Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c6af2770-f621-34a9-9016-882dd563a4d0.roa
File:                     c6af2770-f621-34a9-9016-882dd563a4d0.roa (raw, json)
Hash identifier:          /Dik0OmsNIXUspF/QSWh2v+CTfSH4UPZf/r4MT5tjM0=
Subject key identifier:   15:81:11:81:52:F0:98:48:52:03:FF:56:DC:30:99:2C:5F:52:5D:E0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A84123503F50D429E2FC81BC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c6af2770-f621-34a9-9016-882dd563a4d0.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:35:03:f5:0d:42:9e:2f:c8:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b300b3fe-8b38-4568-ac8e-9083987e113c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:63:f7:1a:2e:63:80:0e:30:fb:45:7e:2b:
                    10:36:8b:a8:38:8f:ba:be:a6:a7:3b:88:af:81:9f:
                    ca:bd:ef:0a:21:8c:3d:5d:4b:f1:23:81:eb:b3:40:
                    e4:f1:0c:8c:6a:1a:aa:01:92:5c:f2:04:af:74:70:
                    d4:7f:2d:eb:8f:77:f6:55:6d:16:14:6e:d4:ec:fc:
                    bb:15:06:1b:3e:b4:be:1e:cf:69:86:2f:b0:d2:9e:
                    c9:b9:19:c8:d6:df:6a:c3:5d:f1:8d:94:59:11:3d:
                    0c:3e:31:b2:d6:3a:ea:95:d5:3c:d7:12:b9:12:2c:
                    ff:da:f3:e7:c8:d5:42:ff:8a:08:8a:64:75:e7:20:
                    f6:90:16:b9:b5:1c:39:cb:6a:38:7c:38:02:a0:af:
                    da:9f:84:be:aa:43:bc:05:e3:75:dc:9b:04:b8:45:
                    10:d9:9c:6e:7b:77:03:48:b5:df:c5:71:b6:33:13:
                    be:2b:0f:16:a1:32:28:51:25:3e:ac:9e:e5:14:3e:
                    b7:0e:40:0a:ce:30:af:78:b5:50:51:70:40:2f:da:
                    fa:d9:3f:24:6c:98:9b:ce:7e:71:db:32:42:f8:48:
                    e5:d7:39:dc:23:b4:b8:a7:0c:9c:23:0f:65:db:d5:
                    d0:51:23:28:80:ae:ca:71:b6:65:64:ee:74:24:71:
                    9f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:81:11:81:52:F0:98:48:52:03:FF:56:DC:30:99:2C:5F:52:5D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c6af2770-f621-34a9-9016-882dd563a4d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:fa:e3:23:4e:d4:e8:2c:d6:74:f1:96:e7:72:33:e4:37:8e:
         02:a1:40:c3:41:e4:1f:65:40:67:aa:b3:4e:09:92:f4:74:11:
         da:d1:19:20:be:ec:ec:9f:ba:87:d4:3c:12:3b:b2:c2:c4:55:
         2c:cf:fc:fb:3c:7a:3f:ef:f1:5e:df:b7:d0:ac:26:3b:0c:d4:
         ff:8f:a2:19:c2:d8:10:59:52:2d:55:83:d1:6c:10:21:de:32:
         e3:c9:eb:f7:7e:0b:27:0d:df:c9:b6:a9:f4:19:a7:90:d6:6b:
         7c:7f:f2:32:e9:02:d7:da:3b:ae:44:8c:62:a0:c5:d1:a2:86:
         36:fe:d1:b8:d1:79:73:8e:ae:f0:be:98:e1:6d:59:e3:73:26:
         5b:48:55:05:97:2b:6f:c5:69:2e:41:1f:63:71:d8:43:ae:20:
         db:74:bd:af:98:65:79:33:f7:e2:0d:29:f9:b0:52:2a:5c:17:
         b2:e8:1b:4c:ef:a7:9d:5e:a2:d0:29:0d:69:6b:26:ae:02:af:
         e7:18:f2:fe:00:ff:d2:f9:29:be:38:4b:02:3c:ba:1e:bc:3b:
         d5:ce:0d:b5:80:31:c2:4c:c7:75:24:1f:e7:6a:3b:8d:02:5a:
         33:a8:68:49:0a:dd:9b:42:2f:70:3b:47:8b:37:0f:87:ff:11:
         5c:45:a1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:23:26 2025 by rpki-client