Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ac818b5-57dc-33e2-ba48-5b05a497b571.roa
File:                     5ac818b5-57dc-33e2-ba48-5b05a497b571.roa (raw, json)
Hash identifier:          SBEssjApIk695FwZx3PBHNLFRqF+wLMOwLO7dC71Z9o=
Subject key identifier:   43:28:3E:75:2F:39:C2:F9:40:18:E9:69:A4:56:53:06:CA:7A:43:D4
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A84117CAA4336F814EAEF0E40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ac818b5-57dc-33e2-ba48-5b05a497b571.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:7c:aa:43:36:f8:14:ea:ef:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c4c2ba44-0846-4f74-a20c-801bf34598aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:4e:5e:3f:64:38:35:50:aa:cb:f4:57:9c:
                    8b:8b:cb:8b:a8:cf:e4:eb:e3:37:29:28:a2:4a:01:
                    7d:32:03:b7:30:9a:43:e1:d8:97:ee:6e:ef:5f:4d:
                    d7:74:66:f3:23:76:9a:bf:c4:75:0c:9c:8a:64:70:
                    c9:e0:76:8a:5d:6b:6f:0a:7b:e5:2a:c1:66:42:89:
                    5c:32:54:79:7a:91:4d:34:19:3d:01:7e:f2:08:1c:
                    e6:bd:bd:b6:95:5e:1e:e2:c1:a9:af:9b:f3:56:94:
                    06:05:dc:b4:c2:40:37:e4:02:27:c3:c3:d4:a3:ba:
                    26:77:16:7e:b0:43:af:67:85:e2:d6:80:c9:2d:a5:
                    22:d8:ab:8c:ee:99:b1:ab:ef:71:6c:08:a2:77:25:
                    24:56:93:45:f7:d8:98:b9:d9:85:f9:32:7f:d9:55:
                    c4:8d:6b:d6:b6:b2:24:76:dc:42:4a:34:3a:d4:69:
                    77:9c:66:56:d1:e0:a5:b3:cc:c9:43:54:c6:8e:d0:
                    d0:3f:a0:55:a9:3b:c8:c4:ee:cb:73:e4:66:a8:9a:
                    f1:22:3c:a3:46:61:06:57:4f:69:c2:c4:9b:43:82:
                    e0:55:de:11:72:e8:75:e1:85:31:d5:d9:df:cb:de:
                    a0:a0:8e:c0:53:2a:13:ee:30:95:c4:b0:8c:bc:0b:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:3E:75:2F:39:C2:F9:40:18:E9:69:A4:56:53:06:CA:7A:43:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ac818b5-57dc-33e2-ba48-5b05a497b571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c0:32:a0:c9:48:22:55:13:7a:43:a8:48:ec:7f:9c:c3:d3:
         bb:5d:cb:36:65:a9:e4:fd:ec:df:4f:46:d7:12:38:bb:e0:40:
         7b:fa:30:44:f5:a9:7b:27:ee:f1:b2:26:02:31:f5:81:5c:52:
         f5:07:f8:e2:15:dd:03:56:23:8a:72:15:1e:f4:f4:c4:ed:b2:
         91:65:ca:de:d3:d6:4c:21:38:7e:38:9a:90:37:a5:07:a1:1e:
         24:6c:dd:9e:66:23:5d:0b:4d:6e:6a:22:3b:8f:68:de:0e:7d:
         ad:93:5c:a9:29:03:a6:62:1b:35:1d:5b:f3:2f:76:09:94:26:
         3e:01:f1:65:fb:76:68:b5:74:3e:a3:79:25:ff:7c:7d:ef:1a:
         0a:28:c1:de:60:1e:43:6b:1c:20:2b:cc:10:eb:74:3d:23:77:
         2e:b3:a3:8b:5c:fa:5b:26:10:d8:db:ce:b4:cb:0b:19:2f:63:
         e6:96:68:c3:ac:b0:6d:3b:c5:3a:54:a4:e5:3f:d6:09:90:6c:
         8b:df:2d:40:7d:36:8d:4b:eb:6d:67:6e:46:b9:59:e2:0e:56:
         92:4a:6e:e7:5f:f1:24:cc:90:c5:06:ba:a4:30:31:db:06:b7:
         88:da:78:3a:e0:8a:8e:7f:f1:31:37:46:2e:c6:5a:b5:95:0d:
         fc:8e:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:29:04 2025 by rpki-client