Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa
File:                     fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa (raw, json)
Hash identifier:          eJhIKNhOTPd5mDBFJRs10PSgU7DtU/97VBVIYfwcyOk=
Subject key identifier:   5D:90:B1:75:58:20:0E:A5:CA:C6:64:15:0F:14:3C:FB:F5:37:03:71
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A84118BD0FFBF23BD8EE68000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:8b:d0:ff:bf:23:bd:8e:e6:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4e8cb9dc-abc3-4978-82f5-a9beb6c3bd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:f2:78:9c:c6:bf:7c:e5:8f:a5:1c:06:3f:
                    19:aa:0b:f6:8a:d9:2c:9a:1b:1c:64:be:e7:f5:c3:
                    7a:dd:58:ab:b6:27:fa:9a:49:5b:91:24:f1:d2:2a:
                    11:7d:01:91:fe:e0:e7:8b:67:e7:77:bf:cb:58:d7:
                    16:58:88:67:77:7f:19:45:83:5a:8f:c4:a5:03:50:
                    9c:49:f9:f4:49:23:2c:eb:11:10:15:c6:9d:8b:c7:
                    a3:94:9a:67:28:82:3f:25:16:46:ad:e7:0d:44:ee:
                    76:98:90:bb:fb:98:ae:9b:3a:f1:06:14:91:84:bb:
                    6c:12:2b:05:00:19:7f:18:13:6a:9f:cc:64:1c:9f:
                    fe:31:e0:9e:da:c5:a1:9e:1a:42:2b:64:b3:88:be:
                    51:18:32:65:95:34:75:0c:aa:d2:80:0e:f3:7b:7c:
                    29:29:9d:0a:5e:cf:db:fc:e4:51:6e:b3:e1:7c:1d:
                    8a:13:cb:ca:e7:7f:d5:f9:25:d8:b4:de:0b:7e:02:
                    42:e8:16:9d:3c:40:c8:88:51:58:18:2f:0d:14:0d:
                    32:2e:5c:9a:fe:59:db:8a:27:99:5a:8d:0e:06:5c:
                    09:51:6a:31:1f:29:eb:76:b6:0e:73:08:a5:15:f0:
                    ec:dc:f0:6b:38:d6:d5:a0:f8:f8:2b:bc:c0:ed:1e:
                    2f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:90:B1:75:58:20:0E:A5:CA:C6:64:15:0F:14:3C:FB:F5:37:03:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:39:3e:06:3e:fa:96:62:2c:7e:39:32:f6:21:d4:69:4f:e1:
         5c:71:c6:db:94:e7:73:37:86:43:98:00:21:d2:8b:f1:d8:b0:
         af:06:8c:de:3a:ba:2a:24:20:db:7d:27:8c:ad:98:e5:e9:c6:
         d5:d3:3e:ea:ed:e6:e3:1f:e3:76:72:bf:2e:b2:e8:61:76:d3:
         9f:ef:84:5c:ab:a8:f7:21:85:83:ba:15:2d:e5:25:32:db:1c:
         fe:b5:99:f6:20:1f:4f:60:da:93:f0:db:03:20:14:50:45:03:
         5a:c5:ba:90:42:cd:d6:1e:bc:2a:33:fc:51:08:7c:9e:1d:33:
         50:6e:a6:e2:6c:8d:9a:d9:e5:79:87:34:91:d5:5c:87:30:a7:
         73:de:e8:59:73:ae:d9:51:e9:81:09:4d:05:71:e7:a8:68:5a:
         65:69:a7:9c:ff:df:e6:55:a2:3e:ef:35:c5:80:c2:45:56:3e:
         5b:6d:c0:43:e0:8a:e5:51:42:fd:cb:bc:09:9c:e8:21:ad:b6:
         1d:c6:bf:27:33:5d:5e:aa:01:a3:e2:e6:85:a8:b6:14:56:eb:
         a7:55:a6:4a:50:a9:d7:2f:eb:43:a0:f0:08:f4:bc:7c:a2:34:
         dd:5f:a5:ea:01:40:ed:c4:46:c0:c7:df:00:cd:f2:bd:5e:ac:
         9f:e6:29:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:20:17 2025 by rpki-client