Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e675288c-f53a-3525-897d-63a3f8d67a13.roa
File:                     e675288c-f53a-3525-897d-63a3f8d67a13.roa (raw, json)
Hash identifier:          TqrFVwIovEs3y+awpRSZftx7NMkCsottQuAu7NiHkI0=
Subject key identifier:   28:6D:14:A7:2B:B7:2E:8E:05:CF:28:61:95:55:FD:36:58:A3:D6:3D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD509155762B961799C480
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e675288c-f53a-3525-897d-63a3f8d67a13.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:50:91:55:76:2b:96:17:99:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c7cf2d12-6ca0-4b46-b80e-5b6003f23598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:2e:71:f6:8c:0b:95:71:29:1e:5f:0a:e9:
                    e5:7c:d0:4b:d2:8e:e9:68:18:2d:97:c0:61:db:48:
                    2f:ca:55:28:d4:04:1b:2f:76:5b:1b:17:6f:2f:5e:
                    9b:59:86:ec:e2:93:27:fe:0a:b7:a8:5e:14:b1:3f:
                    0f:e0:69:9d:53:86:1a:26:d6:79:33:d2:8c:f2:5e:
                    5f:a3:62:48:f7:04:71:c3:8e:5a:61:9e:0f:33:4c:
                    a7:fb:e7:81:78:c8:ac:a3:82:90:84:3a:21:dc:a0:
                    b0:c5:3f:44:bf:7e:d8:48:58:54:05:5f:32:6a:67:
                    0e:2d:3b:94:34:1d:63:59:d8:29:bb:c0:e4:77:42:
                    95:41:be:bf:40:c8:62:25:ff:e0:94:6a:30:7e:4b:
                    2d:f8:3e:b8:73:8e:18:41:96:9e:01:a3:2f:81:82:
                    df:b8:e8:54:e9:2b:bf:3f:c3:63:ed:e0:50:2d:30:
                    73:4e:51:fd:2c:51:e6:c9:d6:d1:21:55:21:e9:e1:
                    8e:82:3e:f6:ab:ef:ae:e4:92:25:dd:46:04:35:d6:
                    33:b4:6b:bc:7e:8f:f1:40:14:13:f0:1a:e5:66:93:
                    7e:e7:cf:e8:c1:3b:c5:b9:34:29:41:78:23:52:bb:
                    ca:b3:06:f2:8b:bd:e0:61:51:93:d8:fb:8c:27:6f:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6D:14:A7:2B:B7:2E:8E:05:CF:28:61:95:55:FD:36:58:A3:D6:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e675288c-f53a-3525-897d-63a3f8d67a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:88:15:d6:7c:e7:e4:e8:ac:0c:49:23:a8:f1:fa:b0:6f:e0:
         2e:f3:cd:31:e7:ba:6e:b3:3b:1e:78:4e:a8:d7:b5:47:37:47:
         78:c5:01:23:48:d6:3e:fd:3d:cb:62:72:89:86:04:20:0f:cb:
         f0:ae:9c:da:55:59:43:aa:23:a9:10:5a:a9:e0:30:fe:76:0e:
         e6:8d:b4:cf:ba:39:31:9e:45:86:2f:ab:33:22:ef:9f:8c:8e:
         b1:2e:d1:8d:f7:f2:8b:ad:1e:8b:a9:a2:82:44:3f:eb:06:5d:
         07:92:af:2d:66:60:81:a3:df:f7:97:65:8e:6a:6a:cc:42:f6:
         cd:cf:a1:67:ba:b5:5c:da:17:30:28:07:a7:1f:26:bf:23:4a:
         b9:be:67:89:50:57:d7:da:3e:d7:64:54:30:1d:ef:cb:32:ef:
         f0:47:7a:5a:48:70:ab:e8:b0:84:d5:6e:f5:ee:75:9c:66:0a:
         3d:a2:d7:b6:63:16:1a:08:f9:7a:8d:85:16:21:37:16:82:a7:
         47:b8:67:b1:48:9b:66:b1:41:24:e7:60:cd:8e:71:aa:1b:59:
         c9:ed:05:94:57:b9:74:2d:0d:0f:5d:cd:b0:c1:ef:8a:c4:ba:
         03:ed:53:9b:a3:2e:bc:16:2c:f4:51:4b:23:de:c3:2a:f4:42:
         4d:d5:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:34 2025 by rpki-client