Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/81a83678-c17d-3d8e-aa75-e044c5a559d3.roa
File:                     81a83678-c17d-3d8e-aa75-e044c5a559d3.roa (raw, json)
Hash identifier:          7v8B0BdoJCALH1nJkbwa7oWQfo9nE8Zy7XKMLxbQdpI=
Subject key identifier:   DF:F3:AD:C7:B1:52:DE:AF:9B:56:07:43:22:3A:70:C0:83:84:85:31
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B943B64ED3CE8AA9990B0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/81a83678-c17d-3d8e-aa75-e044c5a559d3.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:94:3b:64:ed:3c:e8:aa:99:90:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=d13e2ecc-3454-485f-a2ef-0877f97f4842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:26:44:17:ae:f1:e0:a3:20:f4:6a:7e:06:
                    62:e5:02:a4:80:46:d3:af:93:c0:3e:73:3e:5d:54:
                    25:13:1e:00:17:70:96:59:bd:f1:0d:b8:b7:3b:be:
                    8a:22:69:a2:7b:43:7f:23:95:5e:12:67:c3:96:78:
                    9b:a3:66:0b:ec:c4:87:e2:46:de:c3:86:0f:16:d4:
                    38:51:7c:83:3d:a1:06:8f:7d:45:0d:06:f0:b3:a9:
                    b6:dc:80:f5:ec:56:43:04:51:40:44:f7:89:17:a2:
                    00:e4:64:53:44:9b:5b:74:16:d2:95:4f:85:84:ae:
                    f6:98:ca:df:54:4f:ef:c2:c2:77:16:88:db:41:73:
                    86:7b:45:f3:57:10:7e:fb:a7:42:94:c7:bd:27:a5:
                    4c:97:18:55:68:41:d5:32:19:0c:ee:48:9d:bf:de:
                    cc:9d:d4:70:1f:e7:e5:42:d6:a8:62:44:c0:ad:09:
                    2f:86:88:f3:fb:77:81:0b:41:aa:fe:d8:2b:4d:05:
                    39:d4:13:a5:be:95:fd:74:14:63:e9:08:05:27:54:
                    b9:5e:95:ce:b3:17:96:c1:38:a5:3c:9a:45:86:f8:
                    1a:62:44:31:c1:7d:4b:cc:ec:7f:f0:67:51:d3:d5:
                    33:47:0d:95:c1:d9:fd:9b:7f:92:8d:a7:64:39:ed:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F3:AD:C7:B1:52:DE:AF:9B:56:07:43:22:3A:70:C0:83:84:85:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/81a83678-c17d-3d8e-aa75-e044c5a559d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e1:29:e4:11:b5:da:8f:2f:46:c1:21:5f:fb:1e:1a:c4:48:
         17:3d:8d:dd:7d:5a:83:59:c6:dd:f1:d5:d5:30:4e:4b:d7:43:
         19:f4:f3:d0:7a:fc:e4:a2:d1:68:03:fb:52:7a:9d:f6:e2:1e:
         8f:41:c8:f6:29:bf:57:b4:9b:5b:f1:d4:e2:9e:32:8d:33:ac:
         da:fe:90:c2:97:58:42:1d:77:3b:fa:bf:38:48:c3:03:ef:54:
         2a:69:ad:04:b2:12:91:00:e7:4a:91:62:b4:c7:2f:1b:8f:e1:
         41:27:8d:7f:11:92:d0:16:62:d9:45:02:ee:04:93:c2:be:69:
         47:20:2f:a7:4a:29:64:26:c9:bb:e9:58:6c:b8:8a:08:24:4b:
         54:33:cd:36:b4:c7:4e:07:79:68:61:66:a9:7a:d9:9c:bc:25:
         68:f2:28:a3:85:53:2c:41:70:d2:1a:38:9a:df:02:d0:76:c2:
         12:b0:13:88:7b:0d:8c:b4:65:ed:1e:ea:45:30:2a:2d:ac:2f:
         2a:5a:69:11:5f:9a:bd:5e:02:7d:87:5d:62:91:2a:07:fb:a3:
         8b:2a:b4:b0:a8:f1:24:79:f5:79:0f:b7:3b:0f:ae:a5:e9:ec:
         93:c0:a6:2c:d5:76:8c:d1:81:4f:bf:23:8c:8b:5a:16:fb:a0:
         7d:a1:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:16 2025 by rpki-client