Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2bfa52c4-12bd-3269-86da-c8ff98786228.roa
File:                     2bfa52c4-12bd-3269-86da-c8ff98786228.roa (raw, json)
Hash identifier:          phLbnNKFgoCWARMmMAubxakb57Q02KBC6pci7dmA+4w=
Subject key identifier:   D1:A0:EC:8C:AE:46:F3:FC:AA:C7:80:31:1E:8C:B9:04:97:A6:82:6D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B8BF56B7B669D5539B040
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2bfa52c4-12bd-3269-86da-c8ff98786228.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:8b:f5:6b:7b:66:9d:55:39:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=78a88bd0-0b36-47fe-ab3a-956649c7a867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:4a:67:01:dd:ce:a7:b2:5e:c0:c8:96:3c:
                    6b:35:36:68:c3:9d:9d:0f:58:fb:5a:6a:67:24:97:
                    1c:80:81:3c:87:45:86:2b:18:ea:af:b4:e3:da:e3:
                    52:40:e3:d7:be:b1:60:7f:08:30:d1:c3:bc:fa:72:
                    b4:32:16:80:1b:4f:53:ac:63:65:66:ef:2b:1b:d3:
                    12:8e:6b:f7:f7:78:41:5a:5e:56:5e:2a:b9:57:a0:
                    e5:aa:2c:1a:3f:67:53:45:bf:9b:5b:e4:df:c8:08:
                    77:bd:3a:4a:5d:a2:95:38:8b:d6:16:a0:47:06:6a:
                    81:f6:64:47:aa:41:8a:04:a0:ca:ce:1f:e9:af:bd:
                    6f:6f:cc:5b:51:75:a8:8b:f6:31:67:14:19:bd:20:
                    02:94:a0:c2:5b:63:ae:cb:27:4a:7d:f7:e8:2a:95:
                    65:83:c5:3e:13:f3:01:b6:b0:5d:b2:e0:0f:f8:c7:
                    a0:a4:7d:08:c7:e3:cb:3b:8e:48:72:5c:b7:90:08:
                    72:0a:91:b2:f8:5e:90:c8:5b:20:f2:3b:35:a2:9b:
                    d2:1b:2e:d2:b1:02:3d:6f:8e:00:c0:8b:5e:f0:69:
                    98:0e:1c:81:22:4c:ba:66:c6:5f:71:79:41:73:28:
                    1a:a4:9b:fa:44:82:aa:29:57:6d:95:6b:29:cd:dc:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A0:EC:8C:AE:46:F3:FC:AA:C7:80:31:1E:8C:B9:04:97:A6:82:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2bfa52c4-12bd-3269-86da-c8ff98786228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:bb:79:1f:35:5c:27:8b:d6:fb:8c:32:de:03:fc:7d:a2:
         0b:f3:c4:19:f5:3c:b3:97:64:63:66:55:60:67:e3:24:73:38:
         c6:2e:e8:6e:11:a6:95:3c:61:19:89:cf:07:61:58:be:a0:4b:
         76:fb:b6:8e:eb:19:3a:ff:94:ee:87:e0:38:75:a0:36:e4:c8:
         7b:19:74:42:5c:cb:e2:b3:46:19:81:62:b5:82:ba:cc:0a:cf:
         c9:89:ff:65:20:b1:38:8a:7a:ff:e0:de:b4:3e:af:e5:d1:9e:
         f3:d1:6a:3c:4a:d3:57:23:1d:d7:f9:b9:43:e6:d6:24:e1:72:
         61:c8:3a:19:16:f9:80:cc:72:16:60:de:7c:ab:50:02:07:26:
         1f:8d:84:67:c7:cc:86:36:cd:9c:dd:90:ba:1f:4a:52:44:c0:
         35:a0:a3:42:a2:30:7c:80:a6:b3:63:40:2e:8b:5c:f5:c4:61:
         23:92:2e:5f:86:d2:15:cb:c3:4f:98:af:4e:d7:f3:21:56:03:
         ff:7f:9f:46:c4:70:22:07:d3:37:b1:be:0d:71:83:b5:a0:b4:
         c9:dd:73:dd:09:ff:3a:f5:81:21:8b:de:d3:3d:31:01:a3:38:
         8b:9b:d8:23:5a:40:7a:dd:be:e0:8c:f8:1a:17:e0:ff:31:96:
         ce:74:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:26:58 2025 by rpki-client