Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3d4f56ed-6398-3472-a1c1-390242177cb0.roa
File:                     3d4f56ed-6398-3472-a1c1-390242177cb0.roa (raw, json)
Hash identifier:          6blbuV+YYy1+9dI39Pa6FwuCdfCwY3RIXrEJHjv/IzY=
Subject key identifier:   DE:EB:EE:2B:EE:8E:57:B1:7C:39:92:B1:82:45:B4:76:63:26:A6:83
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B93D68ECBC1EE6D60128C
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3d4f56ed-6398-3472-a1c1-390242177cb0.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:93:d6:8e:cb:c1:ee:6d:60:12:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=d4eb1921-c159-4584-bbde-7a66856ba3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:d9:60:c1:7c:18:2e:fd:61:a4:48:60:c6:
                    d6:12:0d:85:b2:13:d8:26:d6:9c:11:1b:96:ed:df:
                    8f:39:38:70:ed:8f:9d:68:dc:ed:3c:c8:da:1e:a8:
                    62:ee:a0:bb:c6:ba:ba:f7:f7:53:b5:cc:60:b2:36:
                    7c:e7:7b:46:32:ca:c9:36:8d:4c:2a:77:f9:0b:f1:
                    42:89:f0:ba:d1:7d:3f:97:54:51:10:78:76:d3:0f:
                    9a:f7:bf:6c:2f:ab:27:3e:5b:1b:8c:33:64:bf:60:
                    47:2d:06:97:ba:88:17:b5:28:2e:11:db:f6:fa:1e:
                    87:e5:79:25:89:67:91:f6:58:99:61:04:e1:54:20:
                    a3:68:26:29:fd:4a:ab:bc:5d:14:52:a9:2d:83:5e:
                    6e:c6:80:99:69:eb:11:ba:07:9e:d4:ad:c5:0c:4a:
                    0f:06:ed:bb:18:42:a9:e8:62:1a:b7:3a:d7:86:f5:
                    74:64:68:6d:43:76:d6:c6:4f:2e:c7:ce:5a:ff:40:
                    0f:4a:7b:a6:4b:45:c1:e5:a3:88:a8:32:3c:47:65:
                    90:cc:b6:78:90:4e:da:f2:f8:52:e8:4a:d8:41:c3:
                    2d:c9:29:78:3b:bc:26:18:2f:c7:55:26:04:b2:ab:
                    89:b3:a5:fc:ff:f3:68:40:4c:b5:e3:b0:b2:4e:d1:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EB:EE:2B:EE:8E:57:B1:7C:39:92:B1:82:45:B4:76:63:26:A6:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3d4f56ed-6398-3472-a1c1-390242177cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:76:da:02:aa:b9:65:2f:f1:97:4a:61:2c:c9:fc:b9:7e:89:
         9a:d0:c2:35:4d:b2:01:06:76:d9:4d:eb:03:b4:47:4a:41:13:
         46:3a:81:d9:de:20:2c:ce:44:ee:d5:e9:48:11:75:77:ac:d0:
         f0:ac:86:41:d0:98:78:f6:c7:e9:59:8d:7b:35:e5:2f:c6:2e:
         0a:f7:5c:b8:11:e7:b3:27:f3:46:3f:90:45:cb:78:97:43:57:
         32:70:ea:7c:7b:d6:e6:95:1d:88:e7:a8:7a:75:f2:eb:09:9e:
         c9:7a:3b:5d:75:8c:95:f6:a9:a0:d2:92:2a:ef:ce:ab:9e:8e:
         3c:92:fa:c0:45:da:68:7a:02:e8:a2:b0:c1:a0:60:b9:c6:d2:
         ee:d8:dc:32:b6:ee:ed:fa:b8:b9:53:24:44:c1:b8:b3:3d:c6:
         c3:e7:b0:5a:fe:83:e8:5e:1e:62:0f:2d:b1:d0:ef:18:66:63:
         3e:6c:00:e3:0b:aa:2b:cf:fa:10:df:ef:33:2f:c5:5d:cc:d3:
         96:e2:95:23:18:10:0a:95:7f:b0:da:4e:8e:37:94:4d:74:20:
         4a:75:82:fd:86:f9:42:bd:21:dc:e8:38:28:7d:53:e9:56:be:
         c1:df:44:ed:34:82:7b:ba:f1:a0:c1:02:7f:bd:70:8d:59:0f:
         27:d2:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:25:40 2025 by rpki-client