Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3701ebbb-6922-3432-855f-5032ee1d657f.roa
File:                     3701ebbb-6922-3432-855f-5032ee1d657f.roa (raw, json)
Hash identifier:          +FV0OCM5GUvHgkZ4gqZ0UY8rtkC+d42P6/k1LDKIcbA=
Subject key identifier:   5B:F9:C7:D8:96:BD:A3:4C:80:06:F3:60:D0:F4:47:02:2E:40:11:A1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA7A0312CC256534F871CBE80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3701ebbb-6922-3432-855f-5032ee1d657f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:31:2c:c2:56:53:4f:87:1c:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=594da57b-5d05-4443-8505-59ee893576f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:2a:e6:b8:2e:29:ff:94:6f:f2:68:8e:34:
                    1d:9a:11:da:85:7b:f9:85:e7:28:f7:6e:c6:7a:79:
                    5f:a3:fc:7e:66:63:99:3d:00:c3:87:29:49:66:71:
                    09:82:1c:1d:a6:77:a4:d0:e1:94:64:43:e8:24:53:
                    25:b8:48:a6:6c:c3:62:2a:cc:62:6e:1b:1c:c4:ac:
                    c4:90:2f:08:a6:b6:2e:0a:97:33:27:80:9a:9a:96:
                    86:c4:f8:00:af:e9:ae:6d:c3:40:f2:53:0e:95:bb:
                    97:f9:66:1c:98:e8:11:41:ac:d6:e6:00:ae:ee:a0:
                    61:cb:d6:af:3e:4b:8a:ae:77:db:2b:db:ac:9c:01:
                    a8:89:43:f3:e4:7b:59:6a:7f:5a:64:e1:ca:89:53:
                    ad:68:02:24:a0:b0:d4:21:56:4d:a9:16:54:d2:81:
                    e8:3f:80:21:01:11:be:00:82:03:d7:a5:a3:3f:04:
                    29:97:9b:a3:f3:77:0d:ba:c8:e8:eb:e2:73:99:a6:
                    a6:54:2b:c5:f0:cc:2e:cb:7b:10:25:01:dd:dc:f5:
                    bc:f2:77:85:c9:63:5e:9e:a7:e6:72:58:bf:35:36:
                    e4:bc:f4:c5:9f:2c:94:e3:9f:9e:c4:db:ad:39:44:
                    07:8e:7e:ec:a0:d2:af:e9:10:3a:f2:3c:37:f5:37:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F9:C7:D8:96:BD:A3:4C:80:06:F3:60:D0:F4:47:02:2E:40:11:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3701ebbb-6922-3432-855f-5032ee1d657f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:68:26:b4:77:67:12:ff:ce:32:d0:05:02:e6:ee:ff:d0:66:
         22:cf:bc:82:e2:ea:99:92:ec:6c:5a:23:86:7f:1b:29:67:51:
         fc:03:51:7c:ba:35:6f:b0:64:e5:3b:27:ca:ce:fb:e3:67:8d:
         89:26:93:6f:ae:4a:cb:13:f0:79:46:a2:0c:a3:f4:e7:eb:c3:
         40:fc:ec:6c:90:18:aa:b9:90:0a:dd:cb:c5:78:20:21:7a:7e:
         25:ea:99:c0:2e:66:f3:95:d0:8f:1f:79:d3:8a:eb:7a:3b:e5:
         04:36:a6:fc:03:03:d3:27:81:e3:ad:b8:0c:8a:3e:ae:e6:79:
         28:f4:ba:af:b5:bc:68:84:b8:c2:ae:cd:08:9b:ff:53:d9:da:
         61:b5:2e:eb:b7:d4:21:e8:a1:aa:29:92:33:55:bd:3b:e3:66:
         a5:34:ca:67:34:f3:73:4a:37:c4:ce:d5:06:37:47:3c:c1:11:
         0e:ab:93:2e:63:10:73:83:ea:f0:63:43:a4:16:64:c9:70:0e:
         a1:71:00:37:b4:87:cf:b0:db:eb:ec:7e:ee:db:5c:37:ad:8f:
         5c:a0:d5:64:81:a5:65:b5:27:0c:60:eb:72:4a:64:85:40:02:
         44:8b:2c:8f:1b:7e:f5:30:7e:57:de:d9:b6:5f:fc:c1:f5:38:
         af:d4:3b:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noDEswlZTT4ccvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTk0ZGE1N2ItNWQwNS00NDQzLTg1MDUtNTllZTg5MzU3NmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQAq5rguKf+Ub/JojjQdmhHahXv5heco927G
enlfo/x+ZmOZPQDDhylJZnEJghwdpnek0OGUZEPoJFMluEimbMNiKsxibhscxKzE
kC8IprYuCpczJ4CampaGxPgAr+mubcNA8lMOlbuX+WYcmOgRQazW5gCu7qBhy9av
PkuKrnfbK9usnAGoiUPz5HtZan9aZOHKiVOtaAIkoLDUIVZNqRZU0oHoP4AhARG+
AIID16WjPwQpl5uj83cNusjo6+JzmaamVCvF8Mwuy3sQJQHd3PW88neFyWNenqfm
cli/NTbkvPTFnyyU45+exNutOUQHjn7soNKv6RA68jw39Td55wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFv5x9iWvaNMgAbzYND0RwIuQBGhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzcwMWViYmItNjkyMi0z
NDMyLTg1NWYtNTAzMmVlMWQ2NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNoJrR3ZxL/zjLQBQLm7v/QZiLPvILi6pmS7GxaI4Z/GylnUfwDUXy6
NW+wZOU7J8rO++NnjYkmk2+uSssT8HlGogyj9Ofrw0D87GyQGKq5kArdy8V4ICF6
fiXqmcAuZvOV0I8fedOK63o75QQ2pvwDA9MngeOtuAyKPq7meSj0uq+1vGiEuMKu
zQib/1PZ2mG1Luu31CHooaopkjNVvTvjZqU0ymc083NKN8TO1QY3RzzBEQ6rky5j
EHOD6vBjQ6QWZMlwDqFxADe0h8+w2+vsfu7bXDetj1yg1WSBpWW1Jwxg63JKZIVA
AkSLLI8bfvUwflfe2bZf/MH1OK/UO+M=
-----END CERTIFICATE-----
Generated at Sat Aug 22 19:30:34 2026 by rpki-client