Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a82c391-f0c4-337c-b97c-0fcf8330bd08.roa
File:                     4a82c391-f0c4-337c-b97c-0fcf8330bd08.roa (raw, json)
Hash identifier:          iLQx39oKvtzyomXQJvaZXaQ+zgpxDtNDPEzZizbN1Io=
Subject key identifier:   78:C0:B0:D6:D0:77:6C:17:93:CE:F3:28:BC:81:17:30:80:18:5B:C7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497D1F5FFF092BC0CDE03F00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a82c391-f0c4-337c-b97c-0fcf8330bd08.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:1f:5f:ff:09:2b:c0:cd:e0:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=39898f9b-e1d3-4963-ad5e-ccdc0cad6c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:e6:7f:e8:57:33:ae:09:80:de:e8:0f:7e:
                    3c:45:72:af:76:1c:5f:c5:60:55:23:bd:4e:83:65:
                    e0:22:0f:b1:18:7c:e5:ba:ef:e8:cb:95:f0:fe:65:
                    78:ba:c1:30:47:f3:00:14:04:07:75:df:54:30:22:
                    a0:68:a9:91:25:e1:d7:1c:16:19:ca:40:f5:9e:2b:
                    ad:9f:cf:a5:9e:11:b6:9a:a2:b5:3a:dd:54:f2:53:
                    f7:47:1f:a2:94:06:8c:6b:76:3e:90:86:bb:bd:98:
                    bf:b9:98:9f:a9:97:67:e0:07:c5:81:c1:47:81:fd:
                    3b:12:34:5a:aa:78:b8:05:2c:1b:26:f7:28:91:d8:
                    f4:b7:20:af:e8:77:66:d6:2b:0b:75:f6:c4:dd:92:
                    64:7c:ed:6f:bc:5b:23:3b:1d:38:20:8e:01:3e:77:
                    80:1f:23:cc:6f:28:dc:7e:fc:43:a3:a4:ab:50:31:
                    d5:f8:3e:53:e4:ee:cd:35:ae:62:cf:88:39:48:80:
                    15:6c:e9:a1:3e:ed:02:1f:8f:6b:4e:e1:d7:d5:7c:
                    91:0a:45:09:1b:5a:5c:0c:a4:eb:98:80:87:f9:1a:
                    71:2f:a4:57:9f:2a:8e:a3:c0:5c:c7:60:f5:a5:8f:
                    16:f2:f4:a2:bc:17:7f:f6:d3:fe:28:5f:22:07:ad:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:B0:D6:D0:77:6C:17:93:CE:F3:28:BC:81:17:30:80:18:5B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a82c391-f0c4-337c-b97c-0fcf8330bd08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:38:c8:2b:e3:f8:72:a5:3b:b5:1b:29:64:27:bf:c5:4b:
         0f:e9:10:82:83:fb:6d:01:26:32:0d:d5:90:23:55:ca:b5:51:
         91:87:67:f4:40:78:57:0c:b5:b7:4e:21:ce:4e:fa:e6:a4:2b:
         0d:ff:5b:c1:3a:a1:5e:cc:bb:6a:08:c9:0c:41:81:8b:70:a4:
         61:7d:c7:55:13:eb:5e:de:60:8a:d2:f6:61:cb:57:f5:9e:60:
         23:ce:47:e5:9d:08:6d:31:c5:58:45:98:68:14:a9:ea:f7:58:
         87:6e:f6:c3:b7:da:1f:05:8c:0a:d3:e3:da:e5:81:53:49:84:
         04:ae:5a:7d:5b:6a:5e:3c:4d:a6:22:bd:60:30:72:0e:62:c3:
         64:76:a3:be:16:fd:d2:88:6d:d2:06:3b:3c:ea:11:9e:4b:57:
         ea:21:64:b9:d3:a2:70:1d:fb:cc:b4:85:a1:96:60:c9:44:95:
         88:3e:02:c7:03:9b:b3:8b:4e:30:20:89:70:24:68:5e:5e:b5:
         1f:8a:14:e3:15:9d:4c:30:3f:68:a9:f0:de:66:56:38:e9:21:
         06:35:41:15:33:1d:fe:59:16:64:39:72:3e:50:58:52:3f:b3:
         1c:39:3c:cf:e9:78:0d:e8:92:09:31:52:38:7e:51:20:e9:9b:
         82:39:a1:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfR9f/wkrwM3gPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Mzk4OThmOWItZTFkMy00OTYzLWFkNWUtY2NkYzBjYWQ2YzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3nmf+hXM64JgN7oD348RXKvdhxfxWBVI71O
g2XgIg+xGHzluu/oy5Xw/mV4usEwR/MAFAQHdd9UMCKgaKmRJeHXHBYZykD1niut
n8+lnhG2mqK1Ot1U8lP3Rx+ilAaMa3Y+kIa7vZi/uZifqZdn4AfFgcFHgf07EjRa
qni4BSwbJvcokdj0tyCv6Hdm1isLdfbE3ZJkfO1vvFsjOx04II4BPneAHyPMbyjc
fvxDo6SrUDHV+D5T5O7NNa5iz4g5SIAVbOmhPu0CH49rTuHX1XyRCkUJG1pcDKTr
mICH+RpxL6RXnyqOo8Bcx2D1pY8W8vSivBd/9tP+KF8iB60xvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjAsNbQd2wXk87zKLyBFzCAGFvHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNGE4MmMzOTEtZjBjNC0z
MzdjLWI5N2MtMGZjZjgzMzBiZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBb4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHT/OMgr4/hypTu1GylkJ7/FSw/pEIKD+20BJjIN1ZAjVcq1UZGHZ/RA
eFcMtbdOIc5O+uakKw3/W8E6oV7Mu2oIyQxBgYtwpGF9x1UT617eYIrS9mHLV/We
YCPOR+WdCG0xxVhFmGgUqer3WIdu9sO32h8FjArT49rlgVNJhASuWn1bal48TaYi
vWAwcg5iw2R2o74W/dKIbdIGOzzqEZ5LV+ohZLnTonAd+8y0haGWYMlElYg+AscD
m7OLTjAgiXAkaF5etR+KFOMVnUwwP2ip8N5mVjjpIQY1QRUzHf5ZFmQ5cj5QWFI/
sxw5PM/peA3okgkxUjh+USDpm4I5oSs=
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:49:46 2026 by rpki-client