Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa
File:                     00254be6-db70-327f-95c7-76419c22955d.roa (raw, json)
Hash identifier:          8sn3tkL68AFdql6cWYqsLTRCgePqlVe2/Wqoe+TDu3I=
Subject key identifier:   3D:29:AB:65:AA:E1:C8:55:59:F0:36:0F:37:A8:B3:22:40:0B:FD:08
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B9DFB461E7E1BCB44CF00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:9d:fb:46:1e:7e:1b:cb:44:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=7fa18f87-2d13-4ec3-982b-108f69e02c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:59:36:32:f6:8d:ab:af:6a:9d:f4:30:ca:
                    9e:7f:e8:52:eb:c4:a3:56:67:6e:b2:7c:4d:24:f3:
                    bb:b1:0b:75:59:92:9f:5a:fa:0a:82:84:3a:4b:06:
                    7c:23:a8:a3:75:52:21:10:57:ff:87:fd:a5:47:1b:
                    c4:e8:3e:46:5a:77:bd:32:82:fc:6a:b7:88:dc:2f:
                    5d:3c:d2:c9:8e:1a:53:75:ec:df:5b:dc:56:bb:eb:
                    bf:c5:36:12:d0:54:42:2b:be:9c:9a:cb:97:c8:7e:
                    b5:a0:cb:53:23:98:83:89:51:ed:49:b1:65:21:9e:
                    ec:ea:f6:21:e0:2b:7a:13:a1:be:8e:7f:87:e3:a9:
                    0a:4c:5a:b2:6f:97:bc:16:ef:ae:87:3d:2d:01:ae:
                    c8:a6:f7:ce:fe:7f:9e:ed:1f:02:65:5a:92:d8:e4:
                    8c:b3:0d:54:3d:ce:b1:b3:33:98:d7:33:7f:36:b5:
                    05:c2:41:9a:3a:fb:60:c7:94:df:b4:4d:8d:0b:a0:
                    d8:3c:62:d1:0a:8f:17:20:47:62:e5:4d:a3:7b:1e:
                    8b:1a:33:29:fc:e4:42:36:c7:56:27:c1:2d:78:51:
                    c8:c0:5f:09:e5:cf:9d:93:5a:81:88:1c:c8:68:f3:
                    a9:cb:5e:bf:11:a9:d0:19:39:e3:97:7d:7f:57:a8:
                    bb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:29:AB:65:AA:E1:C8:55:59:F0:36:0F:37:A8:B3:22:40:0B:FD:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c9:6d:92:13:6a:44:b2:43:18:4a:45:fe:78:d5:03:4e:7b:
         a8:9d:18:3e:bd:c1:a2:28:74:c1:fd:43:84:cd:96:22:b5:24:
         4a:d6:84:77:09:39:74:d2:56:6c:9a:64:9e:64:b4:00:db:7b:
         80:57:e8:48:42:f8:53:31:bf:a6:4f:c0:2c:ef:64:81:cf:b2:
         4b:ad:b9:ee:9e:07:c7:60:5e:e4:1c:61:8e:61:d1:e0:68:00:
         57:ab:14:da:cf:8d:65:7f:34:74:f1:b1:17:16:e1:12:0f:4c:
         46:0b:32:a9:2a:19:2a:d7:ba:b0:1f:d7:28:84:bb:5e:d9:04:
         04:60:a6:f2:fa:4a:87:b4:00:3c:73:0f:51:ac:4a:a1:48:40:
         d7:50:7f:79:d0:9f:49:b1:1b:58:08:9c:75:fd:6c:eb:a4:ab:
         eb:41:0c:d8:4b:79:f2:a5:4e:80:bf:3d:65:26:2e:f2:9a:7c:
         4b:4b:82:f1:4a:da:95:38:56:dd:d5:54:40:53:70:11:64:5d:
         80:2f:96:e8:11:31:df:6f:87:44:e2:12:46:1a:79:8b:c5:3e:
         cb:7b:c3:28:11:6b:83:53:ed:ed:42:02:5c:39:fb:3b:8b:cb:
         24:36:50:61:44:88:5b:dc:7a:b8:c6:6a:3c:e2:1a:5f:08:39:
         ef:24:5d:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e537Rh5+G8tEzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
N2ZhMThmODctMmQxMy00ZWMzLTk4MmItMTA4ZjY5ZTAyYzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzxZNjL2jauvap30MMqef+hS68SjVmdusnxN
JPO7sQt1WZKfWvoKgoQ6SwZ8I6ijdVIhEFf/h/2lRxvE6D5GWne9MoL8areI3C9d
PNLJjhpTdezfW9xWu+u/xTYS0FRCK76cmsuXyH61oMtTI5iDiVHtSbFlIZ7s6vYh
4Ct6E6G+jn+H46kKTFqyb5e8Fu+uhz0tAa7IpvfO/n+e7R8CZVqS2OSMsw1UPc6x
szOY1zN/NrUFwkGaOvtgx5TftE2NC6DYPGLRCo8XIEdi5U2jex6LGjMp/ORCNsdW
J8EteFHIwF8J5c+dk1qBiBzIaPOpy16/EanQGTnjl31/V6i79QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0pq2Wq4chVWfA2DzeosyJAC/0IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMDAyNTRiZTYtZGI3MC0z
MjdmLTk1YzctNzY0MTljMjI5NTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPJbZITakSyQxhKRf541QNOe6idGD69waIodMH9Q4TNliK1JErWhHcJ
OXTSVmyaZJ5ktADbe4BX6EhC+FMxv6ZPwCzvZIHPskutue6eB8dgXuQcYY5h0eBo
AFerFNrPjWV/NHTxsRcW4RIPTEYLMqkqGSrXurAf1yiEu17ZBARgpvL6Soe0ADxz
D1GsSqFIQNdQf3nQn0mxG1gInHX9bOukq+tBDNhLefKlToC/PWUmLvKafEtLgvFK
2pU4Vt3VVEBTcBFkXYAvlugRMd9vh0TiEkYaeYvFPst7wygRa4NT7e1CAlw5+zuL
yyQ2UGFEiFvcerjGajziGl8IOe8kXZI=
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:16 2025 by rpki-client