Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d9a716a1-b2f0-320b-a1df-ae24b632b117.roa
File:                     d9a716a1-b2f0-320b-a1df-ae24b632b117.roa (raw, json)
Hash identifier:          UUvvlT/gOc1M1wSr05L4TprXYy+kjxrt5mTSoTJkg4Q=
Subject key identifier:   39:C4:09:2D:4A:1F:0C:DC:D9:FD:EF:A9:F2:C8:DD:18:E4:82:6E:42
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A841185984E82BF8CED6F6880
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d9a716a1-b2f0-320b-a1df-ae24b632b117.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:85:98:4e:82:bf:8c:ed:6f:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0c152f67-8520-4e0f-8b6e-6ddcd751e63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:61:fd:d0:d1:91:cc:d8:de:75:9d:f9:33:
                    73:67:36:e7:75:ce:76:b2:e3:53:48:8f:3c:ec:52:
                    7c:4c:a6:c8:e3:2e:2d:23:c4:a8:65:3d:44:03:4d:
                    c0:37:30:5e:2d:c0:27:29:2e:d3:c4:ef:e2:cb:bd:
                    46:f7:79:5c:35:77:b4:0e:ec:fd:8f:67:bb:fb:51:
                    bc:ed:e4:91:14:e9:b8:1d:08:f9:51:eb:4a:9e:d4:
                    dd:b8:6f:1c:14:7e:64:02:e2:59:a6:eb:84:85:ed:
                    67:07:14:25:eb:a7:e5:ab:7c:32:9b:10:05:75:68:
                    ad:9c:90:74:37:c2:c1:b3:15:08:58:5a:0f:5c:ef:
                    db:79:7c:d1:b2:f9:39:e7:26:32:c2:71:e3:6f:3f:
                    aa:5d:26:26:71:98:ad:03:0d:29:b9:b3:75:8a:a1:
                    58:6b:cd:94:63:7e:7f:ef:5b:5d:b7:dc:77:6d:b1:
                    02:9f:b5:eb:86:70:7f:9a:c5:16:c8:df:ec:1d:69:
                    ab:8e:29:18:d4:63:11:8c:6c:4c:3d:96:2a:eb:3d:
                    8c:f0:ef:b8:9c:54:c1:4c:cc:3b:21:91:c1:21:a6:
                    02:6b:42:24:d5:45:68:84:3a:2f:5a:98:c7:11:c8:
                    9c:84:4a:33:05:20:61:fd:d5:08:d2:74:dc:71:bb:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C4:09:2D:4A:1F:0C:DC:D9:FD:EF:A9:F2:C8:DD:18:E4:82:6E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d9a716a1-b2f0-320b-a1df-ae24b632b117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e2:f1:7f:c0:be:78:8c:52:6b:67:52:9f:fb:80:15:72:52:
         f9:cc:6a:8f:94:a9:9a:e6:10:91:f8:c1:37:fb:e5:80:49:5d:
         67:c0:b6:04:a0:ab:dc:d4:51:ab:b0:41:bd:93:5d:a3:54:5c:
         b8:08:7b:a6:6e:be:50:f9:5a:10:ec:5c:79:c5:91:32:20:da:
         8d:71:74:37:c5:44:ec:71:c0:83:52:99:e8:c1:13:e6:c5:93:
         26:75:d4:c4:9b:96:68:fb:bf:9c:62:66:bf:ba:7a:55:4c:9f:
         96:97:4e:6e:e6:72:12:4d:3c:f9:f3:d1:e1:09:18:7d:30:ee:
         37:f2:fb:db:74:26:58:e8:b1:56:5e:45:87:0c:fd:25:f0:b3:
         aa:fc:1b:73:66:da:4a:47:44:86:7e:10:1a:db:39:01:71:b9:
         33:fc:49:ee:65:07:e3:95:08:c3:f7:23:79:31:2b:03:b6:c3:
         e0:a9:a4:fa:12:74:4d:ac:c6:aa:24:07:d2:d0:18:bd:e2:e2:
         4a:bd:7f:ab:ce:16:52:7e:3f:d2:6a:18:a1:46:b4:1a:a9:31:
         1e:5a:5c:e7:47:85:97:ff:b5:73:81:d1:ea:a6:d8:48:8c:43:
         49:dd:15:5f:f5:58:14:15:2e:dc:59:68:4a:4c:57:16:da:a4:
         7c:20:af:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYWYToK/jO1vaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MGMxNTJmNjctODUyMC00ZTBmLThiNmUtNmRkY2Q3NTFlNjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo5h/dDRkczY3nWd+TNzZzbndc52suNTSI88
7FJ8TKbI4y4tI8SoZT1EA03ANzBeLcAnKS7TxO/iy71G93lcNXe0Duz9j2e7+1G8
7eSRFOm4HQj5UetKntTduG8cFH5kAuJZpuuEhe1nBxQl66flq3wymxAFdWitnJB0
N8LBsxUIWFoPXO/beXzRsvk55yYywnHjbz+qXSYmcZitAw0pubN1iqFYa82UY35/
71tdt9x3bbECn7XrhnB/msUWyN/sHWmrjikY1GMRjGxMPZYq6z2M8O+4nFTBTMw7
IZHBIaYCa0Ik1UVohDovWpjHEcichEozBSBh/dUI0nTccbuKcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnECS1KHwzc2f3vqfLI3Rjkgm5CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZDlhNzE2YTEtYjJmMC0z
MjBiLWExZGYtYWUyNGI2MzJiMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/i8X/AvniMUmtnUp/7gBVyUvnMao+UqZrmEJH4wTf75YBJXWfAtgSg
q9zUUauwQb2TXaNUXLgIe6ZuvlD5WhDsXHnFkTIg2o1xdDfFROxxwINSmejBE+bF
kyZ11MSblmj7v5xiZr+6elVMn5aXTm7mchJNPPnz0eEJGH0w7jfy+9t0JljosVZe
RYcM/SXws6r8G3Nm2kpHRIZ+EBrbOQFxuTP8Se5lB+OVCMP3I3kxKwO2w+CppPoS
dE2sxqokB9LQGL3i4kq9f6vOFlJ+P9JqGKFGtBqpMR5aXOdHhZf/tXOB0eqm2EiM
Q0ndFV/1WBQVLtxZaEpMVxbapHwgr+M=
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:20:48 2025 by rpki-client