Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cee63ea6-f91a-38df-9d9a-434245d19f95.roa
File:                     cee63ea6-f91a-38df-9d9a-434245d19f95.roa (raw, json)
Hash identifier:          QJnFe6YIIG9dqtiQUzBEx0hRc2aKqU7fS7A2Tlvpr24=
Subject key identifier:   14:95:2F:05:2B:69:25:97:8D:73:B3:C2:72:9D:36:9B:A2:FB:61:A6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A8411736EACF04BBBF085D3B0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cee63ea6-f91a-38df-9d9a-434245d19f95.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:73:6e:ac:f0:4b:bb:f0:85:d3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=41c52623-39ff-4cee-89c7-f49aed4d635f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:a1:48:72:9f:58:d2:aa:7a:8f:4f:88:4e:
                    20:8e:02:84:af:f0:89:40:39:c4:c9:11:33:d0:02:
                    ae:ac:7b:f0:eb:89:43:6a:90:23:a4:a6:c2:a0:fa:
                    00:48:e2:98:a3:a3:6c:c6:6c:c3:2d:5d:11:6b:69:
                    a9:59:32:2b:f1:1a:16:ba:24:60:44:d8:c3:2c:74:
                    7f:cb:2f:ed:65:fe:54:08:11:12:cf:0e:3f:b2:5a:
                    ed:10:62:96:87:32:81:ff:f3:8a:c2:49:32:6f:26:
                    dc:49:58:95:b5:a1:a3:3a:a1:70:20:ae:2b:bc:74:
                    0e:51:4a:26:56:f0:e7:a8:8f:bd:08:6b:03:d9:14:
                    55:d7:41:14:ed:d4:5d:8d:66:48:6b:f5:03:4e:4b:
                    d4:31:c3:e9:db:45:a2:b2:5b:cc:8c:3b:f8:76:9e:
                    ab:78:ac:d0:c3:23:fe:e1:ee:d3:af:3e:36:e0:f5:
                    0a:33:e9:98:6c:b4:9a:8f:dc:82:84:1b:23:95:85:
                    cd:a3:8f:c0:f6:80:62:e6:be:7b:9b:07:5d:cd:e5:
                    5b:3e:af:70:1c:40:de:29:f3:5b:d5:f4:86:e2:ad:
                    1c:08:fe:08:b5:91:06:4b:a6:ef:0d:12:f7:8f:1d:
                    ce:6e:c6:ee:b4:58:6c:f2:5b:9b:00:88:94:56:a0:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:2F:05:2B:69:25:97:8D:73:B3:C2:72:9D:36:9B:A2:FB:61:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cee63ea6-f91a-38df-9d9a-434245d19f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:49:a6:99:6c:7f:1e:97:61:52:23:d7:a8:e9:a5:e9:4d:45:
         55:67:f7:4c:00:c6:a1:71:cf:1d:58:84:e8:11:46:7c:1d:69:
         d5:e7:f4:ed:6d:c2:8f:07:9e:f1:e7:5c:40:59:3e:47:5c:29:
         a5:d7:0e:5d:0a:26:8c:dc:0b:40:ad:20:ff:40:8a:03:92:b4:
         79:2a:4d:20:25:eb:ec:f3:51:ca:c6:2e:d7:aa:9c:a5:5d:65:
         99:b8:74:b0:92:be:3c:55:e0:44:c4:36:54:7b:a4:56:9e:e1:
         58:40:2d:a1:2f:ab:a9:0f:30:7d:68:76:85:db:75:d9:8a:2a:
         8f:5a:54:39:b9:92:11:f6:13:df:c9:91:10:c6:69:0c:26:7f:
         e9:ec:d6:83:9b:37:38:ec:76:38:65:29:1a:e8:32:be:a6:ef:
         ec:97:f3:15:3c:5d:01:df:c2:e7:7e:44:e6:03:10:0e:2b:16:
         77:9e:10:14:09:9f:c4:c6:e5:71:6b:86:0f:f3:14:87:33:cd:
         71:6a:56:b6:94:53:04:31:2f:2b:1f:cf:7a:1a:28:99:6b:1e:
         b3:ab:94:a5:bf:98:71:a2:b8:1f:3b:8a:65:54:a6:33:02:37:
         a3:13:8b:69:98:a9:9f:b7:a8:49:ac:e7:aa:cd:21:67:43:eb:
         83:f5:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:22:15 2025 by rpki-client