f:27:99:96:87:c8:58:31:c0:29:c6:71:e9:
                    6e:df:17:2b:6e:45:69:e7:38:a9:06:6e:13:e7:d6:
                    2e:27:fd:a7:14:70:ff:19:f0:33:c6:95:2e:6a:7d:
                    e5:6e:37:a7:26:67:23:4e:38:f0:3f:ab:af:60:cd:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C3:56:30:2F:98:D5:3E:BD:B7:38:D1:A3:60:7D:FE:73:94:14:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75731bf7-6155-3e00-aa35-25b8cdafddf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:69:f8:bf:3a:34:57:6e:30:94:21:b2:8c:59:a1:5b:46:b0:
         1f:18:8b:b2:74:56:06:01:f4:0e:06:fe:d9:ac:58:2f:a9:fb:
         6b:10:b2:70:ca:89:08:27:2f:5c:8a:ea:d1:61:99:58:df:aa:
         40:cb:f1:ac:4c:14:36:67:45:1d:d6:e2:dd:b8:51:44:73:7f:
         54:07:5b:f6:53:52:ce:37:95:9b:98:86:07:f5:c9:a6:50:e0:
         fc:06:1e:61:02:88:57:e8:cc:8a:1d:d9:09:72:7f:ed:89:90:
         f0:6b:20:7e:71:09:39:77:90:20:6f:e6:4f:c9:2a:5d:4c:6d:
         e5:be:a0:14:6a:10:4c:30:33:24:4e:eb:ab:5e:89:c6:cd:c6:
         78:9d:35:e9:04:76:36:7d:a2:a5:af:3a:fe:3a:eb:6b:4e:03:
         1b:c8:17:d1:8e:f3:54:f9:c5:c1:51:51:89:cf:57:28:6e:52:
         b3:4e:71:2f:b6:21:3d:a8:d4:88:01:6e:fe:e7:a1:ff:2b:94:
         09:39:b0:92:16:4a:68:cc:e8:0a:44:ef:1c:25:61:e6:54:69:
         9c:d1:56:bf:b5:26:57:83:91:aa:b8:2c:14:78:14:1e:a8:8f:
         dd:f7:03:b6:f0:d6:dc:56:bd:ae:e7:b8:ce:49:22:2e:00:a4:
         14:45:aa:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVFtafXsjSpsIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MzVlMTliNTktM2IyOS00MjVhLTk5MzktZTEzMGJmNWE2ZDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmTGA1G7DaKxLcnxpW/c1Wu+H5y7ZS/3zJVZ
rrnnUla7QUseLS8YZIFkgAEp6ejZqV/mQDWIwnaYqheuuc9Cc4SJq5v0sxNf33JO
q4c3mRH3TpRaFUXL7l1tyIdYYBLNWRb+85QAqVF8PpOisoG1UnB0860rcy3Q+ngH
jNj7T8Ej3j39V83oetzGLFaNhChlv2DurEr5jOiyMqr+kDL3Mxl3pmDp41iuncyF
wNfSlQDqJgTnRO/RHd3sCI4sqX5Xw0WSdw8nmZaHyFgxwCnGcelu3xcrbkVp5zip
Bm4T59YuJ/2nFHD/GfAzxpUuan3lbjenJmcjTjjwP6uvYM0fTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKjDVjAvmNU+vbc40aNgff5zlBSPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNzU3MzFiZjctNjE1NS0z
ZTAwLWFhMzUtMjViOGNkYWZkZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBb6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZp+L86NFduMJQhsoxZoVtGsB8Yi7J0VgYB9A4G/tmsWC+p+2sQsnDK
iQgnL1yK6tFhmVjfqkDL8axMFDZnRR3W4t24UURzf1QHW/ZTUs43lZuYhgf1yaZQ
4PwGHmECiFfozIod2Qlyf+2JkPBrIH5xCTl3kCBv5k/JKl1MbeW+oBRqEEwwMyRO
66teicbNxnidNekEdjZ9oqWvOv4662tOAxvIF9GO81T5xcFRUYnPVyhuUrNOcS+2
IT2o1IgBbv7nof8rlAk5sJIWSmjM6ApE7xwlYeZUaZzRVr+1JleDkaq4LBR4FB6o
j933A7bw1txWva7nuM5JIi4ApBRFqsg=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:38 2025 by rpki-client