Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7e6c85eb-05e5-3f00-9928-753d8e829189.roa
File:                     7e6c85eb-05e5-3f00-9928-753d8e829189.roa (raw, json)
Hash identifier:          Ogv1EbZpUkGm8CpungPC3VaeuU1KZOMixuwf55a2CZM=
Subject key identifier:   83:ED:C2:BF:E0:51:A7:1D:F7:60:C9:6A:EC:99:8F:37:C5:97:EA:44
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F373E41E83BD29BB003ED00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7e6c85eb-05e5-3f00-9928-753d8e829189.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:3e:41:e8:3b:d2:9b:b0:03:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=e81a3a5f-c5f5-4924-b1ba-cb0bd3953ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:de:7e:48:93:66:59:0d:6f:0c:83:90:ee:3c:
                    5b:17:35:30:27:73:4f:1b:44:a4:24:6f:2c:29:d0:
                    68:ff:c4:73:74:1a:cd:e5:d8:4e:98:6f:64:27:ed:
                    a7:93:11:04:c9:38:04:21:30:d7:5f:01:71:13:32:
                    39:62:1d:c1:3f:71:a7:29:18:16:8d:57:92:7a:3e:
                    75:63:7a:31:7e:ad:16:88:ed:25:c5:6b:05:cf:b7:
                    36:1e:9c:ac:67:2e:3d:45:41:7d:ee:96:5b:7e:3a:
                    31:79:9c:51:70:45:c0:1f:69:e4:65:0e:2b:05:87:
                    9f:a3:df:6e:4e:2b:a0:47:a7:c4:44:65:92:e1:c7:
                    ef:7b:eb:a2:a1:88:20:6d:8f:87:fe:f8:f9:0a:80:
                    c7:21:05:5c:20:00:07:4d:3d:c5:a4:70:42:8f:37:
                    70:5d:f6:2a:25:0e:dd:ef:73:a6:c2:2e:16:d3:e8:
                    f2:59:d0:89:28:ec:64:2d:8d:dd:7d:1d:b9:9b:6c:
                    1a:1c:97:51:64:59:fd:12:19:62:cf:d4:a3:e0:14:
                    b4:71:4c:96:64:c8:55:d0:57:a9:49:06:3f:96:48:
                    a8:b7:1d:81:85:c8:bf:fe:f9:df:e4:1e:8b:a3:78:
                    73:0c:1e:fe:da:8a:4c:7e:1a:aa:3f:5c:1d:81:50:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:ED:C2:BF:E0:51:A7:1D:F7:60:C9:6A:EC:99:8F:37:C5:97:EA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7e6c85eb-05e5-3f00-9928-753d8e829189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:ae:03:c5:d9:2c:82:8a:09:b0:f5:c5:20:f9:05:dd:b0:
         c4:00:54:2b:c2:88:8a:85:cf:fc:1a:db:40:17:b2:cc:ae:a5:
         ac:2c:dc:6d:6d:70:39:bf:cb:5f:54:26:1a:9d:46:ac:f7:82:
         30:2d:9d:2c:c4:5a:9f:2a:a8:61:c3:23:d6:76:eb:57:2f:47:
         e1:cc:7a:9b:75:89:33:e7:84:e5:6c:a2:23:67:ee:3a:6b:a6:
         02:99:57:9b:29:98:bb:55:cf:b2:a0:2a:be:17:2e:60:64:a4:
         de:3c:78:00:ba:01:cf:84:13:38:03:d2:90:16:2c:22:c7:de:
         df:49:cf:84:ae:68:1a:1d:e4:8f:9a:49:ab:b3:cf:98:30:66:
         df:95:7b:0f:d2:f6:c0:e1:74:a8:fe:59:15:3c:20:db:80:08:
         f4:4d:44:1f:25:88:ee:b7:1d:64:69:b4:ba:a5:a0:98:20:86:
         64:56:f7:e5:e1:49:aa:1e:97:89:f4:34:b6:9a:2f:78:f7:f7:
         c6:ff:0c:d6:44:20:88:5d:66:22:1d:1c:aa:b9:f0:68:14:55:
         cb:f0:5a:5b:87:08:34:53:05:92:2a:3a:bf:cb:42:c2:e3:20:
         32:85:af:bc:f1:d1:e1:6d:74:14:74:41:ee:62:91:25:b7:b3:
         42:e5:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:38 2025 by rpki-client