Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1656d45b-e397-38c9-bb5e-65ed9ec817d3.roa
File:                     1656d45b-e397-38c9-bb5e-65ed9ec817d3.roa (raw, json)
Hash identifier:          nrjABKrFfbvRN2r5j/LmyqqEpotsNJ8MELVYmu1EGCs=
Subject key identifier:   81:C1:99:69:0A:B8:4F:26:96:C2:1C:42:86:F4:97:03:9B:3C:E9:69
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B7875C4A604E85B048600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1656d45b-e397-38c9-bb5e-65ed9ec817d3.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:78:75:c4:a6:04:e8:5b:04:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=91118e53-e97e-4e6e-b0df-aa93603b89e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:d3:7c:f3:34:12:0d:b9:33:c5:c0:77:69:
                    df:34:a2:f0:bf:3a:e8:aa:f7:8a:45:de:a5:9d:65:
                    17:14:74:da:6d:da:b4:a0:de:ae:ed:3a:b6:2d:23:
                    09:1e:95:2d:e6:46:f9:d2:09:92:bc:95:7a:db:2c:
                    d2:87:66:36:d0:22:1c:99:2e:73:6e:57:59:58:4a:
                    b2:5e:b9:14:dd:da:4f:f6:9b:b2:0a:78:ed:e7:81:
                    cd:f9:59:ba:e8:73:0e:1b:a8:b4:d8:5b:8f:1d:97:
                    17:22:6c:f2:f4:d0:48:6d:a9:06:37:00:df:b7:f4:
                    f0:2c:57:5e:1f:42:b0:97:07:cf:3c:a2:79:77:1e:
                    81:a6:1c:e5:c0:bd:77:94:d9:75:ce:50:df:5d:9e:
                    44:ef:9a:8c:7a:5e:95:00:d2:b5:14:7f:b3:25:48:
                    83:e2:77:8e:cf:8d:c8:b3:eb:d5:42:b1:65:97:a4:
                    1b:fb:e0:b4:27:be:b6:ad:e0:9b:03:f4:8e:2b:73:
                    15:e4:32:79:63:9d:b1:27:60:42:07:18:dc:4f:5a:
                    a7:98:11:39:26:c1:d0:0f:dd:63:a9:97:8e:23:97:
                    13:43:c0:99:e2:96:e4:31:11:ce:6a:cf:90:07:17:
                    64:0d:99:7c:2c:38:21:c6:a0:10:23:c8:e5:32:38:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C1:99:69:0A:B8:4F:26:96:C2:1C:42:86:F4:97:03:9B:3C:E9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1656d45b-e397-38c9-bb5e-65ed9ec817d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:19:ce:2b:ee:3e:51:05:ad:a1:b8:3e:a0:16:61:97:e6:3f:
         54:67:28:20:52:5a:12:be:1a:a8:3b:b8:45:2a:95:63:d3:20:
         ec:89:fa:1c:31:3c:59:0f:bc:60:c2:96:9b:65:c1:55:ac:d5:
         9f:5f:de:bc:fe:3b:a8:be:14:11:dc:b4:4c:58:fd:1c:f2:be:
         35:04:81:d6:c4:ad:2c:30:25:55:f2:67:b6:bc:a8:43:39:e5:
         fb:fc:72:41:a6:c8:e1:3b:a6:50:d5:40:48:68:f9:b0:67:dc:
         c4:5d:78:c2:51:4e:ad:c2:39:c3:da:9a:2e:63:21:99:ae:1f:
         75:ca:57:c3:8b:32:52:45:b8:0b:3e:3d:6e:5c:14:c4:fe:ef:
         cd:dd:a1:70:95:82:a3:4a:ef:ea:de:e6:b5:ea:20:a7:ea:74:
         65:93:70:36:6f:a8:ce:70:bc:95:72:a4:82:88:7a:14:fe:5d:
         d7:b3:24:c5:09:4c:2f:02:84:5e:43:8a:50:0e:4f:06:70:70:
         b7:64:9f:ef:2f:99:54:e5:b2:4a:32:81:c5:b6:d0:e3:a6:8e:
         3c:72:6c:bf:e4:b5:f8:97:2c:3f:4b:ac:a1:49:66:f4:d9:bb:
         12:8d:9e:dc:1f:7b:ca:34:b4:0b:fd:65:21:08:4a:ce:67:d8:
         5e:2d:e9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:24:57 2025 by rpki-client