Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/19c65f5c-605d-3478-970e-f5cb26c087cc.roa
File:                     19c65f5c-605d-3478-970e-f5cb26c087cc.roa (raw, json)
Hash identifier:          xumuN/EU2NteVNdmzAHLAlwndRMs/3ms7FJGOf9yP4E=
Subject key identifier:   6F:C9:8E:35:09:76:EB:9D:E8:E2:E7:32:4B:DF:AA:FB:BF:54:F9:9E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A8412369D3802F0DCEC3154C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/19c65f5c-605d-3478-970e-f5cb26c087cc.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:36:9d:38:02:f0:dc:ec:31:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=22c954c3-3bd2-4f68-b537-25bf094fc352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:8a:08:3a:13:63:d4:5e:81:5b:5a:97:4a:
                    41:a7:d2:ec:8c:38:15:23:84:86:87:2c:67:5e:d7:
                    16:71:ef:6a:0e:80:58:61:82:75:b8:71:f5:5d:3c:
                    7d:de:33:07:ac:be:e5:f7:07:46:3f:31:f3:1f:4b:
                    5c:f1:14:07:02:e1:d3:83:0f:32:ff:f4:b3:68:7f:
                    9c:c7:6d:a4:d9:e0:9c:7f:61:13:52:75:5c:57:63:
                    a2:df:d6:4a:15:27:e0:87:f3:9f:79:f6:10:27:3a:
                    5a:1d:32:c1:0c:f5:fe:9f:ab:cb:24:d0:74:5f:9e:
                    86:d9:4a:c2:c4:c3:83:d4:4e:54:62:65:09:27:f3:
                    49:19:da:81:35:20:fb:5a:5f:eb:a9:08:1b:23:54:
                    48:28:42:f2:a3:4b:8c:48:58:6f:29:4b:c5:2e:38:
                    dc:49:04:bf:1e:96:f1:0a:d2:fc:16:35:7b:4e:19:
                    80:24:c4:51:be:b2:a9:3f:1a:cc:41:b0:20:19:3b:
                    61:11:f2:82:d6:49:5b:3d:3b:b8:1a:3a:a3:63:4c:
                    14:6b:15:ba:85:11:1d:60:34:a6:01:a5:2e:67:0e:
                    a2:a1:6e:91:cd:f8:6a:8c:2e:43:94:c1:a5:58:58:
                    2e:94:f4:eb:bf:40:b1:1c:97:f0:5e:98:be:05:2f:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C9:8E:35:09:76:EB:9D:E8:E2:E7:32:4B:DF:AA:FB:BF:54:F9:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/19c65f5c-605d-3478-970e-f5cb26c087cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:69:9a:5f:da:7e:0d:99:c6:7f:f8:51:29:51:5c:02:98:71:
         ad:ca:c1:ce:a6:b7:e5:9c:27:14:4a:76:98:bb:95:12:ec:69:
         31:f5:0d:2d:2b:99:5a:f5:f3:6d:01:a0:5a:24:a2:8f:4a:fe:
         23:d4:17:be:1b:7b:ef:53:79:41:5e:dc:a8:f7:47:d6:66:11:
         b0:2c:f0:5d:9a:de:3a:93:87:5d:7a:a6:d0:99:ae:a8:7b:44:
         fa:4d:e4:b7:b6:16:72:05:e1:15:fa:de:63:b1:a1:c0:5c:13:
         5a:97:43:ef:02:ea:54:9a:b6:25:35:f2:8b:ad:03:bf:ab:c5:
         8e:c1:2f:2c:b2:5e:7e:76:f9:c9:36:e7:ad:ea:f1:21:d0:41:
         73:69:c1:3b:43:c0:36:a2:e9:24:45:ca:36:79:a5:62:08:ce:
         19:2f:7b:53:6a:36:70:79:5b:b3:70:81:e2:7e:d1:a7:36:45:
         e6:f1:90:72:c1:42:3a:dd:02:71:38:c8:e4:34:9c:75:e2:cf:
         d1:c2:b4:0f:71:6d:69:5c:50:56:ac:a8:57:59:38:64:04:2f:
         31:01:bf:d8:6d:ea:9c:70:51:e9:23:fc:a5:fc:a0:ec:eb:8d:
         62:63:39:d9:d6:10:96:37:37:8c:9c:9d:74:ef:54:de:75:64:
         d1:24:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:21:24 2025 by rpki-client