Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f66dd74f-ed98-39a0-b948-3599c5d41e20.roa
File:                     f66dd74f-ed98-39a0-b948-3599c5d41e20.roa (raw, json)
Hash identifier:          z1PlGpb/kypaxL0YqlYTmmyZN1YlNzDBaMqiZjWCMTo=
Subject key identifier:   B5:49:BC:3D:A0:6A:A4:D4:26:EE:DB:70:40:58:A7:97:56:89:FB:FD
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B688BD9C58A1C0D8836A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f66dd74f-ed98-39a0-b948-3599c5d41e20.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:68:8b:d9:c5:8a:1c:0d:88:36:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=70c327fd-e8c8-4aeb-92be-37d452cbe707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:04:4e:ab:24:6b:11:36:46:23:d8:b8:7f:3a:
                    ed:fe:c1:e8:8c:f1:f7:20:35:b3:25:57:ca:6c:b4:
                    b6:13:bb:5a:d4:b6:47:34:1d:de:6d:84:b8:d3:23:
                    2a:74:52:43:06:e5:70:0a:34:40:36:96:d5:7b:8a:
                    a6:b6:a7:c1:4c:cb:87:63:4e:51:a3:d7:22:3c:5c:
                    65:bc:68:52:c2:bb:8f:f3:ac:fb:31:07:5b:86:ce:
                    f0:d5:26:98:e5:bf:3a:e9:40:19:4c:38:e7:ef:08:
                    9d:5f:a1:d3:a1:ef:72:26:36:50:ba:30:4b:eb:0f:
                    b9:85:80:9c:1e:54:e7:4a:eb:e4:67:3c:54:03:88:
                    21:3e:1c:52:b9:7a:cf:d1:0e:b9:33:d6:fb:19:34:
                    62:95:fe:f5:4c:c3:19:80:34:40:c3:e5:b9:4a:ef:
                    89:e3:21:bf:17:f8:b6:2c:2b:46:62:7e:99:b8:2b:
                    59:ea:b7:80:9b:fc:99:1d:8b:db:ce:5a:a2:c7:40:
                    5f:76:74:4d:85:5a:2a:7c:72:6d:05:25:36:63:4b:
                    99:20:a2:28:46:e5:ab:89:11:68:02:84:ab:57:18:
                    e0:99:3d:86:06:69:6e:12:82:27:e5:14:9d:6f:3a:
                    ca:6b:98:ca:59:b1:d3:89:60:99:ef:72:90:fb:b0:
                    f1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:49:BC:3D:A0:6A:A4:D4:26:EE:DB:70:40:58:A7:97:56:89:FB:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f66dd74f-ed98-39a0-b948-3599c5d41e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:57:5f:db:77:80:3d:ed:e6:a7:11:c5:a5:94:04:84:f1:ab:
         b0:ed:fe:21:30:ad:94:41:c7:c1:c9:1b:ea:20:6b:c5:7f:d4:
         a7:24:ba:fd:73:3b:a7:55:a9:48:ac:13:d1:c9:89:a3:c3:a8:
         fa:a1:f4:97:34:d3:0a:75:5e:b0:26:86:ee:3d:ae:79:03:81:
         52:e3:e0:7d:5f:e0:9a:90:e8:cd:eb:0d:18:9e:55:5f:a3:a1:
         bb:49:a8:11:fd:f4:9f:03:fc:84:cd:6b:19:43:1e:bb:bd:ad:
         f6:96:a9:b1:37:e7:18:5e:c2:9a:a6:cc:39:57:0f:75:42:db:
         d2:8f:ac:25:fb:8c:2c:49:58:1f:03:44:ea:bb:dc:01:29:a3:
         b1:f0:c3:24:c4:a5:d6:5b:8f:cf:c3:9d:ff:8d:05:ff:3c:7a:
         9e:ed:4e:95:80:b6:82:f7:b0:b3:3d:9d:ea:f9:a0:49:66:9b:
         16:96:08:75:55:fb:84:97:58:8a:51:26:3b:40:0d:fd:cf:08:
         87:ba:be:c5:00:cd:4b:a9:b4:56:52:ab:05:22:5a:b3:21:ad:
         3d:57:e2:0a:eb:ef:12:64:89:37:6b:10:76:04:55:15:9d:d9:
         de:84:88:6b:6e:54:9a:e1:bc:95:9b:07:90:f7:9f:12:fb:d2:
         f9:c8:3a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:26:59 2025 by rpki-client