Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a63aec9-cb31-38bd-908a-d615a8d7e5c7.roa
File:                     4a63aec9-cb31-38bd-908a-d615a8d7e5c7.roa (raw, json)
Hash identifier:          CHtIvo7rygKsSJitpml0Y+fpi1tz9BwW7C9JQblLgmk=
Subject key identifier:   7F:41:3B:25:05:AF:81:49:50:16:43:A7:28:C4:D8:D2:2D:BE:8F:59
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79AF0FB746B803CC7674580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a63aec9-cb31-38bd-908a-d615a8d7e5c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:f0:fb:74:6b:80:3c:c7:67:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7cbb0cce-ed81-48b9-9c89-120352992ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:4c:44:0a:cb:9e:32:13:b4:76:27:64:de:
                    59:8d:ad:93:e2:0b:80:d9:e3:f7:2c:cf:cf:70:44:
                    4d:68:12:92:9d:36:66:54:8c:6d:c4:a6:49:b4:18:
                    13:9c:9c:f3:16:93:2f:ea:2f:f6:bc:2a:62:02:77:
                    1c:be:6b:c6:b7:80:36:32:65:46:93:d3:fb:d0:72:
                    13:04:c8:32:42:68:eb:e2:6e:a0:58:45:d4:84:56:
                    51:31:19:7e:c7:af:06:15:71:d2:94:97:4b:0d:14:
                    f6:ef:c3:75:a3:3b:1c:27:ff:30:ff:b6:a4:cd:99:
                    d7:1c:a1:3d:39:f3:3b:45:c9:ad:89:b8:6f:c7:6b:
                    7d:58:0c:be:bb:aa:5f:d6:e7:26:11:7a:16:4c:bf:
                    53:40:f6:8c:e4:77:98:f7:b6:40:1b:af:2c:bd:03:
                    af:4a:52:56:6d:50:19:04:86:fa:46:e3:21:ae:14:
                    c5:20:7d:d8:da:98:eb:16:a8:75:af:2b:14:0d:15:
                    20:40:d5:c2:ae:ba:5c:87:0e:df:95:12:ca:97:ab:
                    40:52:48:47:63:48:cc:2d:3f:5a:43:c2:a8:02:cd:
                    b0:33:e3:86:2d:1a:24:4d:b1:2d:cf:11:1c:db:3a:
                    26:9e:da:5c:80:20:e1:05:b6:e1:85:28:04:97:93:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:41:3B:25:05:AF:81:49:50:16:43:A7:28:C4:D8:D2:2D:BE:8F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a63aec9-cb31-38bd-908a-d615a8d7e5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:68:c2:6a:0e:e8:f0:54:1c:b9:57:15:86:2a:f1:03:f0:c2:
         10:69:46:f9:d2:e0:ba:c7:56:a9:b9:76:a7:cf:73:d4:ab:77:
         c1:ba:9a:10:03:ab:c6:78:f3:b4:24:bd:0d:06:98:86:60:d7:
         bf:8a:7e:68:c9:d1:dd:3d:65:7f:42:14:5c:07:c1:9c:f2:b5:
         f6:df:38:10:80:e7:d0:3d:4b:4f:41:8c:8a:e1:e0:fe:ec:23:
         b1:9d:98:8e:2a:ae:ca:56:1e:8c:60:fc:fe:fc:d4:ca:79:ed:
         45:3d:35:38:64:d8:02:31:29:47:16:0c:3d:f2:a0:92:ea:61:
         64:03:8c:e1:b5:7f:f9:c3:ab:87:f9:64:69:0b:52:85:4b:09:
         3e:b4:10:bf:de:77:e1:11:96:a9:ad:08:61:d9:0a:62:96:30:
         ec:56:d6:aa:0c:df:06:7d:4d:06:e1:8c:5e:45:9a:f6:70:b3:
         1c:95:c2:04:4b:c2:69:69:8d:41:3f:2a:d3:f7:ef:f8:c2:1f:
         76:1f:79:53:3a:5c:fb:35:9c:a4:ab:77:05:e1:48:59:30:8f:
         1c:04:57:24:62:2a:5a:ae:c9:ea:25:4f:9b:bc:76:9b:26:c3:
         01:05:fa:77:fe:89:f1:f0:5a:c9:7c:b7:b9:9c:fc:60:f3:b4:
         8b:a9:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:29:47 2026 by rpki-client