Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/746989fd-af61-3ae5-9005-c1c87237fdb4.roa
File:                     746989fd-af61-3ae5-9005-c1c87237fdb4.roa (raw, json)
Hash identifier:          0cC65gRS6PPgwd/eFiD1z3651HJBpNdfITlXqI2B9Fk=
Subject key identifier:   E4:9E:1A:BB:6C:83:91:AF:4B:89:8D:F1:CB:C2:35:7D:1A:12:88:CD
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B8D21C2AEAF2ABBD7A380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/746989fd-af61-3ae5-9005-c1c87237fdb4.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:8d:21:c2:ae:af:2a:bb:d7:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=e503bd9e-1be5-42ca-8954-c4e5630afc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4b:3a:1c:dd:1f:2f:59:4b:c2:1f:12:44:8c:
                    26:e5:42:d7:b8:8c:6d:81:06:2c:ac:66:9f:1e:1d:
                    36:7a:2e:c2:f9:50:03:18:17:86:54:2b:24:d5:14:
                    9d:1d:24:69:36:1f:be:39:c8:f0:b2:56:f1:ec:65:
                    03:d8:f8:55:10:be:1e:41:ad:28:e1:c7:df:ac:ba:
                    b8:bb:13:ae:de:60:0e:6d:a2:ab:06:67:fc:b1:2b:
                    25:27:81:87:75:9b:7b:06:f8:00:05:1d:48:b7:66:
                    8d:d7:b0:93:e7:85:a4:90:e8:6a:9f:c1:c5:5b:27:
                    3b:39:22:07:c5:18:45:fb:43:9d:43:5c:13:7d:f9:
                    40:45:ae:cd:4e:ce:4d:2a:62:e8:fa:da:de:be:6b:
                    be:cc:cf:b4:f4:cf:d8:96:65:ec:0a:c1:d5:f7:7d:
                    a1:9b:99:bb:c8:00:d0:a0:ee:8b:fb:0a:d3:59:44:
                    ea:0d:54:cc:bf:66:c7:d4:fa:e9:a7:32:3f:52:e3:
                    a7:1c:0d:e4:6c:5e:8f:d1:c1:af:3f:51:b1:fa:43:
                    1b:4e:21:b7:c9:74:69:87:46:cc:9b:8f:67:16:90:
                    61:c4:95:48:6a:d1:35:f4:43:b1:1a:35:44:ee:67:
                    f6:79:47:47:08:3b:2a:46:aa:67:27:e0:40:1f:93:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9E:1A:BB:6C:83:91:AF:4B:89:8D:F1:CB:C2:35:7D:1A:12:88:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/746989fd-af61-3ae5-9005-c1c87237fdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5e:dd:04:87:df:13:52:52:af:bf:e8:cc:8b:bd:23:b3:d0:
         77:b9:2d:f9:c8:46:2f:2e:2b:18:24:fc:1a:cf:29:96:1f:67:
         bc:e8:83:0e:eb:c6:9d:55:75:d2:fa:ae:9f:1c:e7:8a:c0:0f:
         e2:53:45:8a:14:55:e8:ea:30:4a:a6:b6:f0:5a:f0:49:c8:a3:
         ce:fe:c2:59:e2:bb:7d:9e:92:75:61:be:ca:72:df:cf:83:ba:
         ab:56:4f:08:91:c1:79:de:ee:3f:30:d3:b6:c0:c0:60:fd:ad:
         01:92:e2:68:92:8d:9f:33:bf:57:c3:a6:0c:c7:ab:ef:ef:29:
         f5:40:f2:20:a3:b4:4d:c4:55:db:35:82:1c:05:53:0a:57:bf:
         73:db:30:d8:f9:39:32:7c:7b:07:45:eb:70:64:53:e8:67:96:
         9a:0c:f4:5b:21:36:f5:8f:f9:d0:86:07:7b:b3:d1:32:a2:f5:
         a0:57:cf:11:39:c1:c3:fc:8e:7c:ec:d7:0e:68:38:0b:73:cb:
         fd:22:f1:62:26:9b:06:15:83:cf:4a:3a:9c:77:34:fb:eb:21:
         4a:38:90:9e:3c:07:77:f2:b4:89:5b:40:7b:e0:94:8f:25:e1:
         8d:93:a2:ed:18:24:d7:71:79:a7:85:0a:e5:24:db:e9:c4:45:
         b5:70:5d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:26:24 2025 by rpki-client