Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a31175ee-a1fe-376b-85c1-d8ef69789f93.roa
File:                     a31175ee-a1fe-376b-85c1-d8ef69789f93.roa (raw, json)
Hash identifier:          CQcUhyErK6IW/KfnQmVTVgtvlIsoNnT3fYI/yhX5vgE=
Subject key identifier:   F7:84:72:A8:F2:CE:6E:A3:41:29:4E:16:58:BF:11:9F:D1:C9:5D:C1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F374AB5F61D31BB2729A4B0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a31175ee-a1fe-376b-85c1-d8ef69789f93.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:4a:b5:f6:1d:31:bb:27:29:a4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=95b6ce32-6305-41ab-a9d3-e23c36a7c46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:ef:bc:47:2f:29:82:ab:60:63:a3:b7:79:
                    60:53:84:b7:46:6d:21:2d:2a:99:c5:b2:63:e6:64:
                    bb:f2:7a:72:ca:57:ed:69:ad:9c:48:d3:35:a5:e3:
                    1a:6f:ec:a8:99:1e:97:8d:ec:43:69:95:90:0c:8e:
                    85:66:91:16:6b:92:53:24:75:64:8d:6f:46:30:6a:
                    59:89:84:01:c6:e8:e7:6a:2f:2f:3a:e7:20:1c:9a:
                    dd:ef:5e:12:e4:ee:a9:96:4e:4d:53:52:79:7a:0b:
                    a0:3b:d5:d6:de:1c:24:24:2e:3c:a8:f3:cd:86:fd:
                    7c:9c:9a:7c:de:b7:81:e9:e9:b6:9f:04:5e:38:12:
                    ac:a0:85:26:c6:7a:9d:52:5e:31:e5:e5:dc:50:cf:
                    e4:7a:2a:00:1b:ed:ed:9c:55:d2:49:08:14:de:0f:
                    ba:2b:35:9b:35:a9:db:e7:63:26:3e:68:e1:a1:d8:
                    f6:ed:d1:8c:0b:99:98:a5:02:16:2f:fb:05:5a:92:
                    3c:31:6e:4e:2e:0a:ca:b5:10:67:9b:dd:a4:93:5e:
                    bf:8a:d4:b5:03:51:e3:03:f7:ca:76:da:e2:5c:7b:
                    7e:ba:6d:a4:9d:14:53:7e:17:83:f4:95:69:46:af:
                    45:1a:a7:26:cb:b8:8e:b8:f5:93:03:21:0f:89:b3:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:84:72:A8:F2:CE:6E:A3:41:29:4E:16:58:BF:11:9F:D1:C9:5D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a31175ee-a1fe-376b-85c1-d8ef69789f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:92:37:e1:9d:3d:db:c8:38:6c:d3:6b:b3:84:68:02:b7:b1:
         2a:43:33:1e:71:2a:f0:18:b3:51:8e:e8:d0:c2:36:ec:9f:82:
         2a:86:38:7d:9a:0c:41:bd:6a:e5:6e:25:bb:e1:3d:d5:fe:bd:
         d7:8c:3c:5f:16:ac:e3:fb:99:0e:51:38:c5:d6:1a:b8:d7:a5:
         33:d1:97:a1:d0:e6:18:48:2c:7f:54:03:0a:5e:32:c7:50:1b:
         8f:a6:4e:71:35:74:80:30:e1:bc:c9:ee:40:50:78:ad:b8:66:
         2a:65:b8:be:f0:1c:94:19:63:2d:91:49:78:65:0f:74:0a:32:
         ad:2b:ef:49:73:a6:d3:fe:5f:63:4f:ef:ed:bb:21:7d:e2:de:
         45:39:6f:05:37:04:1d:7d:42:9f:1e:1a:88:d9:75:bd:cc:cc:
         68:c7:86:5e:71:de:11:f6:c5:81:00:7c:14:88:bf:4e:e6:c9:
         c8:b3:d7:2c:70:06:0e:80:57:7d:08:c3:50:62:73:3d:f0:ff:
         50:ad:22:e1:36:43:4b:90:1d:90:17:06:a1:d9:0c:07:99:c3:
         2f:1e:9e:88:4d:60:e1:9f:a7:b1:35:8a:56:dc:f7:e3:6b:c1:
         a3:0e:78:0f:31:e0:61:2c:d2:aa:ae:81:09:20:52:3f:fc:b9:
         03:b5:77:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0q19h0xuycppLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
OTViNmNlMzItNjMwNS00MWFiLWE5ZDMtZTIzYzM2YTdjNDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4jvvEcvKYKrYGOjt3lgU4S3Rm0hLSqZxbJj
5mS78npyylftaa2cSNM1peMab+yomR6XjexDaZWQDI6FZpEWa5JTJHVkjW9GMGpZ
iYQBxujnai8vOucgHJrd714S5O6plk5NU1J5egugO9XW3hwkJC48qPPNhv18nJp8
3reB6em2nwReOBKsoIUmxnqdUl4x5eXcUM/keioAG+3tnFXSSQgU3g+6KzWbNanb
52MmPmjhodj27dGMC5mYpQIWL/sFWpI8MW5OLgrKtRBnm92kk16/itS1A1HjA/fK
dtriXHt+um2knRRTfheD9JVpRq9FGqcmy7iOuPWTAyEPibNx7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPeEcqjyzm6jQSlOFli/EZ/RyV3BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYTMxMTc1ZWUtYTFmZS0z
NzZiLTg1YzEtZDhlZjY5Nzg5ZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmSN+GdPdvIOGzTa7OEaAK3sSpDMx5xKvAYs1GO6NDCNuyfgiqGOH2a
DEG9auVuJbvhPdX+vdeMPF8WrOP7mQ5ROMXWGrjXpTPRl6HQ5hhILH9UAwpeMsdQ
G4+mTnE1dIAw4bzJ7kBQeK24ZipluL7wHJQZYy2RSXhlD3QKMq0r70lzptP+X2NP
7+27IX3i3kU5bwU3BB19Qp8eGojZdb3MzGjHhl5x3hH2xYEAfBSIv07myciz1yxw
Bg6AV30Iw1Bicz3w/1CtIuE2Q0uQHZAXBqHZDAeZwy8enohNYOGfp7E1ilbc9+Nr
waMOeA8x4GEs0qqugQkgUj/8uQO1d98=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:51 2025 by rpki-client