Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c898c989-6d40-38a1-bec2-6bff3fe03ec6.roa
File:                     c898c989-6d40-38a1-bec2-6bff3fe03ec6.roa (raw, json)
Hash identifier:          juuXAaXYhfu+ettz1sMIVgGrRIzGvwq9mjUe7XJ5yXo=
Subject key identifier:   AD:6F:B5:C8:BA:0A:A6:AA:19:A0:4E:05:AF:C8:A3:ED:AB:E1:C3:3F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CE243E4C6B385E75864700
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c898c989-6d40-38a1-bec2-6bff3fe03ec6.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:24:3e:4c:6b:38:5e:75:86:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=08412664-e6f2-4d8d-aff0-fd5c3c8571e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:30:fc:ec:ea:56:a7:05:9c:c1:9b:14:de:
                    e5:f9:59:2d:28:f1:4a:02:98:21:df:cf:2e:f3:f4:
                    14:cd:25:fb:e2:dc:19:9e:6d:df:57:21:53:84:76:
                    f6:54:69:12:0d:2a:e9:32:b7:da:4c:1a:df:3c:c2:
                    c3:e5:64:d0:c0:d0:7c:05:04:27:28:0b:b2:d3:0e:
                    10:1b:e7:88:50:28:ef:58:99:9c:fa:ab:5f:70:bd:
                    8b:99:8d:4b:a2:8f:12:b4:af:83:c3:e8:0c:4b:d1:
                    f2:d2:e5:84:d2:fc:0c:04:74:bc:57:3b:87:1e:66:
                    b6:d5:9f:79:fa:3c:59:84:49:a8:a6:5a:81:ff:dd:
                    6e:4a:0b:a5:6d:51:15:48:b4:a6:5d:fc:77:82:38:
                    99:3d:d5:78:19:ce:a3:33:66:05:32:3e:19:75:49:
                    a0:67:b1:b3:0b:45:ce:56:04:32:6b:06:cc:33:47:
                    fd:cb:c5:cd:a5:62:77:e8:08:8f:da:67:57:be:3e:
                    bf:c5:53:5b:23:3c:e6:ef:8d:99:fe:db:c1:7c:b6:
                    10:10:a1:6e:ee:70:5b:b8:68:cf:6e:af:ca:d2:5f:
                    ae:2f:da:90:b0:2a:da:63:30:93:5d:96:46:f4:09:
                    03:c8:b5:a9:ea:be:94:20:89:74:57:c3:30:76:10:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6F:B5:C8:BA:0A:A6:AA:19:A0:4E:05:AF:C8:A3:ED:AB:E1:C3:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c898c989-6d40-38a1-bec2-6bff3fe03ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:b5:35:1c:6f:f7:33:7a:a8:7e:12:aa:c1:b0:eb:88:88:
         49:7b:ea:da:c3:fd:0b:65:58:ee:4c:98:ab:9c:0b:06:2b:59:
         99:4c:be:8f:14:d9:dc:24:05:57:84:97:cc:43:4b:2d:af:98:
         fc:5b:bb:66:bf:6e:c9:07:65:6b:6b:a2:e3:57:3e:44:88:89:
         9d:0d:2b:87:72:ea:cd:49:cc:f0:21:b8:d8:f0:43:6f:c9:37:
         46:3b:63:eb:23:2e:d9:f6:e3:36:1f:5b:2d:d6:75:25:cb:7b:
         19:79:cc:66:ec:a4:64:ec:13:7c:5a:32:8d:2a:4d:8e:bb:1d:
         16:ff:cf:24:77:1b:23:66:41:73:8a:99:33:00:fc:6f:fb:d1:
         5d:80:6b:3c:2c:ce:da:0b:88:5d:57:84:b1:18:47:7b:c6:7d:
         a4:59:fc:7b:8c:ad:b0:dd:0b:19:f3:ec:fa:be:c6:63:c6:0d:
         0f:f3:24:03:a9:2e:6d:66:63:f4:bc:a7:3f:29:b5:ff:47:77:
         ba:68:42:8b:06:19:22:cc:c7:f9:43:8a:61:b6:99:74:d5:22:
         ab:6a:2c:d1:38:95:bf:77:39:5f:66:32:24:53:40:86:f8:8f:
         84:48:43:86:cb:63:c3:63:1e:20:c6:e5:80:5d:42:c2:a2:a0:
         b4:aa:13:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziQ+TGs4XnWGRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MDg0MTI2NjQtZTZmMi00ZDhkLWFmZjAtZmQ1YzNjODU3MWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm0w/OzqVqcFnMGbFN7l+VktKPFKApgh388u
8/QUzSX74twZnm3fVyFThHb2VGkSDSrpMrfaTBrfPMLD5WTQwNB8BQQnKAuy0w4Q
G+eIUCjvWJmc+qtfcL2LmY1Loo8StK+Dw+gMS9Hy0uWE0vwMBHS8VzuHHma21Z95
+jxZhEmoplqB/91uSgulbVEVSLSmXfx3gjiZPdV4Gc6jM2YFMj4ZdUmgZ7GzC0XO
VgQyawbMM0f9y8XNpWJ36AiP2mdXvj6/xVNbIzzm742Z/tvBfLYQEKFu7nBbuGjP
bq/K0l+uL9qQsCraYzCTXZZG9AkDyLWp6r6UIIl0V8MwdhASVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK1vtci6CqaqGaBOBa/Io+2r4cM/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYzg5OGM5ODktNmQ0MC0z
OGExLWJlYzItNmJmZjNmZTAzZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpbtTUcb/czeqh+EqrBsOuIiEl76trD/QtlWO5MmKucCwYrWZlMvo8U
2dwkBVeEl8xDSy2vmPxbu2a/bskHZWtrouNXPkSIiZ0NK4dy6s1JzPAhuNjwQ2/J
N0Y7Y+sjLtn24zYfWy3WdSXLexl5zGbspGTsE3xaMo0qTY67HRb/zyR3GyNmQXOK
mTMA/G/70V2AazwsztoLiF1XhLEYR3vGfaRZ/HuMrbDdCxnz7Pq+xmPGDQ/zJAOp
Lm1mY/S8pz8ptf9Hd7poQosGGSLMx/lDimG2mXTVIqtqLNE4lb93OV9mMiRTQIb4
j4RIQ4bLY8NjHiDG5YBdQsKioLSqE4c=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:43 2025 by rpki-client