Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
File:                     75bde4a1-e87d-321d-917f-10d16a03a5a1.roa (raw, json)
Hash identifier:          Iyvq7Scuiv1zG+UU0KnJTMdlJX/J/aQkqZkMknIh3Zc=
Subject key identifier:   28:3C:71:8A:D5:71:57:16:BE:88:98:9E:4A:F6:63:49:E8:88:A9:E5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F372EC2C4F9031068477638
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:2e:c2:c4:f9:03:10:68:47:76:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=5985b620-c053-4f0e-abe2-401e2839ee3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:e6:ba:51:30:1f:fd:a8:33:54:8d:d8:b7:
                    05:22:30:05:08:e7:0b:1f:11:f5:07:65:58:b8:ad:
                    3e:7a:38:bd:e6:71:9c:7a:0f:39:89:34:4f:f4:91:
                    25:73:b9:e5:5d:d6:aa:39:bb:d8:96:9c:98:8b:e1:
                    54:b1:c4:23:50:9e:79:f3:8c:85:96:7e:bf:e8:ac:
                    98:3a:b0:18:4a:4b:c4:4e:9c:67:3d:76:fc:45:62:
                    88:60:96:71:a7:4c:ac:88:af:d4:63:21:f8:f7:73:
                    e6:11:9c:27:c3:9b:32:bf:77:5b:2b:72:b5:f2:2d:
                    23:2a:93:f0:46:a8:6c:a6:8f:ff:6c:c6:f3:95:e8:
                    60:4f:6a:34:81:a6:fd:c0:6d:ac:9e:25:e3:3e:f6:
                    e2:b3:0f:d4:43:d0:6d:9b:30:6f:89:37:ed:33:28:
                    e8:ee:27:33:ff:45:a3:90:a0:2c:e9:a5:48:ed:e8:
                    46:b9:7a:b7:ab:b9:6d:bb:b5:b8:47:19:01:0c:ee:
                    04:27:9a:19:b2:2a:26:07:52:98:9a:ec:c3:0b:c7:
                    67:56:19:3c:19:a2:51:5d:62:f9:9a:10:54:15:50:
                    44:00:62:93:7c:b5:d8:7c:6c:42:0b:8b:b4:55:61:
                    f9:89:ba:75:a9:b1:43:68:e2:a7:1e:08:f9:1c:ca:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3C:71:8A:D5:71:57:16:BE:88:98:9E:4A:F6:63:49:E8:88:A9:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:58:35:df:64:4c:57:46:68:21:61:c9:19:7e:06:6c:80:01:
         87:a4:38:f5:64:79:e5:ea:5d:9a:b2:a5:cd:76:9f:7a:31:ee:
         fe:b4:45:c8:15:f3:df:f7:9e:07:3b:31:c1:8d:59:c6:27:94:
         7c:88:93:7a:a9:ab:6d:dc:4a:76:69:f4:a8:92:28:41:f6:3e:
         0a:2e:ed:46:b0:36:ec:e0:c6:b9:c5:46:77:60:01:2b:77:b3:
         81:e3:ae:75:c1:03:1d:47:35:e5:ee:20:dc:7a:31:bd:b8:e6:
         57:cb:37:3c:5f:ff:ee:aa:68:2c:49:20:c3:58:ec:3b:f8:9f:
         b7:bf:b2:0b:1e:8b:b5:8f:38:51:ba:be:6a:b9:14:af:15:98:
         a1:47:90:e3:97:d4:35:e7:99:a3:0c:bb:c4:1a:cc:03:3c:2b:
         53:bd:6f:22:cf:63:06:ab:b5:8d:38:3c:a6:d4:4c:8a:9a:36:
         ae:a3:45:fd:79:29:6c:a4:10:a3:8a:db:c0:5e:da:77:73:ac:
         e4:bc:6f:59:16:bf:ba:bd:db:04:91:a3:b8:78:2b:6a:53:ff:
         fa:72:ae:58:5d:7e:16:84:ef:76:5b:8f:39:99:2e:48:58:f0:
         4c:64:dc:6d:df:92:ca:3e:dc:da:04:e0:a7:fa:55:e4:50:58:
         40:7c:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:06 2025 by rpki-client