Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa
File:                     ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa (raw, json)
Hash identifier:          +bJ9qAevmf8ndvgLPxQsg9HsWC3HZLOUeZPlXakcttk=
Subject key identifier:   71:2F:C9:93:76:CA:66:C9:98:17:69:46:6F:40:AD:29:61:92:B9:DA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F376CD9327C0BAD4CBE5FC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:6c:d9:32:7c:0b:ad:4c:be:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=8e2dff41-746f-40f9-a07c-06915f979dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:d2:db:d3:a4:fc:69:dd:1b:e6:5e:d5:87:
                    48:bf:ce:c5:60:fa:d2:cc:ce:51:ee:f9:45:97:06:
                    41:6c:7d:4c:8f:53:1a:26:9f:d4:24:94:48:ab:e6:
                    db:22:df:54:f6:47:38:35:08:83:38:1a:b8:d1:54:
                    98:d7:c2:87:0c:a7:74:c8:ac:4c:d3:df:d8:48:bb:
                    a9:cb:8a:ec:a6:2c:41:e9:f5:88:77:07:b8:d5:f0:
                    82:64:b8:93:4c:bc:a7:5b:df:81:ac:a3:f3:fc:14:
                    de:da:2b:69:f4:bf:16:91:ad:31:e5:4e:0b:63:b8:
                    aa:da:82:2d:3c:a1:9a:23:06:b0:98:c7:5b:d6:9e:
                    fd:a2:83:6d:24:ba:70:64:a0:94:3a:4f:53:4e:58:
                    ed:e9:89:fe:11:1c:d5:ed:47:5c:8a:cf:3f:05:a3:
                    be:a3:0a:0b:5f:61:9a:46:72:fc:2f:e9:16:f5:a9:
                    76:84:7b:a2:c2:8f:a2:ad:8f:a5:90:bd:0b:ef:14:
                    e1:41:27:6f:0b:17:05:ee:68:7b:bf:fa:19:a4:be:
                    00:2f:62:00:d2:45:74:66:93:d8:82:7d:e0:58:8d:
                    42:9c:dc:13:a2:15:7e:75:67:dd:05:e0:72:b2:2e:
                    2b:16:59:0e:23:b7:e9:c2:90:73:e9:e4:01:62:f8:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2F:C9:93:76:CA:66:C9:98:17:69:46:6F:40:AD:29:61:92:B9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:6d:c5:1d:80:a9:17:28:5c:dd:24:69:85:7f:43:9e:ca:fe:
         58:cf:75:45:81:d1:3e:cc:cb:20:49:5c:2c:87:51:ab:eb:a4:
         a9:a5:84:df:61:7d:63:55:58:f0:65:f6:fd:06:01:e7:fe:14:
         6b:9a:c9:00:46:ce:c1:84:bd:25:17:12:e8:83:19:91:9d:db:
         ee:82:9e:ef:d8:20:20:99:7c:e7:6c:88:83:24:3e:91:b7:11:
         2e:c0:90:4d:b4:7a:89:9e:83:5a:87:e5:19:58:9c:de:e8:7d:
         bd:d5:57:ff:24:31:ac:4c:1c:7d:65:dd:60:dd:b1:32:20:48:
         de:5b:f0:30:f4:ae:d1:dc:62:75:c5:8e:3f:a8:25:12:04:89:
         54:62:ad:b9:c8:11:68:e1:a8:c4:5d:06:d9:47:2c:d9:3c:6c:
         3c:57:95:cb:bc:bb:02:90:4a:3f:0e:de:5e:69:a3:b5:b3:8a:
         5b:ca:f3:f8:17:0b:e3:76:06:f0:a2:91:02:2a:e3:23:f3:f3:
         cf:d9:d8:bd:f2:7d:cc:a1:49:23:b7:b9:0e:cb:46:72:3f:24:
         6e:7d:d1:c0:48:3e:e8:d9:34:49:fc:b5:7d:29:c5:fc:56:f4:
         7a:cd:cb:29:dd:bf:ef:03:c1:49:b6:a3:57:a4:fd:63:ce:09:
         92:3a:27:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:36 2025 by rpki-client