Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa
File:                     4134f950-28af-3072-bb21-219f9bd36984.roa (raw, json)
Hash identifier:          GRDwZUCVpvjzpenzoD999Mreii+HtKhspYHsag4kzSo=
Subject key identifier:   26:62:EC:EC:AE:35:12:3F:38:E4:30:76:D2:C4:B8:18:3B:C8:E6:52
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B6B2F51EDC195F7EBC3C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:6b:2f:51:ed:c1:95:f7:eb:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=84d9cfb3-3c81-48e3-948e-161be6fe54a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:21:fd:c8:64:9a:a7:a5:82:ab:34:52:91:
                    24:55:7e:59:f8:cd:75:3e:73:96:3a:a7:3e:db:1e:
                    49:bd:06:3d:0f:49:ca:6f:63:38:a7:2c:dd:d4:43:
                    3d:1f:ac:75:94:92:3b:89:7f:4b:c2:5c:77:86:09:
                    e4:d5:85:43:65:ad:f7:f6:91:88:9a:8f:0c:30:ee:
                    64:9e:59:6e:c8:8b:ab:d1:4f:da:72:c4:02:3f:b6:
                    a9:8b:a6:b0:0d:00:35:74:ac:ca:5a:5f:1f:e6:2c:
                    5b:53:d6:f2:ae:03:fd:9a:be:22:0c:95:2c:a3:12:
                    01:07:34:3e:da:53:f2:88:6f:85:6d:09:a8:18:c5:
                    f7:05:69:f8:e7:65:14:b9:07:14:40:e5:b4:73:1a:
                    17:77:78:2d:be:bd:0b:e4:a8:be:b3:9a:3b:11:1d:
                    da:25:46:cb:d2:3d:0f:7e:74:90:9b:0d:f2:fe:a5:
                    ef:03:b1:54:5c:31:c5:2a:72:69:50:90:90:71:ea:
                    fb:21:44:b6:6f:94:b3:2f:cc:4f:10:6c:77:d0:80:
                    6b:19:38:0c:70:c8:68:d4:32:0c:5a:bc:d2:33:ef:
                    5d:db:c4:91:bf:d0:01:51:c0:63:7d:24:22:be:2c:
                    95:e0:b3:ff:28:7f:be:79:38:e6:d4:1e:05:f0:44:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:62:EC:EC:AE:35:12:3F:38:E4:30:76:D2:C4:B8:18:3B:C8:E6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9c:72:ad:e9:b2:62:e3:5a:ab:7b:36:2f:64:03:17:31:7e:
         8c:6c:12:80:75:eb:c4:66:45:a9:35:c3:37:1e:08:b3:a9:69:
         ef:d8:09:8c:78:13:e9:29:ae:e7:46:b5:8c:90:d6:22:f1:15:
         22:b7:cc:6e:2c:08:bc:e0:7a:dd:ff:ee:3a:cb:f7:3d:36:98:
         09:bc:3a:ba:e4:d3:c3:3a:65:79:e6:3b:5d:ea:ee:90:0b:ca:
         ca:2a:96:f1:5a:7a:37:29:10:97:25:cc:2b:2f:42:f8:f2:0f:
         75:14:21:7c:61:54:27:d4:b7:dd:6c:91:04:0c:98:5e:bd:c9:
         34:e4:46:9a:07:62:81:96:ae:9e:4f:56:4b:80:20:2b:26:28:
         04:ff:32:f0:e9:84:d4:be:0c:0e:a7:a1:27:d3:69:23:1b:40:
         bd:c9:e4:67:d6:22:9b:be:bc:75:69:73:9d:2d:2d:83:15:97:
         89:ed:75:17:c4:41:f9:ef:2a:4a:73:6e:eb:f7:c9:ca:48:99:
         32:27:76:73:9f:a1:9c:65:1b:98:39:5d:57:03:88:7f:3d:d0:
         cb:cb:5e:25:b5:96:0b:a2:9f:6e:6a:5b:31:f4:b9:e6:37:69:
         f3:d4:95:e0:d3:e0:45:fa:73:41:d9:15:7a:e6:d1:02:46:33:
         26:13:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:35:51 2025 by rpki-client