Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d1e287ad-8b58-398d-bf34-b8bf6ad845b2.roa
File:                     d1e287ad-8b58-398d-bf34-b8bf6ad845b2.roa (raw, json)
Hash identifier:          85wtTCveSDQbHZbo+u1yQg51kF64M3pUJrxvHY/3/fk=
Subject key identifier:   BE:ED:66:7F:F4:05:AB:2E:66:DB:A4:00:09:53:53:F5:D6:A5:FA:7E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F376A587207E641629DC700
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d1e287ad-8b58-398d-bf34-b8bf6ad845b2.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:6a:58:72:07:e6:41:62:9d:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=8dcccbe2-e7c8-4f79-9b44-d33cdfd4a1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:89:d5:cc:8e:95:f0:5d:2e:a0:0d:4a:09:
                    bd:80:2a:e0:87:a0:85:9e:36:5c:16:ba:1d:a7:7b:
                    1c:db:ab:1d:0d:28:8d:84:96:fa:b4:6a:44:aa:c8:
                    23:b2:b3:58:aa:e7:fc:89:e2:78:2a:53:1a:4c:40:
                    6a:1f:d9:d9:b0:27:67:5f:15:76:df:a4:fa:f8:49:
                    be:9a:2c:a7:0a:e3:eb:18:33:1f:e8:61:d8:13:ef:
                    e8:36:dd:9e:c5:36:25:b6:90:b8:3c:bf:70:66:ef:
                    8e:59:be:d8:3b:fd:3a:0e:36:f4:2a:12:6c:4d:0e:
                    e9:8c:12:bb:28:c3:36:2e:91:36:37:1e:11:97:25:
                    9d:c5:0f:ab:73:f5:95:d9:c0:49:b6:09:8e:7a:4c:
                    b0:1d:88:a4:b2:cb:98:7f:b8:d7:56:9d:45:1f:5d:
                    59:da:f2:c6:97:b6:be:3d:be:9e:1b:e6:69:f5:3c:
                    19:d6:94:90:8f:8d:e6:0f:ab:7f:fe:71:c9:77:fa:
                    67:f1:6f:6a:56:0c:c2:06:f6:87:c8:28:57:81:c0:
                    0b:72:ff:24:2f:67:3f:68:8b:1d:58:bc:fa:61:58:
                    bf:8d:67:56:a9:fa:fc:5e:dc:88:76:64:c5:af:70:
                    bb:20:1e:af:72:a0:7c:ac:97:06:0e:04:fd:96:9c:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:ED:66:7F:F4:05:AB:2E:66:DB:A4:00:09:53:53:F5:D6:A5:FA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d1e287ad-8b58-398d-bf34-b8bf6ad845b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:53:14:ba:bf:e4:1b:01:f1:3c:96:bc:99:17:81:a5:d1:4f:
         68:89:bb:17:fe:a8:75:75:c2:d9:58:16:06:41:a0:35:0a:ff:
         73:96:88:f9:e5:6d:cf:d5:44:76:da:64:fc:bf:2d:7d:15:96:
         81:f7:4d:16:86:74:76:da:f4:0e:43:cb:ac:b0:51:ad:60:fd:
         76:ea:15:16:8e:71:64:bd:14:f9:ec:d4:e5:02:db:26:c5:61:
         25:cc:51:28:9c:8b:bb:2e:ef:89:b0:01:af:09:c1:01:99:99:
         94:22:0d:81:e1:98:e8:41:14:25:0e:d3:45:25:b1:29:90:d6:
         9d:e9:06:a2:c5:e0:85:81:60:b6:b8:07:25:e2:6b:9e:94:94:
         d4:c7:17:0a:db:9f:c5:86:f9:94:f3:30:4c:97:b5:d6:79:3d:
         70:87:b8:cf:22:56:a9:f4:cb:ff:3e:05:4c:bd:63:5a:80:d8:
         07:4e:ea:52:2e:52:46:06:83:0a:8c:71:68:31:fa:e9:77:b1:
         11:55:c3:9f:4c:37:fc:d3:4d:49:2e:d9:ba:bc:7b:cc:6e:13:
         27:35:f5:77:ce:da:93:b7:d6:35:40:7d:09:03:94:eb:5d:eb:
         f3:7c:65:80:5e:21:ad:e8:d4:d3:e6:21:cc:3d:75:56:82:6e:
         d5:3b:8a:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2pYcgfmQWKdxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
OGRjY2NiZTItZTdjOC00Zjc5LTliNDQtZDMzY2RmZDRhMWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZqJ1cyOlfBdLqANSgm9gCrgh6CFnjZcFrod
p3sc26sdDSiNhJb6tGpEqsgjsrNYquf8ieJ4KlMaTEBqH9nZsCdnXxV236T6+Em+
miynCuPrGDMf6GHYE+/oNt2exTYltpC4PL9wZu+OWb7YO/06Djb0KhJsTQ7pjBK7
KMM2LpE2Nx4RlyWdxQ+rc/WV2cBJtgmOekywHYikssuYf7jXVp1FH11Z2vLGl7a+
Pb6eG+Zp9TwZ1pSQj43mD6t//nHJd/pn8W9qVgzCBvaHyChXgcALcv8kL2c/aIsd
WLz6YVi/jWdWqfr8XtyIdmTFr3C7IB6vcqB8rJcGDgT9lpyicQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7tZn/0BasuZtukAAlTU/XWpfp+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZDFlMjg3YWQtOGI1OC0z
OThkLWJmMzQtYjhiZjZhZDg0NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5TFLq/5BsB8TyWvJkXgaXRT2iJuxf+qHV1wtlYFgZBoDUK/3OWiPnl
bc/VRHbaZPy/LX0VloH3TRaGdHba9A5Dy6ywUa1g/XbqFRaOcWS9FPns1OUC2ybF
YSXMUSici7su74mwAa8JwQGZmZQiDYHhmOhBFCUO00UlsSmQ1p3pBqLF4IWBYLa4
ByXia56UlNTHFwrbn8WG+ZTzMEyXtdZ5PXCHuM8iVqn0y/8+BUy9Y1qA2AdO6lIu
UkYGgwqMcWgx+ul3sRFVw59MN/zTTUku2bq8e8xuEyc19XfO2pO31jVAfQkDlOtd
6/N8ZYBeIa3o1NPmIcw9dVaCbtU7ipM=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:42 2025 by rpki-client