Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fc846936-09ae-331d-83d6-1139b8133650.roa
File:                     fc846936-09ae-331d-83d6-1139b8133650.roa (raw, json)
Hash identifier:          fBE1fVLEibfRkFcEPzsPfdWM/uY/eAO4LOCAMj3bt3s=
Subject key identifier:   7B:B2:19:9C:47:DB:1E:60:56:8D:2A:CF:4B:1A:06:A9:37:B7:FF:23
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A7E7B77A6AA7AD88BF261A580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fc846936-09ae-331d-83d6-1139b8133650.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:77:a6:aa:7a:d8:8b:f2:61:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=94082ba9-5f57-4e0e-ad44-00bed30ba840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:9b:7e:1e:2d:b0:78:61:d2:96:a2:01:0a:
                    7e:99:ca:73:3b:5d:eb:5c:35:eb:21:eb:33:1f:1e:
                    d0:bd:9c:cb:cf:47:1b:ea:87:1a:c1:f5:1a:79:5b:
                    b3:56:40:49:f9:23:6d:4d:64:9f:89:d7:3f:34:56:
                    0f:23:c0:b3:c5:18:be:5a:c2:9c:36:04:a0:7c:ce:
                    1c:85:15:ed:8b:a1:c4:85:ea:1f:2d:c9:b9:63:cb:
                    ba:65:f1:9d:63:a9:eb:26:33:42:f8:c6:f6:a3:56:
                    93:91:99:fd:a6:7b:c3:98:89:8e:ee:19:e2:aa:0e:
                    9c:95:46:96:a9:1b:be:e8:5d:49:63:12:1e:5d:c1:
                    28:46:ff:dc:dc:fb:69:2d:8b:f9:5a:e0:5e:8f:ef:
                    6a:0f:10:23:f4:5b:6f:4f:cb:d4:d0:df:62:f2:e4:
                    2c:ad:cc:a2:37:99:15:31:25:7e:1b:c1:30:b6:47:
                    1f:d7:6c:fb:80:c0:9d:f9:ec:5a:7f:2f:54:6b:31:
                    b2:50:87:42:ec:76:c0:79:11:d5:c1:d0:53:ff:b4:
                    41:98:ed:d5:de:1e:5d:bb:0b:fc:63:fc:d1:eb:37:
                    59:a9:8d:ff:ea:4b:b7:77:f7:20:83:2b:3c:65:0f:
                    5a:22:89:40:65:a1:1a:60:3f:26:f4:1d:f0:96:4a:
                    82:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B2:19:9C:47:DB:1E:60:56:8D:2A:CF:4B:1A:06:A9:37:B7:FF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fc846936-09ae-331d-83d6-1139b8133650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:fe:86:27:2a:1c:e8:3f:50:15:73:76:1b:61:c2:c2:48:
         80:d6:78:42:fc:0b:17:52:bf:37:1f:ab:7f:fc:d5:9f:fc:cc:
         04:96:a2:ea:c9:cc:df:87:36:97:2e:34:e2:28:37:14:b7:84:
         2e:cf:6c:04:03:91:fd:cd:6d:9c:07:9b:9e:83:d0:1c:19:fa:
         ba:e2:7e:89:07:8b:f6:86:5f:10:fd:50:3f:8c:46:6e:18:67:
         58:7d:16:53:8c:99:78:72:4f:76:3f:18:bf:c8:81:99:f1:4c:
         f9:f2:16:10:ea:c0:35:a6:b9:f7:dc:fc:32:a7:17:74:c9:02:
         f2:97:26:50:ac:69:93:fd:55:19:b9:c7:71:21:79:c3:fe:2b:
         2c:ad:62:43:7b:7f:80:19:4d:77:fc:e5:13:ba:2b:d7:12:a1:
         ce:3c:40:2b:12:e1:78:71:fa:25:a5:9c:a8:da:3c:91:71:6f:
         5c:f1:d5:d4:01:39:dd:23:b9:e0:e9:39:29:b1:ee:14:22:36:
         6b:f4:8c:31:83:62:86:1c:cd:df:25:c5:95:dc:82:72:ea:81:
         99:12:18:7c:e2:03:dc:59:86:18:1d:20:48:fd:bc:fe:d9:f2:
         9e:70:ca:07:61:da:9d:cb:d8:36:b7:2e:51:d4:42:e7:85:b3:
         b0:c6:36:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3emqnrYi/JhpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
OTQwODJiYTktNWY1Ny00ZTBlLWFkNDQtMDBiZWQzMGJhODQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Gbfh4tsHhh0paiAQp+mcpzO13rXDXrIesz
Hx7QvZzLz0cb6ocawfUaeVuzVkBJ+SNtTWSfidc/NFYPI8CzxRi+WsKcNgSgfM4c
hRXti6HEheofLcm5Y8u6ZfGdY6nrJjNC+Mb2o1aTkZn9pnvDmImO7hniqg6clUaW
qRu+6F1JYxIeXcEoRv/c3PtpLYv5WuBej+9qDxAj9FtvT8vU0N9i8uQsrcyiN5kV
MSV+G8Ewtkcf12z7gMCd+exafy9UazGyUIdC7HbAeRHVwdBT/7RBmO3V3h5duwv8
Y/zR6zdZqY3/6ku3d/cggys8ZQ9aIolAZaEaYD8m9B3wlkqC2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuyGZxH2x5gVo0qz0saBqk3t/8jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZmM4NDY5MzYtMDlhZS0z
MzFkLTgzZDYtMTEzOWI4MTMzNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgq/oYnKhzoP1AVc3YbYcLCSIDWeEL8CxdSvzcfq3/81Z/8zASWourJ
zN+HNpcuNOIoNxS3hC7PbAQDkf3NbZwHm56D0BwZ+rrifokHi/aGXxD9UD+MRm4Y
Z1h9FlOMmXhyT3Y/GL/IgZnxTPnyFhDqwDWmuffc/DKnF3TJAvKXJlCsaZP9VRm5
x3EhecP+KyytYkN7f4AZTXf85RO6K9cSoc48QCsS4Xhx+iWlnKjaPJFxb1zx1dQB
Od0jueDpOSmx7hQiNmv0jDGDYoYczd8lxZXcgnLqgZkSGHziA9xZhhgdIEj9vP7Z
8p5wygdh2p3L2Da3LlHUQueFs7DGNuk=
-----END CERTIFICATE-----
Generated at Sat Jul 26 07:29:04 2025 by rpki-client