Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f169cd3a-8ca9-330e-8642-a90f86a55c11.roa
File:                     f169cd3a-8ca9-330e-8642-a90f86a55c11.roa (raw, json)
Hash identifier:          bKT1aXSVRXz4zA1kH0LKtNwMV/L8tgJrSNOYh+jlRf0=
Subject key identifier:   90:CD:21:F3:61:3B:80:01:A2:D9:80:B7:DE:47:0E:1D:EE:01:04:3B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B6B002A17B7F742D83AC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f169cd3a-8ca9-330e-8642-a90f86a55c11.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:6b:00:2a:17:b7:f7:42:d8:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=95b9f077-3fc7-46e5-953b-d3429b620981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:66:15:21:48:10:9d:62:27:4e:84:a3:5f:13:
                    90:fa:76:ea:e3:f8:9d:63:9f:d3:bc:aa:00:14:91:
                    e8:0b:72:d4:4f:2b:fa:b7:a4:08:43:2b:bb:e6:2d:
                    43:6a:10:1e:56:f5:3f:16:5d:0c:49:68:7e:01:1a:
                    ad:7f:04:27:a1:69:3c:f2:c7:5d:16:81:f2:72:5e:
                    97:f8:1c:a4:fa:46:6b:7c:bb:07:45:be:5e:33:d0:
                    f5:d1:aa:4b:b2:80:bd:d8:97:36:44:09:74:e3:ed:
                    77:02:27:c2:0a:38:31:84:ad:ea:9a:b3:20:a0:1f:
                    5c:43:91:5d:46:92:23:cc:7c:28:7a:af:66:3c:86:
                    e9:05:65:ae:62:53:75:0a:00:64:10:31:3a:67:4f:
                    79:b1:e2:ed:8e:a6:c6:22:73:c0:1e:66:c9:2d:d4:
                    a4:ab:8b:c7:48:48:f6:8a:f9:50:8e:7d:de:c5:77:
                    de:8a:e1:1d:c0:91:7b:e8:24:e8:12:af:33:38:a7:
                    28:26:bf:3c:6f:86:cd:a0:dc:7c:43:78:c5:6d:c5:
                    c0:30:10:3e:e2:de:09:ce:4d:68:5f:da:82:79:3d:
                    35:c2:74:88:5d:65:98:2b:2c:2b:dd:23:43:c1:a1:
                    b3:38:62:c0:ce:02:56:b9:96:89:29:97:ec:e8:d1:
                    89:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CD:21:F3:61:3B:80:01:A2:D9:80:B7:DE:47:0E:1D:EE:01:04:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f169cd3a-8ca9-330e-8642-a90f86a55c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:83:e2:3c:20:da:3e:f7:46:3c:68:a2:99:d6:7c:3d:e3:9b:
         52:fe:66:a4:09:e1:dc:c3:16:28:89:5a:c5:f1:98:06:1a:c2:
         3f:63:6e:32:54:ea:30:04:98:37:88:00:61:75:ae:08:80:36:
         2a:c7:73:f5:9f:d3:6d:d6:d0:e6:f0:0c:3a:83:b4:df:ad:d9:
         9e:73:ed:41:66:50:58:bd:3c:83:bf:e6:55:2a:4c:04:a7:6c:
         9d:6e:54:3f:e1:b9:f7:01:bf:67:42:06:3d:51:db:3f:46:ac:
         88:13:33:13:35:e6:c6:54:ac:e9:b2:7a:ec:b7:71:d3:50:35:
         c2:ba:3c:10:68:60:1c:f7:05:e9:85:02:68:7b:6c:c6:08:8c:
         b0:2c:57:0a:6e:d8:2e:a7:50:73:98:5d:c9:3f:f6:ec:60:48:
         c0:20:87:d4:19:66:28:81:cd:a7:d9:44:3d:ea:9c:86:34:ef:
         66:c9:72:b0:e4:16:c3:d9:68:ad:70:ee:9d:0e:1a:49:2a:0d:
         fe:7a:3e:1f:1d:18:42:32:3c:b7:95:ea:97:d3:a3:f0:6f:ac:
         f4:1d:bd:5d:ea:e0:03:76:7a:2a:24:36:e0:db:65:c5:89:ee:
         93:06:6f:e0:c8:a2:6e:3c:e7:f3:ec:72:18:0d:d7:94:c5:0d:
         cd:b7:5c:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2sAKhe390LYOsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
OTViOWYwNzctM2ZjNy00NmU1LTk1M2ItZDM0MjliNjIwOTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWYVIUgQnWInToSjXxOQ+nbq4/idY5/TvKoA
FJHoC3LUTyv6t6QIQyu75i1DahAeVvU/Fl0MSWh+ARqtfwQnoWk88sddFoHycl6X
+Byk+kZrfLsHRb5eM9D10apLsoC92Jc2RAl04+13AifCCjgxhK3qmrMgoB9cQ5Fd
RpIjzHwoeq9mPIbpBWWuYlN1CgBkEDE6Z095seLtjqbGInPAHmbJLdSkq4vHSEj2
ivlQjn3exXfeiuEdwJF76CToEq8zOKcoJr88b4bNoNx8Q3jFbcXAMBA+4t4Jzk1o
X9qCeT01wnSIXWWYKywr3SNDwaGzOGLAzgJWuZaJKZfs6NGJwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDNIfNhO4ABotmAt95HDh3uAQQ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZjE2OWNkM2EtOGNhOS0z
MzBlLTg2NDItYTkwZjg2YTU1YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOD4jwg2j73RjxoopnWfD3jm1L+ZqQJ4dzDFiiJWsXxmAYawj9jbjJU
6jAEmDeIAGF1rgiANirHc/Wf023W0ObwDDqDtN+t2Z5z7UFmUFi9PIO/5lUqTASn
bJ1uVD/hufcBv2dCBj1R2z9GrIgTMxM15sZUrOmyeuy3cdNQNcK6PBBoYBz3BemF
Amh7bMYIjLAsVwpu2C6nUHOYXck/9uxgSMAgh9QZZiiBzafZRD3qnIY072bJcrDk
FsPZaK1w7p0OGkkqDf56Ph8dGEIyPLeV6pfTo/BvrPQdvV3q4AN2eiokNuDbZcWJ
7pMGb+DIom485/PschgN15TFDc23XFU=
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:23:26 2025 by rpki-client