Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bd6ada0d-7cc8-3070-a275-7ff3c118eee0.roa
File:                     bd6ada0d-7cc8-3070-a275-7ff3c118eee0.roa (raw, json)
Hash identifier:          1eNP2r2jeiUr+VLjT7UrSZurnnYDnEbTI7MjYaFVCM4=
Subject key identifier:   38:63:86:D4:D3:C0:27:41:29:0D:00:07:77:81:60:30:58:8B:E2:0A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F373F5B38D5462804EC1A80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bd6ada0d-7cc8-3070-a275-7ff3c118eee0.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:3f:5b:38:d5:46:28:04:ec:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=18c02560-2ebb-4f58-951d-fed8fc67e339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:06:22:e5:58:1f:1e:56:78:3f:d0:57:69:
                    70:2c:bf:a8:65:5d:d8:4b:f9:3d:fe:95:ea:c0:1b:
                    e0:2d:ea:25:55:31:7a:60:40:e7:1f:76:55:77:4c:
                    d1:02:a7:bc:2f:09:f5:6d:1d:c7:22:6c:e4:7c:f1:
                    bb:d1:a5:a9:57:58:96:1a:76:37:e5:ad:f4:35:45:
                    89:86:f1:a3:fa:b3:7b:e6:40:ae:54:d4:13:ca:58:
                    1f:62:84:b2:41:66:44:67:cc:a8:fa:c4:1c:09:f7:
                    d3:3f:42:d7:d7:95:05:65:b3:a7:b2:69:3f:cf:e3:
                    bb:97:64:b0:c2:3e:08:a3:59:43:f2:8f:a8:58:02:
                    c4:86:18:20:67:31:82:9e:e6:19:a8:0d:67:2f:d2:
                    ce:76:a8:6b:bf:0c:9b:ff:7c:9b:80:0d:7c:bb:79:
                    e4:7a:67:0c:37:16:06:ba:8e:f2:70:0a:eb:31:7c:
                    2a:aa:90:b1:4a:76:90:e8:de:ab:f3:61:13:8f:ef:
                    ef:29:c0:bb:f4:fb:6c:b9:3f:e3:d0:42:ef:1f:4c:
                    d5:46:14:61:36:db:31:39:7f:7c:79:34:53:6b:04:
                    9f:b0:30:a9:43:a5:05:35:24:42:fc:77:75:90:6e:
                    64:de:70:13:3c:a0:5c:eb:75:b3:c7:1c:b4:d5:56:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:63:86:D4:D3:C0:27:41:29:0D:00:07:77:81:60:30:58:8B:E2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bd6ada0d-7cc8-3070-a275-7ff3c118eee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f4:e6:b0:9f:4d:1d:2d:cb:a0:07:e2:59:97:d8:c6:db:c2:
         1a:c4:a6:49:c3:3f:09:25:f8:75:12:ff:1a:42:c7:90:f2:99:
         8e:e1:ee:cd:41:93:f3:3a:c1:45:9d:d7:5c:a6:fd:a1:33:68:
         f1:41:26:ed:89:e4:e5:09:b5:4c:ab:f5:cb:95:7f:f3:91:b1:
         68:de:46:33:83:a5:8d:1a:3d:9e:3d:ff:7a:8d:65:08:45:55:
         7b:f6:e6:f0:93:ac:7b:f6:03:7a:23:c9:66:47:55:97:05:7e:
         10:9f:18:5a:88:bd:0c:9a:db:39:82:1e:7d:15:05:39:74:e0:
         fe:9d:68:c4:b0:f1:b4:04:fd:8d:c2:57:1e:fb:21:bd:7c:c6:
         6d:c6:5a:94:9e:23:c8:df:db:78:75:8e:01:ef:fd:0f:04:eb:
         04:e5:26:86:05:80:80:3e:30:b4:16:98:95:ea:8f:e1:4b:d4:
         ac:7f:18:a6:62:42:91:60:ed:82:d0:4d:05:cc:c2:d0:6d:52:
         db:4e:f6:7a:e7:d6:1a:96:bb:04:43:8a:f8:5a:63:c1:2b:98:
         4c:38:ed:e5:f8:76:15:c9:5b:d3:0f:bd:85:76:58:29:29:16:
         b0:ce:17:17:04:88:e9:05:4d:c0:65:f5:c2:f3:f8:71:09:9e:
         2e:e8:a9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:40 2025 by rpki-client