Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1e169c94-a0b0-3e45-8465-d50153a96743.roa
File:                     1e169c94-a0b0-3e45-8465-d50153a96743.roa (raw, json)
Hash identifier:          VSGGAz5hBthij5LEAA3c/6vh0gCpS1PmAlySGt/5z0Y=
Subject key identifier:   64:36:C7:A6:88:59:92:98:E5:13:28:AB:76:27:CE:47:CF:9E:9F:89
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B956B039D9E5FB0A21600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1e169c94-a0b0-3e45-8465-d50153a96743.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:95:6b:03:9d:9e:5f:b0:a2:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=0f381d84-e3e3-4c3a-bdd4-167d8a6c5e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:04:fc:18:6a:50:6f:b5:ae:45:23:8e:38:5c:
                    17:bd:f6:90:5b:1e:01:88:32:33:30:26:13:b9:ce:
                    7b:e2:53:7f:6e:cf:16:e0:af:59:e0:0d:bd:70:a3:
                    51:81:bb:9c:22:a1:c9:13:c2:8f:9f:8f:45:5e:2f:
                    c1:5c:1e:f1:a0:88:15:07:96:4e:9a:2e:66:58:d5:
                    36:4b:5a:75:04:2c:91:b0:6c:38:48:d9:04:0d:f0:
                    b1:a0:7f:40:fa:3b:ae:8f:00:3c:b9:0a:c7:57:f2:
                    83:25:ab:58:38:ae:59:c1:ac:bc:61:a6:39:1d:f9:
                    8b:59:c5:cc:b6:76:22:95:64:b4:cd:65:f6:61:d9:
                    43:d0:a8:d5:93:a2:62:8b:c5:58:dc:9c:e7:b1:99:
                    8b:6c:9f:1c:d9:a6:3c:d6:3c:5a:71:d7:60:f4:85:
                    86:a4:c8:14:ac:57:49:84:03:8d:87:26:c0:e3:4a:
                    12:46:13:91:82:4b:ae:af:e4:d3:08:52:4e:e9:ed:
                    b3:92:d6:7c:c8:03:62:de:5d:c9:30:0d:20:06:0e:
                    83:2c:71:9a:22:b5:fa:45:37:41:17:ee:c7:20:8c:
                    3f:14:62:d7:d8:f9:dc:32:54:57:13:6a:a5:c2:45:
                    1a:d1:3f:77:8e:4e:cc:ef:ef:0a:28:93:81:de:ba:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:36:C7:A6:88:59:92:98:E5:13:28:AB:76:27:CE:47:CF:9E:9F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1e169c94-a0b0-3e45-8465-d50153a96743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:7c:59:85:a2:64:f4:61:85:dd:db:b0:b3:a0:fe:56:2c:
         01:89:19:28:75:f5:25:36:05:07:fc:7e:d8:94:3e:e8:51:10:
         04:f4:47:1c:0c:8a:16:88:38:e4:a3:88:3f:24:12:f8:84:83:
         f3:f4:e3:5f:64:89:57:b6:d8:2a:f3:6f:90:55:76:3f:d8:b9:
         57:6f:b3:5e:5f:43:2b:85:03:23:37:86:6d:05:0f:94:46:5d:
         c3:aa:c6:5a:3f:b8:f2:ff:1b:4f:63:89:3e:e0:a1:0d:36:17:
         1d:3c:69:4e:9e:b0:6d:0b:d0:6d:c2:88:5d:35:9b:a2:e5:73:
         6a:66:9a:42:11:2d:3b:6e:52:cf:50:2c:78:84:60:b3:c4:d9:
         8d:01:2b:5f:aa:03:51:43:0c:99:09:0f:c0:f4:0a:fa:84:85:
         6f:fc:f1:57:b0:ed:c8:6a:8e:93:73:5f:d1:c4:ab:19:53:09:
         5f:6f:6d:99:e0:e2:3c:d0:ad:47:67:37:48:1f:9f:50:17:6b:
         98:19:1f:eb:cf:56:e9:e5:7f:81:04:f0:33:06:22:82:e3:e7:
         74:06:3e:02:ff:2b:3f:bb:5a:6b:ab:55:6d:70:91:24:88:a1:
         81:da:8f:70:e2:4c:9b:b4:6a:80:84:4b:20:67:cc:9d:23:39:
         aa:ee:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:25:38 2025 by rpki-client