Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0d8fec9f-8cb4-3884-a230-e8ab6702d6e4.roa
File:                     0d8fec9f-8cb4-3884-a230-e8ab6702d6e4.roa (raw, json)
Hash identifier:          69j8Wa34xYi5Y6DuD7MFVq8CEkMJtvumpHG9Cadn2dI=
Subject key identifier:   10:AD:EB:C4:EA:B1:80:5A:25:71:5B:2E:AD:30:A8:8A:B2:58:D2:71
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A841171AFFED812F3C0A793C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0d8fec9f-8cb4-3884-a230-e8ab6702d6e4.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:71:af:fe:d8:12:f3:c0:a7:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2ab56cb7-3791-4f89-9623-b8c1c77dd197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fe:64:40:00:c8:56:9a:33:f3:da:e7:6f:92:
                    78:fc:48:c0:63:ae:67:ba:cd:f6:bb:37:93:dd:e2:
                    8e:a5:77:2f:a5:31:b8:a3:72:b9:70:c5:04:df:62:
                    f8:cc:5d:ce:a2:fa:62:18:34:cd:ab:e1:bb:25:f8:
                    b2:80:df:06:f9:e6:06:e6:36:49:55:07:8d:14:1a:
                    13:74:20:cd:27:e8:4d:45:10:e4:4d:1f:de:11:69:
                    85:36:db:fa:49:8f:2b:54:60:36:cd:d3:2b:f1:1a:
                    db:86:e1:2f:b1:ce:66:d9:49:b2:ae:f8:8d:8f:2b:
                    81:3d:cf:ca:52:39:26:9c:1f:5d:ce:14:1c:50:fa:
                    20:e0:6e:27:bf:ab:c7:0b:c1:86:99:30:f4:82:03:
                    b8:49:5f:1b:7e:b0:2f:33:4c:38:65:8b:2a:1b:68:
                    34:0f:0a:ee:a7:b0:50:7f:b5:3f:c9:c0:7c:bf:f6:
                    7c:e0:83:73:1f:e5:07:60:d6:c7:9a:fa:17:93:3f:
                    88:78:53:e0:5e:e2:50:25:61:c4:4b:a5:e2:44:31:
                    6c:46:47:0e:00:db:ea:19:1f:0e:9a:01:31:26:e4:
                    05:64:8a:9c:2a:05:b9:c5:4a:48:e9:82:6f:75:0a:
                    1c:f0:03:3f:1a:5b:ac:bd:95:0d:1a:93:5e:b8:9d:
                    a2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AD:EB:C4:EA:B1:80:5A:25:71:5B:2E:AD:30:A8:8A:B2:58:D2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0d8fec9f-8cb4-3884-a230-e8ab6702d6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5a:aa:f1:8e:7d:6f:50:2e:91:80:b9:c5:3e:57:e1:cb:0c:
         20:32:79:7e:73:38:f3:60:97:66:f2:6b:69:dc:26:45:6a:e9:
         01:82:b4:34:a7:4a:50:1b:ac:4f:9a:40:37:0c:5a:a8:ed:43:
         69:50:34:10:04:10:a2:78:11:07:03:12:0d:82:20:f4:63:bc:
         a3:5a:27:6b:b1:cb:49:6f:84:8f:3e:c0:73:40:d5:4a:df:f5:
         f8:4d:1a:fa:48:c1:b9:b6:7b:8b:d2:18:af:e4:93:63:d3:4b:
         ac:3b:d5:2b:52:9d:6f:9e:66:3d:48:20:d3:61:a3:ef:1e:21:
         67:e0:da:69:04:8e:a9:cc:3f:0e:c8:a6:60:fb:d4:9a:d0:98:
         5a:8a:99:9b:21:1c:dc:6e:3e:24:b2:ca:31:ef:71:00:ff:c0:
         85:2d:f2:78:27:de:5f:0e:88:c1:21:54:48:7f:ae:c6:3e:e7:
         af:90:d9:da:0d:44:5f:98:6a:f5:7f:1d:bb:f6:83:5c:d3:27:
         5e:75:25:03:67:37:5d:b5:f5:36:3d:e4:24:27:cf:cc:fa:ea:
         9c:2f:fb:ac:e3:29:92:16:50:fb:80:96:2f:ba:f2:0c:39:b5:
         c6:1a:59:b7:47:37:04:97:e9:16:81:e3:4a:07:0e:f7:04:2d:
         d8:42:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:24:09 2025 by rpki-client