Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35c38a7e-738b-346e-a848-9eba35a136f2.roa
File:                     35c38a7e-738b-346e-a848-9eba35a136f2.roa (raw, json)
Hash identifier:          FOdFhTPDM2Qok+rOodWxE4TWsA90yRGeveReeK05ugo=
Subject key identifier:   31:AD:54:90:90:8A:B0:7D:0F:8A:62:CE:C2:DE:60:F0:95:D9:E0:FA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A8412296F38C9E953C12C8880
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35c38a7e-738b-346e-a848-9eba35a136f2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:29:6f:38:c9:e9:53:c1:2c:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=54dce372-b623-4f4c-97b8-d7b2888c961d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:87:60:68:d4:95:55:5e:4e:f4:18:14:2a:
                    ee:4a:69:de:f3:62:2f:8e:3f:96:07:fa:d9:ce:82:
                    21:c5:ad:1d:ca:9b:76:da:08:4e:50:a1:ac:6a:40:
                    57:5d:8d:71:c2:ef:4a:e3:ec:bd:ea:71:71:96:ce:
                    b7:b0:71:f7:43:87:62:64:6c:bc:3b:61:a7:7a:3c:
                    99:7d:e9:ca:98:38:ec:5d:03:90:9a:e8:83:55:ab:
                    d7:63:f7:d2:10:1c:c3:c2:4b:87:2a:0c:11:26:17:
                    3a:9c:a3:08:e9:af:56:77:d2:8a:90:87:4b:c3:cc:
                    e9:41:38:59:f8:fa:6b:c6:dc:e3:8b:c7:dc:8d:14:
                    df:d7:1b:20:43:07:2d:7e:8b:0e:c6:db:80:ed:55:
                    ae:fa:ff:77:53:7c:82:af:4c:96:64:ca:9a:22:10:
                    e7:5b:5d:95:19:5a:60:3a:d4:76:e7:fa:89:80:4d:
                    20:24:e4:b9:1c:f1:51:88:0d:f6:d1:19:df:45:8e:
                    68:dd:23:6a:cf:ae:05:0e:66:77:62:56:c5:d6:e3:
                    5f:5b:ca:d8:19:02:54:6e:e8:94:04:b9:e8:3e:e0:
                    2a:89:64:42:1d:b7:c5:1e:92:dd:fc:01:d6:e0:bf:
                    24:3f:93:b6:7d:a1:ce:9e:fc:01:4b:72:04:75:bd:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AD:54:90:90:8A:B0:7D:0F:8A:62:CE:C2:DE:60:F0:95:D9:E0:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35c38a7e-738b-346e-a848-9eba35a136f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ad:29:04:8e:a3:3f:e3:b3:02:31:3e:75:b2:cc:ca:c8:ee:
         bb:20:3f:45:33:bf:ab:c3:36:c4:f8:bb:13:ae:ea:a6:02:1d:
         dc:88:59:37:a2:f1:e6:f9:c6:5a:22:88:53:02:a3:49:fe:23:
         b5:5c:fc:41:22:d0:fd:7c:db:e4:54:33:32:22:3e:52:a3:af:
         c9:31:ee:6b:8b:95:20:42:49:a4:ce:6d:ed:52:aa:45:cc:20:
         99:4b:f1:0e:41:fc:78:cb:9d:6e:5a:ba:bb:d6:52:75:b0:24:
         d8:64:93:3e:d5:e3:4f:a9:38:5f:99:c6:99:ef:a0:45:3e:1c:
         e9:8b:5c:1c:ee:b2:ec:29:e3:b3:d7:08:b1:d3:06:d1:03:fb:
         77:10:e0:11:e7:f2:63:7b:ab:0f:f3:9e:45:15:f9:20:50:57:
         e1:f1:94:a6:85:c5:26:3e:84:10:52:f5:14:8a:10:f4:76:7f:
         74:76:8a:c2:d8:88:ec:09:40:21:0a:40:8b:08:4d:16:df:d8:
         36:b3:2f:18:c4:c6:f5:7e:f1:9f:b6:7f:b1:91:37:f5:12:fe:
         7e:f9:cd:f7:fe:3b:e0:60:22:34:09:d9:cf:77:34:ec:f3:2f:
         b3:53:1b:bf:b7:41:f3:36:11:17:54:ac:b6:23:e9:99:a1:8a:
         d5:7c:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:20:13 2025 by rpki-client