Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2af689b-f051-3307-bf96-ed2e990c49fd.roa
File:                     b2af689b-f051-3307-bf96-ed2e990c49fd.roa (raw, json)
Hash identifier:          JLIayBcKPKwjvJyPd2qU3MuVYHY1LHNctWeXzgtMHyU=
Subject key identifier:   99:84:12:E8:EA:DC:0B:42:B1:53:0E:E0:35:D1:8D:3F:19:D0:93:C1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A84122A280EB132AFC797A700
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2af689b-f051-3307-bf96-ed2e990c49fd.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:2a:28:0e:b1:32:af:c7:97:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=dddd3a25-68d3-4779-b5d7-295a7021818f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8d:a7:70:15:90:6f:1a:bf:8b:5b:c4:5a:e9:
                    0f:3f:c9:16:23:a3:45:ae:38:99:1b:5f:64:f3:c7:
                    0f:2d:19:78:35:5a:71:60:ab:3e:db:c0:79:12:50:
                    71:a3:8f:c5:1e:3c:a0:1c:cf:99:63:4f:0e:52:32:
                    e9:73:ab:7d:4a:b3:be:04:5d:f5:6f:c0:73:44:fd:
                    7c:13:2a:10:1d:bb:11:04:3f:98:eb:3e:3d:45:8d:
                    94:f9:2b:3b:94:9c:4d:90:5a:8f:20:a1:04:46:19:
                    c1:32:07:26:5d:4d:f9:6f:85:ca:34:e3:b3:56:ee:
                    98:df:df:96:93:22:0c:61:de:b8:23:92:67:05:c6:
                    14:78:4a:70:65:e6:47:a2:a3:46:9a:14:2b:5f:b1:
                    ac:92:fa:86:a4:45:49:e9:c6:23:d7:a3:a7:c1:80:
                    99:a6:77:2b:c7:66:8b:a3:48:76:97:03:ea:f3:13:
                    92:ce:ae:9c:28:f9:48:e3:69:f0:bd:f6:b5:98:a8:
                    44:0c:31:70:5e:44:f8:e0:cb:d6:01:0f:24:37:62:
                    65:92:9d:ac:41:d6:8e:44:6d:7d:ec:d4:76:38:30:
                    bd:85:59:a7:bf:ed:51:02:1d:d7:e6:ce:a4:50:a9:
                    f7:51:c5:7d:9b:a2:21:7c:8d:f0:54:43:1a:91:03:
                    33:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:84:12:E8:EA:DC:0B:42:B1:53:0E:E0:35:D1:8D:3F:19:D0:93:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2af689b-f051-3307-bf96-ed2e990c49fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:57:0c:ee:de:16:2d:19:24:6d:dc:37:82:5f:28:5c:a8:
         1d:b1:7b:cb:a9:e4:12:dd:ee:32:ae:cc:96:5f:19:7e:64:e9:
         37:b8:11:f3:31:55:ff:5f:c3:6c:24:58:6d:c3:95:32:14:16:
         2b:72:ab:eb:c8:82:32:ce:f5:5f:97:c9:3e:58:29:3c:a0:8f:
         42:58:44:4c:3e:74:22:a5:f3:d7:63:2c:55:7b:7d:a7:4b:5c:
         25:24:a6:a3:e0:de:1b:bb:1a:3b:63:c2:05:91:bb:56:b1:3e:
         c5:fe:a8:47:7d:c9:c6:dc:69:f7:1b:d2:5b:98:df:35:e6:51:
         fe:4b:9d:18:a9:13:66:44:64:74:ec:e0:2e:9a:ff:27:7b:43:
         af:1a:81:f3:d7:a3:0d:e2:08:3e:0e:b6:d4:f2:f0:a2:ce:fa:
         47:7a:56:05:19:c6:4b:fb:36:59:fd:49:c0:ba:b1:1e:94:83:
         6a:42:e6:ea:55:7a:46:71:a3:1c:5e:e9:8b:c1:a3:ae:18:85:
         f2:c9:53:1e:46:3e:a2:d4:82:5a:e8:16:07:f7:12:ad:42:b2:
         52:b2:be:bb:5b:d7:37:f3:63:9a:ca:36:52:22:6b:3b:f1:97:
         40:2c:1f:c1:bf:79:c5:00:36:2f:67:4d:48:00:f5:09:7c:81:
         f3:16:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:24:52 2025 by rpki-client