Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35f23b24-5f0f-3027-8602-f069556979a6.roa
File:                     35f23b24-5f0f-3027-8602-f069556979a6.roa (raw, json)
Hash identifier:          iSkUQLjwMN2kkxFy+YL6SYkYDVhPnNfsXnVp8Ox8G6Q=
Subject key identifier:   2F:AE:4B:EE:CA:D8:24:66:94:C8:44:E6:94:D9:DC:CF:2B:AB:A1:D1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497D1810A32A39CE645935C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35f23b24-5f0f-3027-8602-f069556979a6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:18:10:a3:2a:39:ce:64:59:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=219fbf1f-2b52-4336-ace5-83c8a61c3880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:f4:fb:34:c1:50:57:29:fb:4d:dd:de:e4:
                    c0:33:d2:1a:e9:2a:50:5b:6d:a9:23:09:fa:ba:e9:
                    3e:a3:53:07:8b:42:18:15:ec:05:e1:9e:59:c1:61:
                    ee:61:a3:00:e5:ad:cd:ab:f9:b0:a2:ac:98:1a:0f:
                    a3:58:bd:67:4a:17:a9:41:2f:f3:dd:1b:9c:43:4c:
                    67:dd:d3:3f:45:0e:ba:e0:fe:b8:2e:2f:23:f1:a0:
                    83:04:e3:8a:87:32:a4:ce:89:ea:53:0e:2f:04:b3:
                    1a:29:10:f5:64:a5:6b:50:7f:9e:f7:fd:4e:39:d0:
                    5e:38:e6:72:56:50:9d:3d:97:77:3b:8c:2e:f3:62:
                    e9:30:b0:13:a6:7b:04:bb:5a:d2:a5:31:a6:5a:13:
                    45:e9:2f:57:ca:55:5d:7f:6e:9b:56:55:cd:9f:4a:
                    11:3f:da:ee:ec:9f:68:90:88:2c:b4:08:7c:78:e3:
                    f7:56:bb:6b:d6:87:d1:c0:46:a0:93:97:16:1f:ed:
                    57:1c:f7:33:1a:9c:0f:f0:a2:84:56:40:63:52:d4:
                    d0:5a:c9:af:ea:a6:8e:d5:39:d9:57:de:89:c0:40:
                    05:04:d5:c2:0e:32:26:be:d3:d0:5d:c9:a5:83:88:
                    0b:9a:71:d9:e7:95:d0:ed:ad:33:4c:73:8c:86:54:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AE:4B:EE:CA:D8:24:66:94:C8:44:E6:94:D9:DC:CF:2B:AB:A1:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35f23b24-5f0f-3027-8602-f069556979a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:27:2c:eb:83:6a:8b:f6:26:dc:d0:ea:24:fe:bc:99:fd:6f:
         81:78:47:ed:26:de:08:7c:89:6e:c7:9b:f6:22:20:14:63:24:
         05:ba:50:0d:d8:98:ec:0b:0f:b1:5a:6e:2a:b9:34:ac:7c:41:
         d0:90:96:31:7a:c2:86:15:3a:26:78:d4:10:7b:dd:ec:b7:93:
         fd:57:f1:44:82:df:96:31:de:77:2e:bf:21:8d:24:66:cb:b6:
         8b:a2:56:ee:c2:3b:8f:6c:53:0d:6b:e9:87:48:6d:c3:ea:f0:
         30:eb:6f:cb:df:5f:49:e9:15:ee:b2:f3:bc:ca:f2:67:dc:4d:
         72:e2:e0:e4:fa:94:b9:e0:41:33:fe:2a:03:b4:77:ad:a6:a5:
         07:f4:35:5c:a6:d1:fd:4e:ec:9e:74:0d:4a:a9:f7:6e:aa:84:
         6d:3e:67:40:ad:1c:42:8d:06:e1:c1:cb:06:87:6e:9a:53:52:
         7c:af:43:b6:ba:f4:ef:5f:7d:16:6b:c8:c2:57:40:02:df:cd:
         e2:8c:46:2f:43:4a:45:4e:54:31:ea:7e:91:4c:e2:e8:00:73:
         59:83:ce:d5:82:cd:f7:60:c3:d2:8d:66:50:07:69:25:36:b9:
         e6:21:78:fc:34:fd:ef:f3:09:0e:e9:56:4d:d5:a4:e7:93:0f:
         5a:41:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:48:11 2026 by rpki-client