Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa
File:                     fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa (raw, json)
Hash identifier:          gN5RFYT8sBylS6Vu9JcAu4I5plg8jw1KAMKbxGAJ1Dk=
Subject key identifier:   C1:BC:6F:74:B9:C1:90:E8:4E:1D:87:FD:A8:49:AD:9B:0C:4F:92:45
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD6BA5B9735D0BF429C080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:6b:a5:b9:73:5d:0b:f4:29:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1e167064-0f29-4494-a746-721d1bb85c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:31:7f:6b:e4:ab:89:e6:50:c5:1d:9d:a9:
                    c9:a3:1a:fd:16:78:c3:c0:39:4e:16:9d:a5:55:ff:
                    c2:58:6a:ce:e7:1b:4b:14:f7:0f:d2:32:3d:ee:37:
                    89:9c:97:4d:14:84:0b:7e:3b:28:3d:44:7e:91:99:
                    3e:1f:26:07:5b:1d:52:c2:be:ae:5e:e7:2a:74:e0:
                    08:b4:7d:93:26:5f:0b:4f:7e:27:23:3a:9d:8b:ff:
                    24:70:e2:c6:80:55:29:fa:4e:9e:04:0c:da:c7:56:
                    05:91:ad:89:2e:51:34:5b:65:8f:f6:73:0b:f3:95:
                    bb:fd:92:58:46:30:e6:ba:67:d8:c3:32:10:f1:b1:
                    42:c8:52:1c:ef:33:ac:2f:f4:20:6f:60:a1:5f:56:
                    31:95:63:ff:a6:a8:20:89:3d:45:d0:8f:8a:21:fe:
                    87:dd:c9:0f:b3:66:e9:99:4e:93:82:f3:2c:61:64:
                    c5:4e:fc:db:26:ec:dd:19:78:26:2d:7e:8b:87:25:
                    58:19:71:51:d1:14:d1:a1:6c:87:a3:05:72:8e:3c:
                    d5:55:40:24:ef:2f:e8:de:97:55:32:11:b8:fd:99:
                    ad:40:9c:46:2c:eb:21:f9:ab:5a:74:c9:44:f4:92:
                    c1:12:e6:e2:a2:27:f6:5a:79:ef:e2:79:f5:10:1b:
                    0b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BC:6F:74:B9:C1:90:E8:4E:1D:87:FD:A8:49:AD:9B:0C:4F:92:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a6:6d:20:1a:10:56:7a:3d:6a:23:c4:33:dd:37:d2:ff:f7:
         1f:f7:64:72:08:14:ac:77:4f:6e:09:69:60:45:2a:f8:3a:32:
         6b:bb:63:94:58:7b:ec:b9:3f:db:67:d7:b6:97:0c:0a:c2:53:
         98:78:94:59:69:ba:60:d5:8c:bd:a7:96:7b:47:11:c3:a7:20:
         71:84:d2:d2:70:bc:72:03:3e:66:6a:2d:c9:59:b8:8b:88:55:
         e9:03:55:e0:de:2f:f1:d3:9c:48:d4:b8:24:e9:32:e2:b9:50:
         53:bf:f3:24:98:b7:f5:ba:da:f2:a6:f5:53:1f:3b:78:10:62:
         f5:0d:78:a3:05:3b:03:af:0c:00:7c:c8:34:b8:7d:b7:fc:7a:
         6d:4c:86:09:54:0d:77:3f:58:d0:20:15:3b:b6:8e:94:28:8f:
         bb:65:f0:c7:5c:20:5d:b4:da:3f:83:78:9c:6d:ce:29:5f:03:
         3b:ce:f8:c6:e6:2c:52:3c:27:87:9d:8a:8f:90:86:5d:00:ae:
         04:e3:86:74:c4:73:2a:62:09:c7:1a:d2:4a:cc:a4:8c:1b:49:
         76:0e:94:9e:60:b2:6f:b9:4c:58:19:68:1d:35:73:26:ae:7d:
         5a:0f:89:c3:a1:f3:12:cd:8d:d3:48:c7:db:4d:01:f1:f1:87:
         2a:13:e7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:18 2025 by rpki-client