Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
File:                     53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa (raw, json)
Hash identifier:          qhF0EUyjaSrEdUwcseJps6OJrLSkHDLRaTb2yV2uwgU=
Subject key identifier:   12:6C:BB:B5:FE:0B:68:1D:0B:07:CA:F4:9F:BA:B1:71:12:D6:A1:15
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A84118DF62162380EB3046B40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:8d:f6:21:62:38:0e:b3:04:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1e03e0b4-3a6b-4d20-9568-9ed6bb987e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:6d:62:8c:a7:71:8c:e7:b2:2d:0d:7f:ac:
                    05:b7:03:57:31:ce:da:71:c2:9b:11:e1:43:bb:67:
                    40:e3:1c:ac:25:c5:0c:bb:28:31:0a:16:e0:9c:07:
                    b4:a8:c8:67:40:6c:87:8e:95:e2:56:8f:62:b5:c1:
                    39:2c:ad:8d:7f:4c:10:f9:7b:65:1a:da:2d:4a:78:
                    01:a3:07:39:52:ba:a8:18:1b:58:30:64:4b:7c:9e:
                    a7:47:8d:91:82:ab:5a:e2:b2:29:1d:dd:f8:48:24:
                    3f:29:da:e1:2e:cd:59:90:67:08:c1:aa:3f:60:bc:
                    c7:7e:41:5d:33:32:8d:65:b6:28:68:f7:ba:33:d3:
                    86:f4:c4:a5:28:f7:38:f2:44:74:99:cf:b0:d2:2f:
                    11:af:ae:bd:7d:3a:47:6e:fe:95:63:85:67:1c:71:
                    95:23:11:55:76:eb:ff:cb:a8:9e:46:37:7b:3e:78:
                    bf:db:d1:8e:6a:86:b5:25:7c:93:44:e1:f5:88:b5:
                    f6:52:56:ef:11:a6:56:af:f6:57:04:e5:10:0d:0b:
                    ba:86:73:16:3d:08:05:da:37:d5:5f:43:e8:01:bc:
                    37:cb:04:be:e5:d6:4e:6f:09:a9:e7:01:6c:ff:ef:
                    78:d9:f3:1d:6a:44:ee:f5:9f:4a:16:7b:12:98:3b:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6C:BB:B5:FE:0B:68:1D:0B:07:CA:F4:9F:BA:B1:71:12:D6:A1:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f0:0e:36:88:80:e4:11:41:46:45:75:ba:bd:d2:9f:e9:12:
         37:af:a6:7c:2c:eb:f7:0a:4a:07:c7:16:2f:f1:10:6b:2b:69:
         17:5e:c7:b6:65:20:93:66:ed:28:8e:57:11:31:ba:35:b2:7f:
         91:37:3a:be:97:a3:7e:33:3b:81:d0:3a:f5:ee:83:33:3d:66:
         c6:b2:f2:7a:ee:e9:5c:12:c6:b3:31:09:0f:76:4f:4a:1a:64:
         e3:17:13:68:97:25:28:d5:65:64:b0:1b:c6:a8:cf:0a:e3:c3:
         4b:64:37:08:fb:85:4d:da:a4:eb:6a:a9:4d:23:a1:aa:3d:81:
         ec:b8:0e:12:50:8b:53:52:7c:5b:bb:6f:4d:dd:cb:f6:79:8e:
         3a:2e:ce:14:92:89:92:4b:2e:a1:7e:f5:1d:3b:43:e6:e2:34:
         85:30:53:2e:d9:85:86:73:ad:1f:18:73:13:38:e7:dd:a7:18:
         64:d5:59:82:13:2b:02:88:dc:af:1d:fd:fb:62:95:00:68:6f:
         60:b5:ec:14:af:9a:36:42:a6:bd:ec:0f:a5:4d:96:d4:7b:ac:
         7a:1e:eb:27:9a:9a:a9:d8:4c:9e:e0:aa:24:92:b7:be:89:25:
         88:21:c8:2b:e1:62:70:1b:5c:0e:78:bb:4f:e1:ad:f5:a5:1a:
         db:95:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:23:31 2025 by rpki-client