Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f269f785-f3ca-34e7-ab9d-436585973ece.roa
File:                     f269f785-f3ca-34e7-ab9d-436585973ece.roa (raw, json)
Hash identifier:          ScVXr3ZmtMcPjlbwpIzh7R7bzmoNrsO256qf0YF2dsI=
Subject key identifier:   DA:8C:85:22:6C:E7:F8:C3:A2:BA:10:D6:89:9E:80:BB:66:B3:25:4B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F373FCB6F79C06B1C0CB060
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f269f785-f3ca-34e7-ab9d-436585973ece.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:3f:cb:6f:79:c0:6b:1c:0c:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=6c66f7e1-27f5-4eb3-85f6-db6c4544d088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:2f:df:39:84:28:66:7a:9f:91:12:85:21:
                    c1:c5:a5:4b:26:ed:e0:a9:98:67:7d:a6:d9:12:df:
                    7b:f0:8c:b3:d3:75:df:11:1f:fd:68:c0:1c:2e:da:
                    33:a5:e4:3f:1f:87:ed:0c:a7:28:32:d5:5d:3c:97:
                    79:55:f1:09:13:ff:08:c2:1e:dc:0f:9d:b6:3a:76:
                    66:c7:8e:e5:78:9e:ba:3d:4e:c3:3c:26:ce:c1:63:
                    d0:a4:00:d8:44:c9:16:cd:91:64:bc:b1:4a:1d:1c:
                    f2:a4:ab:cc:b4:48:34:2a:50:bd:9c:ef:96:4d:3d:
                    c4:29:2b:9e:24:c8:8f:f0:01:a2:97:70:b6:e4:f0:
                    ee:66:fb:d1:ff:6b:de:ae:cc:66:a0:42:d4:f8:78:
                    b7:24:14:0c:ae:b5:25:da:35:61:79:24:11:db:d7:
                    c4:59:cf:44:eb:b6:2e:ee:15:eb:23:3d:18:62:a1:
                    d3:1d:ea:f2:4d:41:81:cd:97:2f:cc:47:3f:aa:a5:
                    0a:ad:cd:00:e6:b2:f2:83:cb:e6:91:d8:4c:24:63:
                    c7:b8:64:c4:bb:9e:66:be:c2:e6:8f:7e:26:7c:65:
                    b3:0f:9c:95:72:70:bc:b1:7e:59:7d:c5:0d:fe:83:
                    af:c8:b0:02:c0:0e:38:80:c7:fc:e4:4c:59:c3:89:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8C:85:22:6C:E7:F8:C3:A2:BA:10:D6:89:9E:80:BB:66:B3:25:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f269f785-f3ca-34e7-ab9d-436585973ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:50:5d:73:01:34:2a:53:e3:57:0f:ae:fd:47:e8:fb:3c:
         69:1f:d5:d4:62:7c:3e:d4:b4:60:f9:8f:4e:6d:49:2e:cd:ed:
         b1:45:dd:f8:bd:b3:15:75:08:1a:dc:9e:0b:16:97:f2:05:a6:
         b8:2f:cd:77:7a:a5:28:bc:87:13:4c:2e:0a:13:db:ae:17:31:
         15:dd:00:c2:80:87:58:5d:0d:63:32:be:0c:a0:d8:44:3c:2f:
         17:88:dd:ee:3a:1a:48:c7:16:fc:29:57:e6:2e:77:0b:05:f2:
         f6:34:fb:84:f1:f6:f3:c0:5b:ae:67:3c:64:01:22:34:95:81:
         d2:d6:8a:c0:61:bc:4d:06:3f:19:1d:17:38:65:a5:54:f9:9a:
         ed:e3:03:35:5d:b1:fe:95:ee:40:9b:a6:67:cf:51:3b:4a:7f:
         70:ca:e5:7d:56:31:65:3c:78:45:4a:8c:c1:38:be:43:31:5b:
         7c:fc:4f:17:04:54:d1:40:ff:b6:52:0e:88:bd:9f:09:5b:23:
         30:9c:73:91:96:62:8c:02:4d:c1:e2:6e:8d:5a:6d:c2:ba:1d:
         5d:b1:43:2d:54:ed:29:f6:5c:35:ca:7c:4c:7f:a7:61:a8:f0:
         7a:98:f1:35:25:51:53:12:00:55:24:a4:a4:86:9c:7c:11:0d:
         9f:b9:3f:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNz/Lb3nAaxwMsGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
NmM2NmY3ZTEtMjdmNS00ZWIzLTg1ZjYtZGI2YzQ1NDRkMDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsEv3zmEKGZ6n5EShSHBxaVLJu3gqZhnfabZ
Et978Iyz03XfER/9aMAcLtozpeQ/H4ftDKcoMtVdPJd5VfEJE/8Iwh7cD522OnZm
x47leJ66PU7DPCbOwWPQpADYRMkWzZFkvLFKHRzypKvMtEg0KlC9nO+WTT3EKSue
JMiP8AGil3C25PDuZvvR/2versxmoELU+Hi3JBQMrrUl2jVheSQR29fEWc9E67Yu
7hXrIz0YYqHTHeryTUGBzZcvzEc/qqUKrc0A5rLyg8vmkdhMJGPHuGTEu55mvsLm
j34mfGWzD5yVcnC8sX5ZfcUN/oOvyLACwA44gMf85ExZw4lJfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqMhSJs5/jDoroQ1omegLtmsyVLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZjI2OWY3ODUtZjNjYS0z
NGU3LWFiOWQtNDM2NTg1OTczZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAieUF1zATQqU+NXD679R+j7PGkf1dRifD7UtGD5j05tSS7N7bFF3fi9
sxV1CBrcngsWl/IFprgvzXd6pSi8hxNMLgoT264XMRXdAMKAh1hdDWMyvgyg2EQ8
LxeI3e46GkjHFvwpV+YudwsF8vY0+4Tx9vPAW65nPGQBIjSVgdLWisBhvE0GPxkd
FzhlpVT5mu3jAzVdsf6V7kCbpmfPUTtKf3DK5X1WMWU8eEVKjME4vkMxW3z8TxcE
VNFA/7ZSDoi9nwlbIzCcc5GWYowCTcHibo1abcK6HV2xQy1U7Sn2XDXKfEx/p2Go
8HqY8TUlUVMSAFUkpKSGnHwRDZ+5PyI=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:43 2025 by rpki-client