Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/92838134-fbb4-35b1-bb3c-9aebc25e8f1e.roa
File:                     92838134-fbb4-35b1-bb3c-9aebc25e8f1e.roa (raw, json)
Hash identifier:          rog1tOU0kGj342XIdRhL23hwJ5h8NSdgSTLk6+RSdMc=
Subject key identifier:   FD:DB:B3:B4:A4:ED:B7:58:BE:39:F2:CE:E2:A8:AD:64:41:CD:B1:EF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F373BEF2F1EBDF616E64D40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/92838134-fbb4-35b1-bb3c-9aebc25e8f1e.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:3b:ef:2f:1e:bd:f6:16:e6:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=058bb5c1-5c46-40e8-a863-7836ab50c286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:3a:c5:75:f3:78:76:55:4f:18:5b:4f:a7:
                    2d:39:cd:82:6a:43:0b:30:11:d8:1e:1b:c7:c7:42:
                    e8:9a:94:69:96:60:cb:52:fa:76:8c:d9:56:32:5b:
                    08:5c:d7:9d:3d:c2:65:a0:30:de:ae:2d:00:50:fd:
                    ee:7f:de:96:65:69:f2:42:67:7f:f7:58:5c:2d:7e:
                    25:d8:a3:50:ef:0b:6d:ff:db:f9:41:b1:11:c1:5a:
                    79:14:e5:66:86:ba:d7:80:a3:2f:0c:79:fd:08:9c:
                    4c:5c:b4:a3:44:bb:85:17:d2:3a:df:05:0b:db:dd:
                    8d:0d:f3:74:55:3f:df:36:40:85:77:fb:02:c1:fb:
                    fb:1f:f0:59:4c:01:11:27:52:b4:ea:eb:41:94:b4:
                    81:a8:86:04:4d:21:fa:06:45:7d:0c:32:d5:57:13:
                    b7:e0:d7:75:3e:82:f0:99:d9:e8:dd:30:98:d8:48:
                    97:6b:85:1b:60:bf:36:a5:f3:6a:cd:01:a0:bb:56:
                    9d:ac:5f:41:8a:bc:5b:8d:da:91:60:d4:a3:f5:2d:
                    9e:d5:89:5c:a4:b6:3e:83:c2:f2:e6:40:25:f1:88:
                    43:1c:83:19:19:54:e3:a9:96:db:f7:5f:d6:d6:2b:
                    d1:93:44:b2:e4:7b:7f:5f:ce:00:9d:42:a4:0f:70:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:B3:B4:A4:ED:B7:58:BE:39:F2:CE:E2:A8:AD:64:41:CD:B1:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/92838134-fbb4-35b1-bb3c-9aebc25e8f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:cb:28:d3:c0:1a:33:81:b5:b5:df:4a:5b:1a:eb:6a:ef:e3:
         58:6e:19:a7:ee:53:9c:44:7a:ea:2e:3a:77:9e:e8:23:8b:b5:
         71:c7:54:1b:03:0f:ec:cc:08:92:98:4b:7c:44:5e:36:cf:01:
         04:4b:9d:f9:a9:69:7f:b7:0f:c2:ea:6f:e3:2c:d1:97:01:03:
         8c:f4:8c:b6:b5:30:74:cb:4b:21:ad:ea:84:c7:0b:62:24:7f:
         a3:7c:52:cd:53:e4:74:85:e7:c7:d5:39:78:48:02:94:d8:39:
         63:90:53:82:82:f8:c5:03:0b:1c:aa:71:59:61:89:38:c9:13:
         3e:de:ea:02:5c:06:2e:a1:02:f8:00:3c:3a:b1:b9:bd:26:30:
         9f:a8:01:6d:55:37:19:fb:b6:21:c0:21:1f:d4:6c:1b:e7:ef:
         bc:e8:69:75:d5:3e:69:eb:45:8e:d9:9d:f6:68:34:95:83:ce:
         ac:07:81:ce:dd:69:a2:b2:2c:ab:11:5f:5a:4b:5c:11:c3:72:
         c7:b1:56:27:f1:19:e9:f3:41:5c:a4:1a:fa:f8:67:0f:f8:d2:
         d9:11:76:3f:52:3e:b0:d2:f3:9f:cd:b8:2e:22:4e:ce:bd:a0:
         f1:3d:21:b9:6c:65:77:cb:3c:b5:33:6f:57:cf:0c:08:73:bc:
         f3:c6:9d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:33 2025 by rpki-client