Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa
File:                     7de72217-a5ed-3f99-8532-8233575f8ade.roa (raw, json)
Hash identifier:          xHavHn1YkcK0t2tHpFLsz2u2u5/iOhtEoi2weFdWurU=
Subject key identifier:   AE:54:97:0F:62:E2:E1:F1:D3:82:A4:0E:08:36:C4:A9:E9:A4:77:69
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD5BCDB15F379F3C58ECB0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:5b:cd:b1:5f:37:9f:3c:58:ec:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=35f04388-a7a4-4195-9baf-e26ce859174e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cb:0e:c0:28:eb:8c:b2:75:26:4a:0c:c9:a0:
                    3e:53:1d:c8:1c:a3:f3:2a:e4:53:fa:21:ad:0b:e2:
                    fb:dd:32:cb:2a:68:0a:39:c4:57:46:70:a6:30:9b:
                    a2:8a:ea:4f:78:15:85:67:e5:de:c2:a9:2d:4d:3f:
                    df:ef:af:dc:48:e8:f1:d7:67:b9:52:8a:81:3a:a7:
                    91:ee:dc:39:90:62:ee:00:57:36:60:4e:6f:5d:ec:
                    ba:25:83:70:ae:18:de:ed:78:12:b3:4b:1c:ea:a6:
                    52:aa:8d:63:4b:fb:22:f5:f1:c5:86:b3:36:40:73:
                    99:6f:39:67:24:e5:83:2d:5f:cd:e6:4c:60:19:ad:
                    b8:a2:e4:7c:5d:53:b0:04:bd:e5:cf:57:59:81:b8:
                    d0:7f:d1:15:50:7f:f8:97:4d:8f:3c:7d:ae:70:b5:
                    d9:6d:3b:cc:ce:c3:8c:95:97:72:a5:33:8b:2a:d6:
                    75:37:b7:a7:8d:e6:db:68:57:8d:e3:ae:c0:7e:54:
                    22:82:ca:5c:6b:71:7e:32:c8:6f:42:9b:3f:53:62:
                    f0:d5:ae:6a:1c:2a:a7:05:cf:04:58:3a:0f:85:e4:
                    9a:cc:00:34:27:e5:c1:62:5e:33:c8:71:d5:78:49:
                    3f:c8:07:30:4b:35:a1:f0:82:ec:8b:c1:f0:82:9e:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:54:97:0F:62:E2:E1:F1:D3:82:A4:0E:08:36:C4:A9:E9:A4:77:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:01:6b:79:2a:5c:ba:31:93:2b:39:a5:ae:ae:d2:df:56:97:
         9e:5a:49:91:83:b2:8e:5a:70:05:4b:3e:1c:d5:cd:1b:50:76:
         70:0b:31:ca:58:a1:e2:1e:55:42:87:35:28:80:62:11:5f:c8:
         b9:ce:d0:81:51:3e:e8:91:d5:3f:19:a2:7f:ef:89:3f:45:19:
         df:6c:b8:bb:8d:cc:85:a0:95:f6:49:c5:61:2a:c7:9e:34:b0:
         db:ae:1b:77:f5:0a:1a:f9:e8:ec:be:51:30:02:46:67:30:c9:
         e7:4d:6c:aa:b5:0d:8d:fe:24:ea:b8:f4:ff:b7:3e:40:44:14:
         26:77:44:ee:2c:b4:97:37:a6:4b:e4:e9:ea:2b:a5:f7:ee:98:
         bd:6c:a9:fc:18:a9:14:01:da:83:31:d6:fd:02:7a:ea:12:f9:
         37:b4:e7:97:9f:7d:2b:e0:b7:29:76:d0:40:88:71:5d:ab:5a:
         c1:39:bc:4c:c4:89:cc:1e:0a:93:75:80:56:bf:1c:ec:c4:43:
         2b:a4:6e:17:ac:06:38:f6:55:d8:8a:d6:62:6d:d3:57:7c:e6:
         1f:03:d7:7e:7a:ea:de:d6:ae:14:cd:59:d2:af:df:90:a1:3e:
         c0:67:a5:01:9f:fd:df:ce:d0:52:ea:bb:8d:26:e5:b4:18:01:
         cc:fe:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:06 2025 by rpki-client