Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2325714f-756e-34d7-8f00-0408d4f6909b.roa
File:                     2325714f-756e-34d7-8f00-0408d4f6909b.roa (raw, json)
Hash identifier:          QghETRH8qJkWsrwAnXAJCllsRNz23lnsKUOEHvdHu68=
Subject key identifier:   37:6A:B4:4C:DA:F9:08:45:72:29:D3:89:7F:B3:3E:60:2B:62:E8:03
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA7A04F1FA8EEADBD32640100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2325714f-756e-34d7-8f00-0408d4f6909b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:4f:1f:a8:ee:ad:bd:32:64:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d33e7610-f3f2-40d1-8c7a-f236a1449a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:ca:74:31:d2:94:92:b0:bd:57:f4:53:61:
                    7d:cb:91:20:3d:c1:9d:28:77:3a:6d:6f:c8:09:cb:
                    22:38:d0:cb:80:a6:a8:3e:bb:db:9f:cd:93:ab:6a:
                    da:fb:8c:80:c9:4a:bb:39:0c:cb:0a:67:36:47:3c:
                    03:81:16:8d:38:15:77:87:e0:b0:b1:8f:da:7e:e4:
                    df:62:59:04:6c:50:2e:f8:43:a7:1c:3f:14:aa:64:
                    ed:14:ba:69:3b:54:74:84:b9:15:15:5c:9b:88:80:
                    61:2d:f9:ef:87:fc:47:a4:87:84:c9:d8:73:39:03:
                    6e:4f:2f:87:c4:52:cb:71:62:78:e9:7b:28:28:9e:
                    9f:f0:bc:9a:54:7f:52:6a:ca:c6:69:20:07:4d:1a:
                    7a:a9:46:77:a2:9c:cc:42:a1:49:95:bf:ec:11:24:
                    44:a2:be:ac:29:09:3d:67:9b:90:53:b4:ba:12:7e:
                    3f:91:76:03:00:6b:4f:42:ec:87:51:e3:57:65:4e:
                    d3:8e:65:a6:63:24:ac:3a:e1:cb:cd:22:2c:a8:b7:
                    84:00:2d:74:6b:2e:db:88:b2:66:af:f3:02:e8:c9:
                    4a:9c:70:30:43:0f:54:f9:f4:db:70:4f:64:ee:de:
                    d8:dd:a7:52:fb:e0:22:91:a8:4f:9a:d6:a2:99:72:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6A:B4:4C:DA:F9:08:45:72:29:D3:89:7F:B3:3E:60:2B:62:E8:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2325714f-756e-34d7-8f00-0408d4f6909b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c8:93:01:e2:c0:cb:b8:ad:cd:60:8a:a5:54:b2:2c:06:29:
         7e:2c:88:98:f9:2f:63:9e:6d:51:6f:a5:dd:25:f5:a2:44:72:
         15:0f:8c:c0:45:3f:6f:37:dd:7e:87:40:1c:d0:6a:2d:e5:2c:
         55:bc:ef:bc:6e:58:6a:9f:85:f8:1a:d4:be:1f:8d:e9:3c:ea:
         9c:06:44:bf:af:9d:20:2f:4c:3f:90:85:7e:f7:ed:ff:13:a9:
         15:f0:be:20:75:8a:bb:3c:30:b3:8c:0e:e5:e9:26:b9:f9:9d:
         2f:ce:bb:e2:d5:ac:2d:e7:1a:2c:63:54:6a:30:0e:d7:25:b1:
         89:13:aa:7e:83:e1:5d:b9:d0:01:c8:4a:13:f7:1f:1b:f6:1f:
         cf:84:9b:00:3d:86:f3:98:a9:57:c0:79:7e:8d:bf:15:87:96:
         c4:09:81:a1:10:85:83:b4:38:5f:02:09:9d:ce:d6:05:76:9c:
         10:75:59:e1:cc:3f:12:1d:94:ea:d3:75:de:0b:e6:12:37:14:
         ad:ee:11:1a:96:11:fc:80:54:1d:4d:55:8f:b7:f0:36:28:20:
         fb:26:b0:d4:82:c3:e7:7d:dc:82:a3:41:a3:e0:02:93:6d:a5:
         ea:16:d0:93:8b:aa:91:54:01:f6:cc:71:39:b0:8f:9f:7e:57:
         71:4f:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:31:35 2026 by rpki-client