Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5cb6554b-fc64-3d8a-9fe3-8cee0770ea47.roa
File:                     5cb6554b-fc64-3d8a-9fe3-8cee0770ea47.roa (raw, json)
Hash identifier:          euSYGBDdUk4RfadbvjGSGaelqBKfcjLXFTp/72mXLDY=
Subject key identifier:   ED:51:46:FC:1F:54:49:D3:F1:79:CE:5D:1A:D6:C9:96:34:6F:E7:8B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B72DB620FCFF7E5B82100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5cb6554b-fc64-3d8a-9fe3-8cee0770ea47.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:72:db:62:0f:cf:f7:e5:b8:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=89c82d56-35e2-41ea-983e-2602a481347e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:99:5e:45:34:d7:9a:72:2d:63:bd:8d:bb:
                    33:bc:b9:3d:1b:c2:f4:29:f0:6d:f7:b0:b2:ca:65:
                    9a:d0:c9:45:78:db:7f:24:5d:99:62:0a:30:fb:94:
                    8b:61:2f:a9:38:58:97:f4:38:30:c3:db:4d:09:b8:
                    32:90:c4:f6:20:0d:13:a1:c0:a7:42:98:1c:1e:4f:
                    01:5d:4a:13:12:ea:a6:0b:fb:6f:3d:98:68:fe:cd:
                    3b:93:47:79:74:54:08:12:e0:62:0b:45:b8:96:5a:
                    f9:c2:1d:44:87:80:d6:79:d6:d0:c5:a7:5b:77:68:
                    c8:eb:47:e5:73:a3:aa:61:66:c9:43:e2:d8:5f:b2:
                    92:bb:89:f2:37:27:b7:5b:86:7d:dc:cc:ad:cb:23:
                    94:70:9f:97:c3:48:eb:2a:a3:9b:09:1d:5c:57:64:
                    17:96:12:e3:f6:8c:94:37:b1:24:b8:9f:cf:28:4b:
                    cb:0a:8b:e8:11:1f:8b:6d:b2:6b:43:a9:88:76:5f:
                    ed:d2:c7:96:6e:03:be:c4:07:96:9a:c2:ee:5a:b2:
                    7c:6a:ea:af:0a:c3:05:9f:9c:bc:2f:77:6c:e4:8b:
                    29:18:5d:08:bd:ef:ab:42:97:de:21:36:50:47:cd:
                    03:11:36:67:61:8f:76:0b:d9:ef:e8:c6:aa:6b:64:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:46:FC:1F:54:49:D3:F1:79:CE:5D:1A:D6:C9:96:34:6F:E7:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5cb6554b-fc64-3d8a-9fe3-8cee0770ea47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2b:de:1d:6a:b9:97:fb:26:b6:31:a7:3c:dc:d9:02:f0:01:
         b9:11:37:37:cd:77:61:e2:2c:a1:82:7f:10:0f:7b:ff:73:fb:
         fc:ed:9b:a9:b3:07:c8:3d:de:05:75:6c:26:d9:c0:48:99:03:
         a6:53:a1:82:2f:3a:86:06:e3:ca:b9:1c:b6:dd:a6:94:19:ca:
         1c:bb:d3:0a:f8:65:52:2f:23:10:2a:ab:df:90:78:a4:b9:47:
         38:6f:63:30:cc:00:d4:45:33:0c:29:4a:7e:2d:31:0a:35:3b:
         e1:df:59:61:3f:77:e7:0b:36:48:bd:4d:e2:85:96:64:8e:97:
         31:33:ab:37:8c:12:68:ea:25:66:48:52:7f:ff:79:d7:db:76:
         92:b9:7d:2f:6a:10:28:2c:48:48:41:cd:9a:b2:07:4b:7d:52:
         9b:4a:7c:63:82:a0:b8:18:7b:8c:a7:0c:68:ce:d5:92:9d:78:
         83:29:9d:ea:a0:26:20:13:1d:24:b5:30:fd:c1:6a:0f:10:7f:
         79:5d:45:02:7b:80:2d:23:8d:cb:1a:4b:cf:e6:4d:26:b2:b4:
         b1:65:6a:0f:7d:83:6d:83:0c:39:89:52:09:0e:33:80:d8:7f:
         1c:c1:67:cb:e5:84:53:b0:05:fe:1a:ff:a9:0b:fe:1d:96:8c:
         3c:c9:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:24:54 2025 by rpki-client