Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71237277-a6a2-3bd9-b1fa-ced19be84500.roa
File:                     71237277-a6a2-3bd9-b1fa-ced19be84500.roa (raw, json)
Hash identifier:          CK6A9YbWtZWjSpmIBfUc5NcuLoLrmBl3E/rTJZDpPdM=
Subject key identifier:   5B:97:D5:8E:5F:79:44:31:4E:E0:66:B9:14:7A:79:66:18:66:03:76
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B6B6E35F4AAAE30A256C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71237277-a6a2-3bd9-b1fa-ced19be84500.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:6b:6e:35:f4:aa:ae:30:a2:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=6741c08d-ba25-4858-890a-4caa76d1b4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0f:d0:74:93:c8:9a:63:6f:14:e6:91:8b:b3:
                    32:2b:b3:96:fe:3b:0d:0a:ff:15:77:1d:aa:fc:e7:
                    ee:20:c8:fa:aa:13:d9:0d:d9:40:e8:0d:b1:6f:e9:
                    62:b1:e2:1a:63:15:a0:a8:86:8f:b4:fc:20:d9:f8:
                    75:aa:b0:ca:37:be:c5:77:75:77:be:52:fe:bd:89:
                    e5:d3:5c:5f:d7:5c:c3:65:cb:92:1e:57:a1:87:3a:
                    f7:ea:d6:c1:6e:23:08:f5:66:ef:9b:cd:34:dd:42:
                    ef:11:db:be:60:a4:a7:1e:56:27:89:f0:a1:f5:57:
                    c4:7a:89:fb:5e:f0:18:6d:b1:4b:da:5a:8d:77:98:
                    69:12:29:90:7b:66:18:f7:5d:97:75:47:e1:28:08:
                    f7:40:9b:4f:a6:5b:e3:a3:ba:f5:37:ea:aa:7f:df:
                    ee:76:fd:0f:3a:42:84:a5:01:28:fb:d2:e1:55:9d:
                    ac:35:f1:0b:86:ba:fb:c1:c8:03:31:07:0f:12:57:
                    f6:a5:8a:7e:0d:7a:47:a4:c2:84:01:65:90:e9:bf:
                    32:7f:d5:08:f4:bc:eb:90:6e:54:5d:ac:ad:9d:e8:
                    cc:5c:39:e8:89:d7:a3:69:e1:d8:8f:dd:48:26:fa:
                    1a:91:51:38:b5:46:6d:08:31:4a:98:88:24:53:d2:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:97:D5:8E:5F:79:44:31:4E:E0:66:B9:14:7A:79:66:18:66:03:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71237277-a6a2-3bd9-b1fa-ced19be84500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:0b:10:5c:eb:12:e6:9c:54:cd:4c:70:60:1b:68:24:e5:
         0d:c1:60:47:af:91:1d:9b:dd:a7:a4:f3:1f:10:4f:32:a8:38:
         bc:da:66:1d:4f:a7:7b:43:f2:f7:8c:c7:cb:7a:e1:64:12:b8:
         9e:fb:55:8f:70:d0:41:58:26:9c:4b:56:a8:e2:3b:3d:25:11:
         48:8b:b6:71:c9:06:db:24:56:b0:94:cf:fb:46:28:47:bf:05:
         4b:ea:67:85:81:33:08:03:77:7f:dc:71:d3:c8:a4:8d:3f:06:
         e6:f5:40:d7:2d:d1:cb:fe:06:71:13:c4:58:2f:bf:c4:1d:66:
         ab:31:9b:87:c4:0e:cc:4b:31:28:48:22:2f:99:ed:d2:be:9a:
         ea:98:52:d7:dd:2a:66:87:bb:87:f8:14:98:51:10:b6:c6:b5:
         d3:c0:a1:6f:8f:f3:f4:a9:7f:14:38:0c:c2:b9:14:af:8c:09:
         47:8f:c7:97:73:ac:83:26:89:3e:bb:56:5e:a2:7d:36:72:a8:
         83:49:ef:b1:7a:84:29:ec:81:42:af:48:dc:70:76:b8:47:b5:
         7c:6d:b8:e8:ba:d7:e3:9a:d8:7f:75:ad:3d:ef:d7:29:ca:ca:
         db:79:f2:c5:d6:0e:05:17:6c:09:77:d9:d6:15:7a:8d:2b:f7:
         ee:2f:ea:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:26:24 2025 by rpki-client