Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa
File:                     21908a76-1951-32c5-96cf-7506f81108ff.roa (raw, json)
Hash identifier:          G/n5rR52DIIM75i+c3AFXvORVC3DE6Fgg/Ldhz3mVA4=
Subject key identifier:   95:7B:A3:79:52:1E:89:4A:99:65:22:16:48:52:A5:F6:69:F0:A5:26
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A84122880295865BE79964900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:28:80:29:58:65:be:79:96:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3070f0db-7050-4b9b-93af-23a18639f88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:b5:7b:05:5c:c6:e6:89:11:c9:03:04:7f:
                    f5:49:29:60:bb:29:c2:74:ee:9e:0a:0a:b2:19:33:
                    e0:df:21:87:4c:72:ef:db:3b:5b:08:fa:bf:25:eb:
                    db:0e:86:cb:ce:02:1a:ba:a4:c0:89:cb:03:90:e8:
                    e7:1e:9d:1f:6a:93:d7:f3:89:3c:49:39:07:c6:08:
                    6b:9e:97:43:c2:a2:13:23:83:28:2c:f3:8d:85:cb:
                    f1:6c:91:49:e4:e5:28:12:bb:b6:c2:42:a1:2c:90:
                    cc:e5:0f:70:cc:09:69:6b:8c:7b:73:0e:04:50:0d:
                    3b:d2:fe:22:a7:78:ac:dc:f4:9b:23:4b:6d:b9:4d:
                    21:f8:05:db:7e:e3:17:a4:e0:f5:56:01:24:a4:45:
                    e0:17:af:a1:29:f4:2f:d6:a4:f9:65:06:68:eb:fa:
                    11:ce:78:c2:93:3f:e0:9d:6c:e5:47:59:f8:0a:aa:
                    e7:0e:1e:47:1f:15:2e:7a:db:ea:ae:2e:1f:27:8d:
                    59:4d:c2:48:0c:cd:87:61:e9:5e:33:15:48:ef:a2:
                    03:7e:5c:c3:b5:c1:76:f6:4c:a8:6b:5a:0b:fe:55:
                    35:c8:f3:39:23:e7:bf:c8:ed:b2:1d:df:42:43:8b:
                    80:83:3e:8c:28:ff:32:47:8b:93:88:d7:1c:9a:a7:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7B:A3:79:52:1E:89:4A:99:65:22:16:48:52:A5:F6:69:F0:A5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7f:5b:17:f9:a8:d9:e5:4c:bf:a2:47:ef:2d:32:78:48:00:
         3c:77:28:1e:5b:42:cf:bb:8b:3c:9c:5e:d0:0b:fc:68:ef:c2:
         c9:cc:0c:d0:02:30:80:7d:a5:22:66:fe:03:0c:c0:84:cb:93:
         0f:d7:89:c9:55:83:76:8c:d3:f9:ff:ad:e4:b0:b1:10:07:24:
         27:da:78:ef:35:bf:4b:cc:61:0d:78:a0:14:8d:98:34:8f:a6:
         c8:72:fd:f1:3f:0b:2f:53:7a:55:22:dd:f9:9f:ad:77:9f:1b:
         a5:e9:5a:41:8f:ec:8c:32:73:f4:79:87:a6:b7:78:75:b0:34:
         da:38:13:8a:17:8c:53:8f:8a:ed:4c:bc:81:3b:d8:80:66:be:
         8a:a2:88:bc:4d:56:1f:ab:a6:36:af:4b:d3:03:41:02:eb:2f:
         bd:ab:a4:10:79:20:fd:82:48:df:c7:8b:d9:1b:f9:38:6f:82:
         af:d9:c5:9b:89:59:ad:24:28:f0:73:78:3b:74:c4:67:e0:c0:
         6b:44:0a:62:93:6a:cc:6b:a9:eb:d4:c6:c6:4f:35:94:d9:d1:
         f2:09:6c:b2:da:52:9b:47:e7:d4:9b:ff:01:5c:e1:33:8e:31:
         08:4d:fd:60:8b:dd:d7:e9:62:11:70:84:61:f7:74:82:b1:61:
         cc:37:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:32:12 2025 by rpki-client