Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6000c889-142a-3ff9-b839-daf701ab8d23.roa
File:                     6000c889-142a-3ff9-b839-daf701ab8d23.roa (raw, json)
Hash identifier:          MGJYkilmQyXzjqAi77iROj7dhnwkjdSC7KMap8F3AdQ=
Subject key identifier:   17:53:31:98:83:8D:EE:82:96:02:FA:CC:D1:D2:85:A1:FE:9E:54:83
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B99B28D78E1672E316830
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6000c889-142a-3ff9-b839-daf701ab8d23.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:99:b2:8d:78:e1:67:2e:31:68:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=5ebade6b-0127-49a5-acad-fe5e73363a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:0d:8b:2a:35:13:51:2d:f5:e2:a5:cc:a6:ca:
                    f2:52:bc:eb:fd:d4:72:3e:39:5d:e4:02:bd:8e:03:
                    1a:11:7d:65:f0:02:23:6b:62:2a:ad:13:92:cf:52:
                    05:38:5f:9f:95:7c:e8:f7:58:00:bf:87:4b:de:bd:
                    93:c1:96:ee:b2:c8:36:9f:4e:8f:b6:07:c3:52:17:
                    f3:0b:6c:99:95:1d:62:93:ff:57:3a:84:13:bc:14:
                    2f:94:47:a3:fb:e9:87:6c:d3:23:9e:f7:34:ed:89:
                    5b:4f:6c:c7:73:07:3a:56:9a:df:53:d6:95:7c:d0:
                    a1:5e:b7:23:7c:f1:95:b7:a5:e2:10:9e:50:e3:75:
                    24:12:74:97:8e:4c:89:bd:c7:41:d9:89:dc:78:b5:
                    ca:37:61:93:e1:ce:5e:7b:20:e7:77:c5:39:49:5d:
                    77:66:f6:fd:95:bd:d4:4e:a8:c3:05:e0:94:8f:45:
                    cb:1a:3d:36:87:00:44:b4:ac:fa:d1:48:de:2d:06:
                    a9:70:8b:f9:b1:39:77:c9:21:3c:be:41:16:5e:05:
                    c1:b7:63:80:91:89:80:3a:53:35:57:30:f4:1c:bd:
                    dd:58:bd:65:91:93:0a:49:4f:f2:3c:21:10:27:14:
                    3f:13:8d:bf:71:cf:ac:b5:0d:33:6e:5e:6e:e7:db:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:53:31:98:83:8D:EE:82:96:02:FA:CC:D1:D2:85:A1:FE:9E:54:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6000c889-142a-3ff9-b839-daf701ab8d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:f3:82:b1:61:dc:dc:17:4c:6c:37:62:db:f8:d7:aa:5f:
         67:8e:b2:58:b0:fb:1c:27:cb:a1:1d:73:74:1d:58:f5:0a:83:
         bc:b4:31:5c:53:ac:01:26:a6:ff:3f:47:3a:0f:1d:d4:d1:e5:
         67:60:cf:78:8b:d4:62:46:21:d7:e9:03:b6:c1:2a:54:67:34:
         65:1e:90:f4:90:86:07:c3:13:04:1b:c6:7f:c3:b5:27:e5:60:
         29:04:c1:e2:4f:c4:b7:97:88:00:cc:03:23:c0:64:05:bd:95:
         9d:35:30:12:f8:0e:4e:dd:38:86:d3:2a:1c:a6:55:07:81:b6:
         e3:1a:17:96:a7:9a:44:52:e8:53:b1:08:49:61:c8:1e:8c:ae:
         99:4e:0a:d5:1d:bb:d0:67:60:08:79:8f:a9:66:61:03:a4:44:
         76:05:06:a7:76:8d:69:d3:11:6a:a3:7f:d4:06:ca:d1:75:d8:
         a3:5a:54:13:e6:f3:57:22:96:f7:29:61:94:6a:c8:1a:49:7c:
         35:28:b9:fa:4f:9e:4d:24:5d:96:05:69:25:b0:55:af:24:71:
         ca:92:2c:16:3e:e3:7a:83:9a:04:71:f9:86:31:67:95:73:32:
         e3:2f:48:6a:17:d8:56:d2:90:f2:87:28:a9:4c:8e:f0:40:a5:
         da:99:9d:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5myjXjhZy4xaDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
NWViYWRlNmItMDEyNy00OWE1LWFjYWQtZmU1ZTczMzYzYTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Q2LKjUTUS314qXMpsryUrzr/dRyPjld5AK9
jgMaEX1l8AIja2IqrROSz1IFOF+flXzo91gAv4dL3r2TwZbussg2n06PtgfDUhfz
C2yZlR1ik/9XOoQTvBQvlEej++mHbNMjnvc07YlbT2zHcwc6VprfU9aVfNChXrcj
fPGVt6XiEJ5Q43UkEnSXjkyJvcdB2YnceLXKN2GT4c5eeyDnd8U5SV13Zvb9lb3U
TqjDBeCUj0XLGj02hwBEtKz60UjeLQapcIv5sTl3ySE8vkEWXgXBt2OAkYmAOlM1
VzD0HL3dWL1lkZMKSU/yPCEQJxQ/E42/cc+stQ0zbl5u59srQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdTMZiDje6ClgL6zNHShaH+nlSDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjAwMGM4ODktMTQyYS0z
ZmY5LWI4MzktZGFmNzAxYWI4ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAou84KxYdzcF0xsN2Lb+NeqX2eOsliw+xwny6Edc3QdWPUKg7y0MVxT
rAEmpv8/RzoPHdTR5Wdgz3iL1GJGIdfpA7bBKlRnNGUekPSQhgfDEwQbxn/DtSfl
YCkEweJPxLeXiADMAyPAZAW9lZ01MBL4Dk7dOIbTKhymVQeBtuMaF5anmkRS6FOx
CElhyB6MrplOCtUdu9BnYAh5j6lmYQOkRHYFBqd2jWnTEWqjf9QGytF12KNaVBPm
81cilvcpYZRqyBpJfDUoufpPnk0kXZYFaSWwVa8kccqSLBY+43qDmgRx+YYxZ5Vz
MuMvSGoX2FbSkPKHKKlMjvBApdqZnfo=
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:25:37 2025 by rpki-client