Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a31175ee-a1fe-376b-85c1-d8ef69789f93.roa
File:                     a31175ee-a1fe-376b-85c1-d8ef69789f93.roa (raw, json)
Hash identifier:          zAqsx5fuGM0Nvt4cnwfV80MryOIarVe9mkhBcMZNNec=
Subject key identifier:   BF:C5:FE:D5:69:C7:6C:D1:E3:38:D8:E0:E6:C0:4F:28:5C:44:91:1F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B7A7D9E0DDEDA33C2CEA0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a31175ee-a1fe-376b-85c1-d8ef69789f93.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7a:7d:9e:0d:de:da:33:c2:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=cc872ba5-c0e7-4455-aa2f-ced7bc5545da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:75:31:9f:7f:b7:a7:22:af:f6:f1:ce:01:
                    32:ea:35:4e:50:58:09:3f:2c:10:67:23:42:4c:c1:
                    6a:cf:2e:1a:d9:00:77:94:1c:eb:73:9e:32:55:42:
                    39:1e:c3:d9:da:c5:9d:89:c1:48:16:f4:13:27:03:
                    cd:cb:03:67:44:5c:e6:04:9a:81:a3:38:61:d7:30:
                    6f:6c:42:fa:86:54:a6:2b:66:3c:b7:3a:e7:08:44:
                    35:29:ab:38:2d:61:8f:f9:bc:28:a5:f6:8d:47:a8:
                    71:d8:e1:45:32:e0:71:71:86:81:88:35:0d:cf:e2:
                    c5:11:ba:e7:b2:f4:d6:75:ba:1e:9a:03:eb:f6:b6:
                    34:1a:d5:6f:83:87:0c:9c:62:45:4e:69:7d:cb:10:
                    57:4d:d2:89:39:e3:4f:36:f9:48:8d:40:c5:e2:5c:
                    95:f0:29:a5:3a:ff:89:89:7e:96:06:c6:54:b0:ac:
                    6c:fa:5a:fc:4f:31:8c:61:be:36:a9:77:f3:16:d3:
                    6b:cc:58:33:e8:e5:a9:ba:4a:32:c9:93:b1:32:a6:
                    5d:b4:cd:67:4d:75:15:f3:d6:d3:e8:57:3a:77:c4:
                    ea:ed:b1:1a:73:60:2e:82:d4:2a:9f:e3:8b:b7:f1:
                    66:99:78:3f:1e:da:f2:0e:eb:6b:53:04:6c:0b:be:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:FE:D5:69:C7:6C:D1:E3:38:D8:E0:E6:C0:4F:28:5C:44:91:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a31175ee-a1fe-376b-85c1-d8ef69789f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f0:28:b9:85:91:53:b1:35:e1:32:b5:72:13:77:ce:72:96:
         4c:a3:b6:07:94:f4:b4:10:0a:2e:e4:8f:63:98:2a:ac:6a:09:
         92:77:1a:ad:71:c1:2a:d4:3b:2a:12:d9:45:a2:68:b8:49:a0:
         ac:92:0e:47:ea:d0:ff:06:ed:38:f8:d6:87:83:c9:5a:f4:d1:
         60:8d:bf:f9:03:37:3a:c9:63:03:93:c8:94:7c:21:87:79:30:
         88:03:29:d1:1e:8b:7e:34:e3:fd:4a:b9:09:f4:53:11:2f:95:
         f5:b7:77:71:dd:14:0f:30:3b:a6:90:79:f8:4c:5c:9a:67:17:
         b8:08:ee:a3:34:d7:9a:dd:be:72:bf:7f:ab:bf:92:f7:79:99:
         6c:95:94:73:2d:5f:91:56:f9:e0:b2:cd:63:19:48:f2:bd:4d:
         ca:82:ca:4b:15:23:45:f7:74:e9:31:d6:c7:47:14:4c:02:4a:
         d7:8a:01:9a:4a:6b:67:a1:54:a7:a1:59:f2:aa:c5:a9:d1:92:
         3d:eb:18:15:eb:1d:bc:1d:cc:06:64:71:6e:7a:87:4e:15:7a:
         e9:ab:4c:a8:ac:a9:67:7d:42:7e:0d:19:92:4d:59:31:65:b0:
         0e:78:f7:e8:f7:33:18:c7:c0:1b:5a:6c:3f:45:b6:e4:ac:ef:
         19:42:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:14 2025 by rpki-client