Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2325714f-756e-34d7-8f00-0408d4f6909b.roa
File:                     2325714f-756e-34d7-8f00-0408d4f6909b.roa (raw, json)
Hash identifier:          viEFnZSJklvLSxY8OKRCr90eyTTc1WnEKuWVJ9h30rY=
Subject key identifier:   2B:23:50:36:F5:3A:7C:23:91:45:76:16:DA:5A:BC:6D:C3:FF:50:1C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A84122D0A6429177017F916C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2325714f-756e-34d7-8f00-0408d4f6909b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:2d:0a:64:29:17:70:17:f9:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=cf318f95-202b-4925-b7c5-cb4b319380da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:8d:2c:e5:82:8f:c0:ea:56:fb:84:85:1f:
                    14:ca:b3:b0:f4:47:4e:5a:a7:7e:ac:47:be:9d:36:
                    24:4a:8d:46:0c:e2:21:96:68:80:a3:6a:7d:2d:52:
                    9d:7c:fe:53:35:a6:87:81:b8:1e:aa:fd:d0:63:8d:
                    dc:d3:51:f4:fa:09:91:dc:0f:2e:5d:5a:a5:35:af:
                    28:de:6c:0d:7e:2b:3b:41:6e:54:1a:57:a0:5e:36:
                    a6:28:6d:89:f0:39:ff:d3:86:d2:7f:96:6b:b0:da:
                    73:8a:06:9f:70:9b:9c:fe:3b:9f:63:75:cd:2c:76:
                    77:57:ad:86:67:2a:4f:c0:76:88:83:a0:92:24:1a:
                    26:b2:b2:33:b8:c7:42:ff:93:9f:fc:01:1a:34:f4:
                    95:3e:f6:e3:0d:98:76:ab:d5:33:59:22:09:0d:f7:
                    12:8d:89:15:85:f8:07:73:6a:ee:92:7c:d2:54:17:
                    1e:55:25:1f:b6:c5:c2:4e:43:73:47:a7:a0:4b:79:
                    49:95:2f:24:85:89:cf:47:0d:fc:ab:6c:5c:7f:50:
                    1f:e3:ca:64:8a:1a:ac:b7:0b:e6:6f:d0:9a:e3:79:
                    e6:68:31:f7:b8:3c:cf:db:95:91:d3:5f:b9:be:02:
                    5d:3b:7a:3b:02:6c:b9:cb:ba:40:a8:43:a4:00:02:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:23:50:36:F5:3A:7C:23:91:45:76:16:DA:5A:BC:6D:C3:FF:50:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2325714f-756e-34d7-8f00-0408d4f6909b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c6:b4:00:31:c4:d1:c4:1d:a3:bb:a5:89:8a:8f:a8:13:8a:
         88:c5:74:34:06:8b:ae:26:ab:bf:75:18:34:1c:68:d5:f1:bd:
         31:9a:63:67:ad:fe:03:f0:43:57:90:e0:62:45:75:03:6b:97:
         eb:6b:89:64:ec:ca:35:41:80:30:5c:76:a8:f6:af:78:f5:4c:
         ed:a2:12:f9:6f:64:79:51:02:34:e8:0f:c1:8e:20:55:59:69:
         b8:55:96:d5:66:39:f3:4b:a9:9d:13:e8:85:9a:d6:69:a0:3e:
         2a:63:6a:dc:78:30:ed:f7:e0:df:f4:18:a7:05:78:d3:94:3d:
         e3:ed:ef:f1:f6:68:55:c7:ea:e2:03:f9:7a:eb:4b:e4:b0:31:
         5a:82:6a:7b:c8:bd:76:ce:83:4a:71:6f:a3:71:2f:8d:e1:c4:
         72:00:c4:56:2e:d1:96:9f:af:c8:54:e1:af:0f:3d:98:e1:06:
         3c:84:ae:18:17:39:97:7a:b8:2f:1f:fa:ae:0f:70:12:a8:48:
         5a:f3:1a:f9:db:82:be:82:6d:1c:7e:36:fc:ef:ce:72:84:5f:
         9f:67:76:3e:f8:c0:3f:6a:c2:f6:71:91:ed:87:71:a4:df:04:
         53:2e:7c:00:f7:8e:79:85:ec:c4:26:31:f2:b5:b5:00:c6:d2:
         cd:62:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:24:57 2025 by rpki-client