Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d96c7c7f-1889-3ed4-b0fb-92bcc75be509.roa
File:                     d96c7c7f-1889-3ed4-b0fb-92bcc75be509.roa (raw, json)
Hash identifier:          TwahGWmpoANsWXRgPg7lYVRLciKBbtuRjImXxilerkY=
Subject key identifier:   E2:F9:6E:76:17:88:78:AB:81:23:F3:58:D9:ED:AC:5E:08:04:2A:4C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B9C7BFEC1DE97184EBD00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d96c7c7f-1889-3ed4-b0fb-92bcc75be509.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:9c:7b:fe:c1:de:97:18:4e:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=cd75e959-c2f1-438f-a0f8-f663d991df9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:5f:ba:38:28:41:e9:e3:b9:f2:eb:6c:b9:
                    fe:74:b7:0f:58:d1:b4:d3:2a:40:a2:04:d5:96:fc:
                    e8:a9:12:42:9b:e3:eb:43:c8:d0:b3:b9:6b:43:16:
                    2e:59:6e:97:4a:e1:fa:cc:75:ab:d2:8b:80:e0:f6:
                    76:71:3e:48:41:d5:6c:2d:23:9f:a6:1a:0a:5e:f6:
                    2c:40:ef:d1:ed:0e:55:b4:15:3b:5e:10:c2:f4:fa:
                    2b:87:f9:c6:c1:4f:7d:67:39:0e:e3:89:0c:48:be:
                    30:25:f2:9a:b8:93:aa:d1:de:40:72:46:81:a3:54:
                    2f:6c:b3:b5:66:51:b5:c7:22:40:1c:d8:6a:11:46:
                    89:9e:1b:52:60:aa:85:8c:c8:66:c9:3c:ad:c1:99:
                    af:c1:c2:a3:4b:c2:1c:98:cb:5c:6e:32:1c:da:a1:
                    81:40:57:aa:a7:bc:14:a4:d3:d3:f6:d9:f7:b6:0d:
                    e4:7a:09:f5:8b:ad:16:44:53:b5:a1:6d:83:56:e6:
                    9d:a8:cd:a5:a4:3c:97:ba:ea:55:e9:62:d5:0d:de:
                    0c:7e:cc:ad:04:eb:bb:71:f9:46:2a:07:1b:f6:73:
                    1c:e6:f5:77:2e:02:4a:2d:9e:dc:fa:fa:77:45:71:
                    a6:f0:67:b4:88:00:36:a9:b3:3d:00:5f:21:af:7d:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F9:6E:76:17:88:78:AB:81:23:F3:58:D9:ED:AC:5E:08:04:2A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d96c7c7f-1889-3ed4-b0fb-92bcc75be509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e8:3b:20:81:eb:79:7e:7f:95:b8:86:5c:38:f8:04:67:24:
         b3:2d:e5:e7:61:16:c9:7b:10:96:da:34:d4:16:85:a7:d8:ee:
         90:56:49:c0:c7:e4:cf:04:16:cf:d0:bf:b1:60:e7:65:91:c8:
         41:98:3c:ac:92:ef:35:1d:2c:00:00:4e:01:f1:3a:96:45:ac:
         2c:66:04:7c:f5:a0:42:7a:4c:76:66:f7:0c:24:14:91:ba:fa:
         ea:77:bd:8b:9d:ac:5a:c1:1b:74:d7:90:2e:df:0a:15:77:51:
         90:7e:59:3e:ea:06:7e:cb:54:d6:1a:c9:3b:56:f2:34:4f:52:
         0f:ed:dc:6b:a0:18:14:4f:41:37:6e:9f:f9:f8:ef:53:4e:19:
         2a:2f:26:19:e0:47:99:c3:aa:ba:08:0f:d6:09:75:ad:05:2f:
         a7:50:cd:5a:a3:50:0f:ab:9b:e7:04:1a:6d:86:45:7d:aa:14:
         20:9c:c8:b0:8d:91:e4:90:a5:04:16:c7:c5:aa:14:75:79:68:
         2e:2d:31:eb:01:20:fd:d2:a5:1c:e1:fa:71:d9:14:6c:84:ea:
         bc:60:4e:aa:ff:65:d1:e8:fe:21:06:61:ce:bc:35:a6:d6:74:
         aa:7c:18:8a:71:31:19:22:c2:bb:2c:33:91:8f:7e:b9:1e:66:
         e6:6c:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:20:42 2025 by rpki-client