Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
File:                     35407d11-6502-35d8-b8f0-6eecfea064d3.roa (raw, json)
Hash identifier:          6ZgnN2bQHc/h5TUwOfhXp92EfBGn04WEehOafNlHFz4=
Subject key identifier:   95:AE:6D:D9:83:C1:82:98:CF:69:AB:F8:F4:0E:D5:47:ED:59:4A:6B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A8412373502E3D4FA882898A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:37:35:02:e3:d4:fa:88:28:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=11143fc6-c5d9-4e07-a890-aa7cedf86162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:98:37:1b:2c:b3:1f:48:74:1e:78:2b:c9:
                    17:01:e5:dd:0c:99:2b:ae:5d:6f:b7:a2:8d:e4:3c:
                    db:d1:98:c4:c4:4a:a1:79:36:12:1b:c4:d6:26:48:
                    5b:86:ef:57:2a:05:5c:df:bf:7a:0a:c3:d3:dd:54:
                    3d:35:8b:c3:74:61:a4:93:21:0b:f7:7b:76:99:e1:
                    cf:b2:e7:f8:8c:33:56:f2:26:62:eb:70:c9:7d:3e:
                    79:ef:c0:73:2a:50:98:38:aa:73:32:a9:0b:85:74:
                    24:2c:64:25:50:fc:66:df:d5:1a:9f:ff:1f:15:48:
                    5b:4c:6e:2f:fd:1c:83:5d:34:e0:f5:c4:fa:c6:e8:
                    21:33:f2:5b:3b:a3:84:8f:32:61:fa:65:74:4c:7d:
                    37:c4:eb:58:4f:08:3f:8c:2c:2a:d8:4e:7f:aa:7f:
                    ca:53:be:b4:66:c1:37:b4:ef:3d:f3:36:e6:11:a3:
                    df:a4:7a:31:31:33:f6:fa:36:9f:78:b9:ac:18:ff:
                    06:7c:af:6a:36:a8:89:f3:2c:72:d0:bf:0b:44:c1:
                    91:9d:8d:59:25:74:cb:72:86:47:85:27:b7:8b:23:
                    a7:5d:3f:77:43:c8:07:bb:00:75:9d:e1:f6:ce:a9:
                    c6:26:02:46:5d:ae:03:70:6e:e9:ff:22:2c:07:44:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:6D:D9:83:C1:82:98:CF:69:AB:F8:F4:0E:D5:47:ED:59:4A:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:45:1e:a1:75:65:53:51:e2:56:76:7a:a6:05:bb:82:a9:31:
         03:fa:2d:f1:2e:0a:3a:0a:b6:d1:5b:88:6b:7a:57:95:d7:40:
         4f:fb:a3:6e:f0:c9:d1:48:ba:8c:c6:9e:15:32:b1:3e:ce:35:
         c0:c0:c4:66:90:6f:25:02:4b:fe:2b:f1:cc:45:e1:e6:7d:7e:
         d7:78:0c:4f:ee:56:18:cd:1a:8c:16:c6:0b:7f:e7:7e:c7:61:
         3b:8f:6b:f9:46:df:80:6e:24:bf:61:95:1a:99:c3:77:a0:bd:
         94:32:d0:86:47:65:bb:d0:83:ab:ac:c6:9a:8b:49:c0:e7:66:
         85:38:89:27:a0:d6:32:59:d9:bb:db:f5:71:e2:b4:81:67:96:
         35:13:28:ef:64:7c:b2:45:98:da:e0:5f:d4:c2:e1:98:a1:a5:
         c6:61:9d:6e:27:bd:e8:bb:04:ec:f4:6b:49:eb:11:a7:73:9c:
         39:c2:3d:ea:d6:a0:e6:da:b6:db:6b:fa:36:86:be:f8:67:b8:
         1c:d8:b8:5f:34:ee:bf:05:59:55:fb:8c:55:78:72:a2:d4:30:
         f2:f4:65:34:9d:19:43:71:af:1e:e5:2c:f3:8d:63:51:d5:c8:
         63:72:6b:d0:28:d9:ab:97:14:68:75:f6:a6:8f:4f:7d:b9:49:
         c1:a7:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:33 2025 by rpki-client