Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a72aef24-909d-3744-b445-618711160e29.roa
File:                     a72aef24-909d-3744-b445-618711160e29.roa (raw, json)
Hash identifier:          hTXU1sLjJnF3/uGpfkJqd5VwM8u8K+/2Pi4sSYZvtCo=
Subject key identifier:   C2:5F:A2:08:20:B6:C3:96:FE:81:C7:50:CE:82:EA:37:9C:B8:03:98
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A84122A606D50DBD26869BFC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a72aef24-909d-3744-b445-618711160e29.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:2a:60:6d:50:db:d2:68:69:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4caca7ba-30e9-4fe0-b64c-bd2274b23256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:51:07:8e:7c:27:26:d5:ef:6a:01:29:c2:
                    d3:62:ab:d5:1c:25:c6:9f:16:32:b0:e6:56:22:5c:
                    01:8e:d9:63:54:75:86:af:d5:40:46:5a:29:67:7a:
                    0a:cd:13:63:ca:b5:00:29:c8:ff:a0:6a:e6:cc:84:
                    4e:e1:45:c8:3e:75:16:77:81:90:d3:9f:4c:bd:02:
                    5d:ac:12:63:80:35:e4:b6:e8:38:cb:53:dd:ff:3e:
                    91:52:39:b7:e0:4a:6f:b9:e3:0e:58:a1:37:9f:b8:
                    95:8a:8b:b5:99:cf:e0:a2:a7:95:1c:e9:98:76:20:
                    4d:1b:cf:c7:79:cb:de:66:ec:13:d3:a5:0d:57:fb:
                    c6:ba:07:34:51:b1:b7:51:5b:b0:e1:92:51:a2:a9:
                    11:f7:75:42:3e:69:cb:c4:28:84:03:f8:0a:35:28:
                    c6:ee:13:8e:05:d2:c5:dc:d6:2e:16:92:99:54:2f:
                    e4:a3:cc:d8:a6:d5:66:5b:18:28:91:2b:f0:2b:9a:
                    65:f1:80:df:ad:9d:69:5e:88:f4:a2:ad:82:f0:d4:
                    52:24:56:03:4c:0f:8d:4f:5b:87:a5:c8:88:07:28:
                    51:8e:fc:f0:84:31:66:f2:01:52:a0:96:cd:13:e9:
                    ee:19:5e:2a:f4:96:d1:cb:3f:37:d7:82:07:d4:98:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5F:A2:08:20:B6:C3:96:FE:81:C7:50:CE:82:EA:37:9C:B8:03:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a72aef24-909d-3744-b445-618711160e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e2:5d:6e:38:7b:5c:57:e6:83:7e:c5:f0:29:ef:be:52:16:
         33:a2:4c:b1:21:82:30:08:b8:ca:7a:0b:f8:8e:9d:6f:cb:fe:
         75:ca:67:69:14:70:3f:76:81:cd:6f:0a:67:7f:8a:5b:95:73:
         ec:2a:03:0e:aa:b9:20:99:cf:88:5b:fe:a8:f2:d0:77:43:fa:
         6d:82:d9:19:e9:13:54:86:67:f0:e5:6e:c4:83:73:d2:17:86:
         66:6b:c7:0e:ae:37:c0:3c:0e:31:b4:38:ad:5d:7f:75:1f:c5:
         ab:9c:46:15:3f:e0:32:ac:4c:59:ea:e4:3e:06:65:77:8e:1c:
         14:1d:70:d1:59:cb:1c:5d:4e:66:66:8b:a9:5e:e9:a3:20:df:
         45:fb:29:71:ba:c8:df:58:b7:be:e7:5b:aa:78:4e:18:92:c2:
         15:92:18:5d:a4:c3:36:71:2f:af:2a:4d:91:a1:13:f8:95:11:
         ab:75:8a:0e:10:c0:2b:41:03:79:df:e8:3b:c7:26:63:37:bd:
         c1:fc:25:4d:cf:fa:fa:5c:7e:12:b1:22:c5:bb:e4:97:b6:7d:
         a7:6e:11:11:99:08:63:43:d7:5b:8f:cc:1d:ba:24:a8:3b:cf:
         7b:e0:6f:fb:e0:37:75:ba:df:aa:fb:4d:9b:a1:e1:ac:21:d4:
         b0:ce:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:30:05 2025 by rpki-client