Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa
File:                     a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa (raw, json)
Hash identifier:          ddKTrhXruY8anZmRMEmjsRCg+VQwSdde/1DIYFR4c0o=
Subject key identifier:   BA:B5:86:26:F1:A7:F4:3E:D7:1A:38:18:3C:F5:35:50:EF:3C:B4:5B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B650CDF460B2011977F00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:65:0c:df:46:0b:20:11:97:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=45977055-4a9c-419d-9cee-24b5263592ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:67:67:b1:76:35:36:a2:31:fb:b2:91:09:
                    fb:c4:97:fd:58:0c:99:28:32:cb:18:2e:d2:ea:f3:
                    6a:d4:72:be:a9:a8:36:8d:b8:49:ad:54:69:76:98:
                    8a:98:3b:5f:23:90:67:fe:8d:48:80:11:ef:cd:89:
                    98:17:f2:11:a7:1c:f7:82:1d:8f:9e:42:23:93:5c:
                    1d:cb:af:3f:1b:74:6b:18:ba:9d:ef:42:c8:78:d8:
                    a0:dc:99:0b:70:a6:9b:45:e0:eb:75:42:28:40:3c:
                    2c:cb:4d:c6:a9:89:1a:51:47:c3:57:ae:1d:06:9c:
                    a9:79:ed:35:da:02:44:b2:93:c0:2b:6f:95:31:62:
                    a7:82:85:da:d0:dc:02:87:28:e4:94:b2:d5:e7:f9:
                    07:47:db:36:fb:f0:af:bd:95:4b:8b:2b:a3:ec:11:
                    99:06:cc:d8:f3:d9:ba:07:09:2f:55:9d:fa:c7:e7:
                    52:ef:63:7f:9b:d3:d4:30:97:3e:33:05:7f:e3:ac:
                    4f:d9:5a:51:ee:b1:ed:ef:92:a1:3d:bc:0c:fb:92:
                    0d:56:20:d5:50:68:a2:ae:74:0c:3e:09:29:8d:78:
                    13:19:6f:ba:bf:b1:68:6a:7b:8f:11:f2:dc:f8:52:
                    aa:4c:8a:88:d3:22:a7:80:ff:a1:b1:f9:91:c5:2d:
                    e5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B5:86:26:F1:A7:F4:3E:D7:1A:38:18:3C:F5:35:50:EF:3C:B4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:3a:0a:ed:a4:61:8f:0a:80:cd:a2:32:99:95:dd:f0:26:
         66:e6:28:5d:c6:1a:d4:c8:ad:c6:46:64:80:32:cd:db:32:cd:
         c6:0e:82:f9:7a:79:16:84:e3:13:b2:65:6a:d5:a1:a1:39:55:
         d0:48:7b:96:6b:a2:c1:06:99:69:a4:c0:94:4a:67:7e:d9:4f:
         55:c3:f7:a5:ef:b4:38:f8:e9:29:0a:ae:27:d1:f9:06:16:73:
         9c:4b:4a:72:98:83:ab:52:e1:f3:f9:4d:8b:d0:39:be:4c:68:
         65:a1:5e:07:a6:2d:2e:ba:f2:63:08:46:fc:61:6e:32:52:a9:
         20:92:3b:9c:47:d6:46:5f:2b:9f:22:2d:8a:f3:de:d4:13:0c:
         73:08:10:9c:49:a3:4d:92:34:a6:b8:9d:8b:d9:19:18:ba:2c:
         bf:84:4d:fa:95:d2:47:49:47:12:da:09:0b:0a:7a:3d:bc:69:
         d2:8f:07:ce:c9:03:9c:a6:90:f8:ce:05:c1:2b:cb:82:b3:07:
         38:34:b9:13:00:fe:70:69:7d:df:7d:0b:56:83:af:79:20:fd:
         bd:9d:51:55:50:95:e4:2f:f1:71:89:3b:6e:98:c3:c8:27:e8:
         d1:d6:f0:61:80:d1:c1:ba:ef:11:6c:3f:ef:71:00:e7:92:c0:
         93:da:8e:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2UM30YLIBGXfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
NDU5NzcwNTUtNGE5Yy00MTlkLTljZWUtMjRiNTI2MzU5MmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5xnZ7F2NTaiMfuykQn7xJf9WAyZKDLLGC7S
6vNq1HK+qag2jbhJrVRpdpiKmDtfI5Bn/o1IgBHvzYmYF/IRpxz3gh2PnkIjk1wd
y68/G3RrGLqd70LIeNig3JkLcKabReDrdUIoQDwsy03GqYkaUUfDV64dBpypee01
2gJEspPAK2+VMWKngoXa0NwChyjklLLV5/kHR9s2+/CvvZVLiyuj7BGZBszY89m6
BwkvVZ36x+dS72N/m9PUMJc+MwV/46xP2VpR7rHt75KhPbwM+5INViDVUGiirnQM
PgkpjXgTGW+6v7FoanuPEfLc+FKqTIqI0yKngP+hsfmRxS3lNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLq1hibxp/Q+1xo4GDz1NVDvPLRbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYThiNmZjNzgtNmEwYy0z
MDY2LWEzMmMtYTllZGI0N2Y1YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnrOgrtpGGPCoDNojKZld3wJmbmKF3GGtTIrcZGZIAyzdsyzcYOgvl6
eRaE4xOyZWrVoaE5VdBIe5ZrosEGmWmkwJRKZ37ZT1XD96XvtDj46SkKrifR+QYW
c5xLSnKYg6tS4fP5TYvQOb5MaGWhXgemLS668mMIRvxhbjJSqSCSO5xH1kZfK58i
LYrz3tQTDHMIEJxJo02SNKa4nYvZGRi6LL+ETfqV0kdJRxLaCQsKej28adKPB87J
A5ymkPjOBcEry4KzBzg0uRMA/nBpfd99C1aDr3kg/b2dUVVQleQv8XGJO26Yw8gn
6NHW8GGA0cG67xFsP+9xAOeSwJPajgo=
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:20:21 2025 by rpki-client