Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd549013-e60f-380f-843a-ac541320c21f.roa
File:                     fd549013-e60f-380f-843a-ac541320c21f.roa (raw, json)
Hash identifier:          pJP82hJIcvGqmGYOkq1fLg45vLPAtdrPAjWybbUezJ4=
Subject key identifier:   B7:71:8C:39:31:09:1F:5E:B1:22:A9:51:94:BD:87:01:58:5F:F8:11
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CE0D9201476822B16C8900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd549013-e60f-380f-843a-ac541320c21f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:0d:92:01:47:68:22:b1:6c:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=61d723c4-e0d4-4906-9e38-af263c13221e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:77:95:87:63:1d:5d:7c:aa:03:9c:ac:81:
                    f7:f9:fb:4b:4a:1a:15:85:cc:5a:d4:76:f8:08:ed:
                    00:6c:ff:ec:11:b2:84:42:ba:e8:ff:25:57:49:42:
                    c8:6c:33:e7:49:f8:95:07:20:5e:50:53:55:46:70:
                    7b:8b:01:5d:bb:84:64:cc:af:60:4d:50:54:ac:e6:
                    ca:14:10:56:99:e9:c3:b6:1b:b8:37:32:bf:7f:ef:
                    cc:42:a5:d0:8c:7b:9a:36:e5:51:ef:91:cc:33:62:
                    5c:24:23:2d:1c:46:51:cb:43:19:d6:7f:3b:e9:31:
                    ae:7a:0f:58:b6:ba:e1:49:8d:db:f5:0f:8d:d5:b1:
                    f3:84:03:8d:73:b9:68:7b:a4:f1:75:4b:a8:78:0b:
                    9b:1d:e5:d2:fa:a9:d3:74:51:5c:b1:c3:f2:8f:f6:
                    3a:5b:21:18:f7:a4:36:f8:2d:dd:1c:67:59:62:d5:
                    86:b2:34:ed:f1:8f:d5:22:84:bb:c3:a2:97:d5:30:
                    20:0b:2a:1f:3b:c6:24:e7:dc:b5:48:b1:fb:da:be:
                    e0:56:2f:e8:e6:e7:7c:4c:49:8f:72:9a:6a:27:60:
                    ba:2d:93:a7:65:9f:b8:6c:57:cf:b0:8b:18:a1:21:
                    b4:29:63:b7:9c:0e:33:0e:db:f2:de:2a:18:c2:0a:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:71:8C:39:31:09:1F:5E:B1:22:A9:51:94:BD:87:01:58:5F:F8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd549013-e60f-380f-843a-ac541320c21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e1:9e:8c:69:2a:ce:f3:8a:51:06:ca:0f:42:cc:ba:e6:8b:
         cd:29:59:a1:ec:ed:c8:0d:20:93:ad:e6:46:e9:82:96:a4:d0:
         ec:82:c6:d2:eb:e1:07:a0:92:37:63:b6:75:fb:91:cd:a4:a5:
         54:c8:81:23:94:c8:af:4f:9f:ed:67:20:91:f2:ae:2b:12:e0:
         ae:d4:d0:b7:67:68:20:e1:0e:b2:7c:db:9f:4e:cf:d6:29:15:
         5c:b9:e3:2e:04:76:97:7a:d8:5a:7b:7a:b9:11:ff:67:21:e1:
         28:11:49:a6:1a:fb:c9:ba:17:4b:aa:df:a2:fb:46:77:83:8f:
         cd:e4:72:66:b5:e1:db:a0:0c:5a:ad:62:fa:5c:9e:39:8f:49:
         6b:4f:e0:79:26:a1:35:36:cf:77:53:b1:51:b9:58:0c:af:8c:
         35:74:3f:0c:1a:7f:e8:74:2d:3d:fc:27:c9:f7:2b:33:b7:5c:
         ff:bf:c8:22:32:9d:3b:a4:f0:6d:8c:a9:e2:1a:d6:21:83:df:
         9d:b6:7f:95:86:b0:24:2c:82:ca:fe:56:25:20:e6:49:b2:21:
         a0:56:3d:88:96:6b:6a:10:dd:d1:0b:e5:86:40:de:9a:a5:ad:
         f2:00:c2:04:92:58:a3:07:ae:f8:45:2d:7e:73:00:1f:ae:5d:
         7d:c0:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:34 2025 by rpki-client