Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
File:                     75bde4a1-e87d-321d-917f-10d16a03a5a1.roa (raw, json)
Hash identifier:          jKkLfDMrteqmMk6OcWY21bjA7G2QTfsaMXJts95A3hM=
Subject key identifier:   68:DA:37:78:10:A1:2D:1D:C9:C2:38:14:56:16:3B:67:E2:15:3C:74
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B63730A4457CFE690C800
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:63:73:0a:44:57:cf:e6:90:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=255c95b0-e57a-4e23-8a4f-41d8cc7142f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:35:e7:4c:b9:65:77:fe:04:44:69:0a:8f:c4:
                    08:7e:e0:d2:17:e0:48:02:61:9b:ca:c2:d1:de:21:
                    03:57:bc:b5:fe:16:0a:7b:28:f2:cf:a1:23:7f:3f:
                    71:6e:3f:46:6f:82:44:74:43:19:64:1d:a2:1b:c3:
                    a1:70:84:30:d5:c1:5f:a8:cd:f1:dc:65:fb:26:f3:
                    50:80:74:f3:ce:15:b1:3d:91:1a:24:da:07:a8:b3:
                    61:b5:73:8a:e8:19:de:e0:e9:6a:b6:28:c2:fc:89:
                    6b:c1:6c:29:80:9d:0c:5e:3f:f3:b3:eb:74:2d:b1:
                    1a:bd:6d:fc:ee:ab:17:b1:9c:73:38:a2:8c:b7:15:
                    e3:a4:be:17:44:ee:22:f2:8d:e7:d1:b2:15:ba:70:
                    2b:9b:d1:cc:3e:c3:21:d5:84:68:52:f8:8e:bc:d0:
                    95:d3:46:e2:73:8f:65:82:0d:34:e1:34:77:cc:f5:
                    85:cf:38:b2:02:da:bc:ea:eb:ae:7e:33:38:96:b0:
                    da:75:26:fe:a1:63:d7:35:9b:8f:e3:44:3b:0e:e2:
                    05:08:7b:49:d7:e5:0d:c0:20:6b:94:86:a4:c7:c8:
                    29:94:2d:b1:82:0e:4b:1e:83:f2:a5:bc:7f:da:0b:
                    49:bb:b0:5b:13:ad:a4:b2:68:69:67:ad:89:12:9d:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DA:37:78:10:A1:2D:1D:C9:C2:38:14:56:16:3B:67:E2:15:3C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e0:d7:43:37:90:86:65:2b:d6:bc:de:b3:47:f5:47:c4:5b:
         49:39:2b:b0:84:dd:8a:b9:d0:44:77:61:71:5d:47:3c:8b:19:
         6b:50:81:da:48:c4:22:dd:d8:05:b4:77:af:9f:60:de:90:3d:
         83:ea:73:db:0b:38:c5:e2:1a:0b:aa:6d:36:d1:04:e3:b9:58:
         0b:7a:9b:de:22:08:65:39:14:c8:6f:ae:15:5b:ca:19:d4:38:
         f9:69:d4:69:8a:7f:6c:24:2c:a0:77:11:fd:87:a2:2f:0c:31:
         fe:20:37:40:ff:0e:58:1c:c5:29:d2:26:84:99:2e:54:5d:36:
         30:ae:6d:7e:c4:11:82:5b:50:26:4e:2f:c0:e2:e6:8f:f6:d6:
         03:f7:3b:ee:65:dd:cd:15:2d:8c:0c:f6:ee:d2:19:aa:ed:e3:
         ec:0e:bf:19:99:49:73:7f:d3:d1:cf:25:a4:c1:11:49:6c:54:
         ad:c0:0a:a6:7c:a2:8d:4a:94:c9:bb:b9:68:55:7c:9b:81:10:
         b7:34:e2:bd:84:9a:d2:ae:37:48:d9:1a:fe:57:68:20:79:71:
         ac:ce:26:5c:0c:64:e7:c5:11:28:aa:26:28:10:1b:7d:96:f0:
         03:46:ea:af:9a:3a:fa:9d:7a:7a:6b:8f:f6:87:fe:68:09:a0:
         94:5f:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:21:28 2025 by rpki-client