Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/481daa77-faac-3ed9-9188-45c9619ecd48.roa
File:                     481daa77-faac-3ed9-9188-45c9619ecd48.roa (raw, json)
Hash identifier:          xtX7h6yYPTCh/P9JNIbeU5oDLS53XPoHbtNnoFMjCic=
Subject key identifier:   10:13:E6:6B:9C:85:95:DB:E1:E7:54:EE:07:ED:74:67:F7:3A:F2:E8
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B9624F4C1D3E76D2C6080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/481daa77-faac-3ed9-9188-45c9619ecd48.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:96:24:f4:c1:d3:e7:6d:2c:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=7368403c-fb53-4caf-8ab0-f6fbb3f85a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:c8:a0:e2:d8:cd:2e:88:8c:9f:e6:38:bc:
                    22:bf:2a:69:bc:ac:30:28:48:f0:83:47:97:ee:0d:
                    47:56:35:d1:a9:a5:c0:1b:21:93:2a:fb:d9:40:e4:
                    f2:51:19:e4:b0:53:ab:0b:46:7d:31:43:51:61:55:
                    29:3a:06:3a:f8:64:bb:47:f9:92:b7:cb:6a:dc:72:
                    65:7e:51:7f:59:5c:1e:ce:59:ee:6a:60:f0:fa:40:
                    6b:6f:c3:90:4f:69:39:29:8d:a5:cd:91:fe:67:5b:
                    d8:ba:e5:09:63:27:5a:cf:23:2a:b0:d5:cb:b8:ba:
                    1a:03:94:d2:bf:50:a9:28:10:5e:88:91:1e:11:a1:
                    3c:4b:53:cf:f3:5e:22:9b:26:30:88:98:d2:c4:05:
                    11:35:2e:4f:43:34:84:68:a1:06:51:8c:21:63:65:
                    7a:fb:3f:9a:ec:29:59:b0:37:92:ed:0a:2f:64:6b:
                    65:77:06:61:ed:2c:38:45:1a:e6:80:69:6e:32:0e:
                    50:e2:cd:7f:8c:7d:8e:fc:27:dc:6f:b7:ca:83:3b:
                    54:4d:fa:bf:1d:b9:da:d3:06:7d:a5:63:2a:c8:f3:
                    5b:31:51:36:74:a6:54:4d:51:8d:68:d1:63:f5:a7:
                    e9:f5:d2:20:f0:7c:7e:49:32:7e:85:e8:b3:77:6e:
                    f7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:13:E6:6B:9C:85:95:DB:E1:E7:54:EE:07:ED:74:67:F7:3A:F2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/481daa77-faac-3ed9-9188-45c9619ecd48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c0:0e:85:b4:8a:d3:a6:5a:3c:08:85:e3:d6:30:bd:14:1d:
         8d:0b:79:af:f8:46:db:1b:b7:d7:13:52:f0:bf:b6:a7:a3:e3:
         71:4f:df:a2:84:24:63:17:a6:c8:6d:92:97:11:41:63:30:ad:
         87:13:27:ed:12:60:fd:7c:74:ac:eb:bf:b0:ac:84:80:35:55:
         3e:e4:c4:3f:7c:33:22:b8:17:91:cc:49:2f:d9:b6:cc:ce:a2:
         07:eb:a0:a9:34:64:19:b5:35:1a:bd:7b:2e:cf:df:48:68:3c:
         e3:3e:38:45:24:74:bd:d8:3a:77:a5:1a:03:2c:ed:cd:3f:89:
         e2:ae:5a:e2:31:8b:1b:89:3d:93:26:d4:87:00:4a:94:c3:48:
         e4:87:24:7a:e8:cd:cb:ca:9a:c8:b2:4d:04:f0:6b:a6:13:34:
         0f:a4:e2:0c:4b:5b:66:bd:34:37:67:f9:f9:8d:08:e6:fe:25:
         60:5c:db:6d:02:33:cc:5b:ad:81:38:f3:63:f8:cb:d3:7f:64:
         44:3c:ca:3d:04:08:5f:c1:f4:62:b3:db:ab:47:5a:fe:4c:55:
         bc:c1:a0:d2:68:35:20:e0:d9:a4:b6:46:16:ed:27:4c:e4:29:
         d4:8f:94:19:fa:96:83:19:a7:cd:6d:a7:0b:61:3f:8b:da:59:
         79:e6:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:29:03 2025 by rpki-client