Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/511c4fee-d347-3752-b22c-947c770dc9ea.roa
File:                     511c4fee-d347-3752-b22c-947c770dc9ea.roa (raw, json)
Hash identifier:          X7SFgBnCfbXpLicVfPMUHgsMzyLtlkE9jfKU9TYO6y0=
Subject key identifier:   C2:B6:0C:17:3E:29:86:F6:0A:C5:C8:1D:3D:3F:2A:6D:B2:47:E4:01
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B91D64AA43ECAD24E7A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/511c4fee-d347-3752-b22c-947c770dc9ea.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:91:d6:4a:a4:3e:ca:d2:4e:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=93d82a01-1699-496d-b74b-569940ec4e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:2e:0e:1f:84:6c:ab:b1:9b:b9:5f:7b:3c:
                    0a:a9:01:e0:80:43:f0:10:67:86:1c:00:da:57:0f:
                    56:4b:36:f2:a5:00:b5:8a:22:62:54:67:7a:11:31:
                    d8:bd:f1:0f:f6:bb:b4:46:cc:46:05:17:4a:98:92:
                    b3:62:48:b8:cb:33:b3:ff:05:17:0f:9d:b2:e9:2f:
                    43:99:fa:6d:e1:c9:08:ad:f9:00:ca:53:f0:d3:1e:
                    07:99:f0:53:ed:9e:19:15:c1:d1:0a:5e:fe:d9:32:
                    1c:61:ce:5a:9c:28:4d:85:a3:46:5c:1f:81:f0:37:
                    33:36:68:9d:04:ff:d5:ff:24:aa:11:87:7e:3d:c2:
                    32:fe:22:dd:cb:37:c3:db:96:f8:c5:17:31:3f:63:
                    37:02:19:11:62:5b:d5:42:8b:61:1b:b8:b5:15:97:
                    95:4c:50:27:99:3d:61:af:18:23:07:30:33:ea:3a:
                    78:88:27:7f:22:76:b9:66:95:c9:05:2d:1e:7e:08:
                    5f:e6:85:4c:6b:eb:c9:0c:4a:10:73:b0:6f:79:0e:
                    23:d5:58:84:5a:2b:81:a3:2a:66:53:5a:eb:8c:b8:
                    2a:6d:ae:32:01:f1:1f:21:64:bd:13:6e:48:48:75:
                    60:53:04:eb:da:d3:65:ac:29:52:f2:ae:67:46:ff:
                    cf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B6:0C:17:3E:29:86:F6:0A:C5:C8:1D:3D:3F:2A:6D:B2:47:E4:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/511c4fee-d347-3752-b22c-947c770dc9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b5:7a:f4:e4:ef:11:95:4e:3a:89:de:98:cf:bc:9f:5e:a6:
         a7:d2:2c:fd:15:8a:5e:56:1e:4a:0f:68:36:60:20:35:b5:24:
         98:00:cc:02:88:86:9a:44:e2:cc:2b:1d:96:6b:8e:f9:78:ec:
         27:e4:2a:eb:29:97:86:4b:d7:4e:c6:e1:ef:9f:6f:35:b1:28:
         2d:05:52:15:78:5c:44:07:42:1e:bf:3e:b1:4b:a2:ad:42:74:
         cd:87:b3:1a:1c:50:34:6e:24:a2:7c:aa:5b:3d:92:53:14:53:
         4d:0f:25:8f:05:16:f6:11:d5:41:da:56:c4:92:a7:03:fa:b2:
         c3:d1:74:55:da:c9:33:58:cb:64:5f:f8:57:40:82:9a:57:26:
         d8:20:22:fc:a3:a3:ae:08:e5:90:5b:96:fe:6d:79:8d:26:0f:
         ec:ad:79:26:35:6a:f0:8e:e0:78:9e:17:20:1b:04:31:c3:2a:
         b2:42:94:41:93:20:ef:d8:6e:05:a3:fd:45:a5:ae:c5:f1:d6:
         b4:6b:c8:af:14:5a:72:f3:d3:e5:8d:09:e7:91:a4:1e:b2:fc:
         1a:a0:cd:ae:09:47:53:23:f1:96:15:f2:54:d9:b5:21:7f:92:
         d4:af:c0:68:0b:58:5d:c5:0d:6c:8e:27:fb:f2:75:ee:15:18:
         28:79:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:28:03 2025 by rpki-client