Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f2cdee5a-90b3-3455-86e3-1bbddf099f5a.roa
File:                     f2cdee5a-90b3-3455-86e3-1bbddf099f5a.roa (raw, json)
Hash identifier:          +cC3nm101y60kxoQArg4LUy/nhFg4r7qpGpMJFwH7x0=
Subject key identifier:   C6:E0:F9:BE:AC:B1:57:F7:13:B5:2C:DB:BF:72:EA:30:AF:A9:0D:B0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B8A50C554BDBC37206680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f2cdee5a-90b3-3455-86e3-1bbddf099f5a.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:8a:50:c5:54:bd:bc:37:20:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=d9760f29-cb32-4ec0-abdc-73ebcdb0d578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:7d:72:b8:e2:c2:f2:6c:48:e1:ef:89:bf:
                    28:54:82:05:fa:cc:d1:f6:7d:87:e2:c0:2b:a4:69:
                    bd:52:6d:e1:a2:bc:33:f0:b9:c1:8b:a8:78:0d:c6:
                    1a:eb:8c:b0:24:06:3a:83:2c:92:0e:1d:9a:08:1e:
                    cf:e5:de:8c:c3:2d:78:a7:09:ef:32:3d:2b:84:be:
                    79:f2:af:b0:89:13:87:7c:2a:40:e2:8c:ab:ed:03:
                    94:86:96:66:33:b0:61:39:44:d9:a5:53:bc:f6:dd:
                    97:f7:13:cd:48:ed:11:30:24:57:1f:53:84:2a:c6:
                    52:42:76:83:5e:85:c3:be:09:ff:57:cc:85:b2:6a:
                    43:c7:4f:00:39:89:a6:67:0e:84:7f:eb:ec:eb:cf:
                    57:57:56:2b:dd:d8:0d:63:07:4a:2e:c8:21:ca:30:
                    69:de:6b:d0:ea:79:c1:59:f9:01:5b:19:5f:d5:a8:
                    8e:e2:d9:bb:1b:fb:14:bd:66:75:56:e5:78:8c:f5:
                    ba:48:7e:a0:87:cf:a2:46:15:68:4d:3c:a8:26:1c:
                    8d:24:da:f4:1d:37:48:42:7f:a4:15:ff:2a:8c:89:
                    5d:3b:12:31:40:5e:13:af:6f:2e:50:f0:c4:f9:73:
                    1a:79:17:3e:db:a7:d4:ad:41:31:5d:15:d1:1c:c5:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E0:F9:BE:AC:B1:57:F7:13:B5:2C:DB:BF:72:EA:30:AF:A9:0D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f2cdee5a-90b3-3455-86e3-1bbddf099f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:43:82:b1:12:79:5f:94:13:1e:91:e9:68:98:2e:c1:49:57:
         8e:8f:97:f3:6e:e1:f2:f9:bd:40:22:65:73:43:01:59:92:d6:
         c0:31:49:24:0f:61:77:e5:3a:e9:a1:2d:53:aa:0c:f2:6a:90:
         75:59:ee:9e:69:81:eb:09:42:c9:4b:ad:79:6c:f8:38:21:72:
         3f:70:f3:f3:b2:89:c2:c6:ef:7d:10:cd:aa:9a:24:51:15:f7:
         fa:49:52:b2:01:dc:e9:ed:1f:80:28:63:9e:2a:91:81:5c:b6:
         b9:be:cc:43:65:2b:b3:4f:f3:5f:71:ed:66:43:bf:fe:f1:b7:
         82:28:8b:f9:96:bc:c0:4b:ca:c9:f2:81:8e:b0:91:e1:26:7a:
         8d:9c:5a:d7:a6:28:1c:07:76:ba:b1:71:76:3e:21:ef:6b:26:
         60:5c:85:53:c5:dc:1d:8a:6e:95:04:42:92:11:af:69:b9:79:
         38:07:3e:ed:a7:bb:a9:29:d7:93:10:ec:50:12:06:e9:d3:dd:
         a7:13:2a:30:47:e3:a2:33:19:b8:91:b4:f4:1b:9d:92:0d:77:
         33:54:42:80:2c:0e:57:23:3e:d6:24:e8:5d:17:8d:e7:71:99:
         ef:70:ab:23:f4:b3:8f:da:1a:56:80:53:f8:74:1e:ad:d5:09:
         70:01:01:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:24:09 2025 by rpki-client