Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa
File:                     340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa (raw, json)
Hash identifier:          GFKC9bMv38WIAWgvJvJX+GHxDdTrTGb8CR/t/M1lpyk=
Subject key identifier:   23:BF:00:8B:6F:A5:4F:C1:47:81:C8:B8:E3:9B:36:3C:C1:E2:7D:70
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA7A03E15EADC7BDAC9F89C40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:3e:15:ea:dc:7b:da:c9:f8:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6905f333-7f30-46b1-ba93-f85bc9649b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c0:25:0e:67:e3:64:95:71:ee:f8:72:ee:40:
                    d5:4f:c0:65:31:58:68:5d:e9:32:b3:02:0e:7d:c2:
                    ee:4c:de:91:c7:dd:cc:f6:e9:0f:75:ec:d1:37:b7:
                    50:99:12:66:a8:de:a0:61:ad:48:4d:94:b3:ec:a2:
                    bf:73:d5:84:70:2e:df:5e:e4:e6:0e:f4:56:9d:84:
                    b1:76:fb:cd:6a:b7:2a:e1:6a:4c:65:ae:5b:e0:52:
                    cf:4c:6e:d0:1e:2a:2e:96:89:c5:1e:46:9c:f1:86:
                    00:f6:7b:7d:8e:5c:94:a2:47:b1:ab:8a:30:80:30:
                    fb:65:eb:ce:ed:ec:69:87:6f:4d:35:62:c1:1e:c6:
                    c7:1b:11:f1:27:2a:50:cc:92:e9:f7:4c:46:a5:14:
                    b4:e3:3e:05:9b:4c:a1:17:aa:64:e0:a7:de:e6:b2:
                    c8:d5:62:f5:66:d9:c2:4b:4f:77:d2:bc:9f:ee:1b:
                    1d:d7:4a:05:f1:e8:d0:6b:7c:7e:1e:f3:75:26:61:
                    0e:74:2b:b9:ea:88:b0:4f:42:77:25:6f:05:44:81:
                    6c:83:7c:df:71:f7:85:ec:1a:e5:15:cf:18:6d:db:
                    9d:34:f2:8b:2c:99:6f:1d:df:d0:44:95:88:bb:8e:
                    82:1e:28:33:ad:e0:cf:85:71:6f:84:6a:bc:11:79:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BF:00:8B:6F:A5:4F:C1:47:81:C8:B8:E3:9B:36:3C:C1:E2:7D:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:51:81:31:be:03:2e:f6:8e:8f:f9:fe:a3:8c:34:7f:e8:c3:
         63:d6:ad:e4:b8:f2:4e:89:27:6b:88:db:90:80:d3:e8:3c:70:
         cb:a2:c1:e2:af:b2:51:85:a6:e8:82:85:9f:46:46:e7:d7:85:
         b2:da:5a:89:de:22:5a:43:c6:88:48:69:46:b0:33:6b:a1:38:
         2a:78:73:7d:ad:66:97:cf:ea:1e:7f:77:e7:9c:f9:fa:e2:9c:
         c2:0b:87:89:76:bc:f4:25:ec:e0:2b:c9:03:3f:ac:47:9e:1e:
         4c:b6:56:32:d3:d2:24:c4:95:91:e5:28:58:b8:a7:45:e0:d6:
         01:5b:4f:2d:69:42:66:cc:f4:f9:f8:de:2d:e4:5a:c3:76:a4:
         ac:67:c3:05:a9:49:a2:b6:8f:d5:d1:8f:3f:13:61:1b:c8:cd:
         bb:d5:7f:a4:27:39:5e:5a:7c:ea:47:fd:f1:cb:06:69:c7:fe:
         29:78:2a:b2:53:9c:1f:23:5c:5b:d6:ec:0e:be:3e:04:4b:02:
         36:90:5a:41:78:00:45:50:8d:ed:27:98:d1:a2:7f:93:50:cd:
         c3:e0:02:e0:bd:88:fb:03:56:50:31:a9:c4:e9:e5:1b:82:00:
         96:09:37:c5:f4:a7:03:30:82:0a:57:f7:6d:f6:04:94:5c:27:
         98:f6:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:29:49 2026 by rpki-client