Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c2dfeac4-d952-3d51-83a9-ee367909fa72.roa
File:                     c2dfeac4-d952-3d51-83a9-ee367909fa72.roa (raw, json)
Hash identifier:          TFPt6Pp0zgEwX7iqlzdd+1oIxebaH5o2hmzs9HljQvA=
Subject key identifier:   D1:D3:04:A1:23:DE:8C:23:39:5C:9C:18:55:7E:52:9A:C5:07:D1:35
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD6584E0A1C4ACFACFF740
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c2dfeac4-d952-3d51-83a9-ee367909fa72.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:65:84:e0:a1:c4:ac:fa:cf:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0e9b132a-19ef-4835-a760-8150d7ed503c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:a6:b4:c7:0f:da:09:22:4a:88:bb:71:60:
                    b1:8c:99:24:f2:60:98:4c:ac:99:fa:c2:e4:56:58:
                    fd:22:c3:11:86:9d:93:5e:1b:12:61:37:b4:c8:e8:
                    42:f8:b4:af:fd:0c:e5:40:d6:1d:e9:d7:6b:71:e2:
                    c9:4a:81:b0:06:d2:de:17:15:4c:c1:24:a5:e2:d1:
                    18:16:64:10:f9:e2:5f:78:ad:f6:1d:c6:df:43:1e:
                    0f:76:d5:f6:5e:b8:86:fb:6a:0f:67:e3:df:6c:e6:
                    58:a1:9a:5f:f6:6f:c3:86:0d:80:56:2a:41:04:00:
                    aa:64:eb:ad:d8:c3:11:91:24:b3:15:fb:e9:3c:78:
                    74:86:fb:1b:61:2c:54:2e:09:e7:77:d6:fe:79:2d:
                    e6:1a:3a:45:cb:b4:a0:92:b8:88:9e:77:dd:6f:a1:
                    13:b3:87:bb:89:4c:d1:22:e1:93:9d:98:4c:73:0f:
                    83:4e:31:93:c5:b4:9e:d5:99:a7:7f:f6:f5:c8:4a:
                    21:61:60:27:2b:76:48:49:38:4c:15:51:be:db:99:
                    76:95:f1:85:0c:3b:98:74:83:45:8f:da:16:7f:c8:
                    ee:9a:46:82:02:91:24:1c:29:98:e2:10:ef:d5:60:
                    13:74:bd:f3:c3:4c:40:2b:d8:10:d8:b5:bc:cc:e0:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D3:04:A1:23:DE:8C:23:39:5C:9C:18:55:7E:52:9A:C5:07:D1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c2dfeac4-d952-3d51-83a9-ee367909fa72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:dc:f6:32:35:a6:0e:03:2c:5c:0d:cc:4b:dc:45:f0:80:c0:
         c8:61:27:1f:a3:a3:cf:ab:71:bc:42:fc:40:d3:14:2a:ee:18:
         1b:76:48:51:eb:28:4e:f8:0e:77:36:00:0b:2f:b0:84:1b:17:
         79:9c:5b:f3:ab:f4:2f:66:98:f8:87:dc:4f:d4:92:ed:74:14:
         3b:bd:1b:9e:f5:7e:38:c8:47:d2:a1:55:f9:93:c5:05:5e:e3:
         97:a8:2e:1e:61:b3:94:00:bb:f2:93:53:af:c8:e7:d5:05:91:
         1a:b1:a1:56:06:78:d4:3f:96:17:6b:ef:3a:87:f2:42:f8:6c:
         fc:9f:a2:2c:40:b2:cd:96:b4:e7:b9:2c:20:23:3f:16:a9:dd:
         df:fc:cf:39:bf:ac:bc:f4:8e:7c:65:6a:0b:fd:cc:37:70:4a:
         7e:73:dd:c9:07:63:15:f5:09:c0:c9:7f:05:4d:5f:af:3f:f9:
         88:03:7e:a8:34:1e:e3:2f:89:7a:47:79:8c:f0:b0:a9:b9:fb:
         41:ff:90:dd:40:6e:56:c2:42:ae:2a:ed:53:ab:07:da:0c:69:
         b7:48:9a:80:4f:55:b6:1d:22:d7:4c:17:83:16:40:c3:0c:6d:
         fa:07:23:1c:60:cc:65:0d:82:2b:ae:95:35:b5:6b:b4:84:d3:
         5d:53:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:41 2025 by rpki-client