Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0169bd1d-2bac-3c04-8257-b1b71527dc31.roa
File:                     0169bd1d-2bac-3c04-8257-b1b71527dc31.roa (raw, json)
Hash identifier:          UwtC3PDhuxFXcy/ItQ0FT5J2lv4oQfa/S+flEWpTXhQ=
Subject key identifier:   BE:03:1E:2C:85:47:42:FD:D0:DC:58:A7:91:BC:18:43:56:CE:7B:9C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A84117F0F66221903258E1280
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0169bd1d-2bac-3c04-8257-b1b71527dc31.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:7f:0f:66:22:19:03:25:8e:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=bcdb1964-05b0-4907-850f-6913520d4e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:5d:03:37:f5:2d:30:45:06:61:44:88:ad:
                    98:a4:08:e3:84:94:7f:5b:ee:06:ff:46:3c:7e:f3:
                    94:15:e5:90:a0:34:7d:bd:ee:5a:ff:81:7a:30:b6:
                    c9:7c:23:b9:52:29:56:3a:40:58:63:b1:61:45:1c:
                    b0:15:46:c5:e0:bf:30:f8:97:79:2f:c0:69:e1:48:
                    9a:c8:80:85:6b:2c:4c:1c:ec:b5:30:44:c9:19:80:
                    5f:21:c4:0d:ed:d4:a2:bc:cf:e0:fa:28:c4:31:1e:
                    b0:60:c4:93:13:58:65:4e:e0:2f:a2:e3:a2:ae:d8:
                    5e:68:13:ba:3a:61:38:d2:32:7b:4e:f8:ba:7d:9d:
                    84:ae:d3:0e:d7:1f:99:42:58:6c:5f:71:89:17:51:
                    e0:2a:a5:60:54:53:e1:ff:f3:0f:82:80:1e:f6:cd:
                    51:f0:8f:33:27:ac:e3:b6:dd:98:df:a7:d9:84:af:
                    9d:bc:ac:ba:13:61:0a:c8:a8:48:e6:a6:53:7c:87:
                    59:ca:4e:36:fc:0a:75:d9:a2:19:70:d3:da:ef:f1:
                    3d:ab:45:b6:15:f9:81:92:5a:dd:79:51:03:4e:cd:
                    12:b1:f0:81:c0:f0:85:2d:88:e7:40:ef:df:89:ab:
                    84:6f:b5:9e:15:4d:53:93:f3:6b:56:87:5e:86:a0:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:03:1E:2C:85:47:42:FD:D0:DC:58:A7:91:BC:18:43:56:CE:7B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0169bd1d-2bac-3c04-8257-b1b71527dc31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:46:94:83:ad:d8:1b:e5:cc:f4:0f:df:14:84:7a:d2:6d:80:
         4c:02:72:84:f7:01:8a:3c:5d:5c:1a:22:82:dd:a7:c4:76:73:
         c3:5b:65:6e:ca:9c:dc:2d:3c:63:f8:b0:6e:1a:7c:24:00:d7:
         0e:b0:3e:5c:f3:31:d6:a4:53:c5:03:19:11:09:ef:ac:78:fc:
         af:22:51:d4:80:73:b5:d2:e6:17:97:75:36:a0:d0:a1:7e:fd:
         1e:d6:61:52:7e:d9:c1:b6:1d:dc:91:49:e6:0e:64:bd:f8:35:
         0b:8c:df:d3:40:a7:28:60:9e:3a:92:3b:5b:64:05:70:29:ed:
         0a:a5:34:ea:37:0a:04:28:2f:f9:2b:cb:75:e5:7c:e9:a9:cc:
         65:52:97:28:92:7b:52:20:c1:74:07:b0:40:2a:0f:c2:60:0b:
         4c:4a:67:64:e5:5d:de:33:5f:a8:f0:54:59:53:bd:9b:c7:f9:
         a8:6c:f4:ed:36:28:92:67:53:c6:65:6e:05:3d:5e:ee:e6:01:
         b3:0e:d4:42:6c:b2:ef:a3:c1:14:91:3f:5e:71:b8:b1:d5:bc:
         af:15:73:74:ef:c9:5d:3e:e1:94:bf:cc:99:62:00:48:e4:25:
         f8:ec:36:e7:3e:0f:61:db:1b:0f:68:2e:6d:08:8d:7e:88:95:
         ad:32:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:26:57 2025 by rpki-client