Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5032c97c-1d16-35c2-a426-f84175509595.roa
File:                     5032c97c-1d16-35c2-a426-f84175509595.roa (raw, json)
Hash identifier:          jSOF2MOj6UVKvuO7W61c6kcgWr6l7ggF2gMTLmvt0CI=
Subject key identifier:   64:B6:31:00:AA:D6:51:D3:E5:98:3C:2D:A8:C4:15:87:8B:B1:87:6D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79A88B2953AB9604EE878C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5032c97c-1d16-35c2-a426-f84175509595.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:88:b2:95:3a:b9:60:4e:e8:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=73cd4933-809f-4a95-906a-dbacd386b6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:7c:9d:11:82:4f:7c:4a:02:ff:7c:99:2d:
                    f4:b0:38:93:90:82:53:25:82:ca:f4:bf:34:0b:a8:
                    aa:da:05:f1:bb:ad:38:9a:5e:6d:0f:e3:25:e7:c8:
                    79:c3:4b:f2:c5:48:a1:4a:05:c7:c9:88:df:f4:c1:
                    6a:89:77:28:a4:95:0f:10:71:7b:a2:fc:a0:50:d6:
                    5d:63:45:53:21:75:40:5d:0c:7e:47:aa:63:cb:ea:
                    71:63:68:77:9b:29:03:d5:48:5e:c3:ec:b4:81:16:
                    b9:db:6e:8b:f1:29:69:6d:c6:98:c9:6f:05:9c:12:
                    f9:dc:d4:e9:82:9b:9b:29:c0:39:13:33:ef:34:06:
                    8f:1a:8d:2b:ff:e4:d9:cf:3e:91:3f:78:43:39:af:
                    ec:f6:f6:e4:64:30:59:d6:a6:25:82:23:38:aa:64:
                    01:9c:18:c7:80:ca:50:51:98:43:65:50:a6:e8:fe:
                    62:35:e4:cb:e9:ac:2c:69:b9:06:63:50:d7:95:ab:
                    eb:a5:70:1e:85:91:e8:e6:e1:fb:a5:08:dd:6f:55:
                    c8:cc:d7:7e:42:91:0c:05:02:ac:f1:df:2f:93:5f:
                    97:dc:24:8e:1b:c6:be:4f:86:32:55:c9:1a:02:84:
                    17:1d:79:98:5a:43:cc:b0:8b:e8:0a:70:4e:2c:8e:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B6:31:00:AA:D6:51:D3:E5:98:3C:2D:A8:C4:15:87:8B:B1:87:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5032c97c-1d16-35c2-a426-f84175509595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:77:7c:4e:6b:8b:2f:a0:fb:54:08:68:c7:24:1f:98:7f:34:
         0a:c2:d2:83:bd:66:94:6e:3c:5b:24:63:15:f5:9f:24:58:69:
         bb:ea:e4:1e:86:80:2f:62:e0:dc:9b:57:03:1a:4f:d9:90:29:
         2e:2f:b1:1e:92:c5:73:c7:b6:82:d3:28:02:ea:cc:cf:3a:ec:
         b5:bd:66:ee:cd:ae:0d:e4:27:a5:de:a2:d8:cc:8b:a1:46:29:
         01:e7:37:a9:8b:58:4a:1e:94:2e:3c:86:23:57:d7:cb:57:d8:
         36:6b:92:f4:a0:51:89:bb:45:49:1c:6a:d9:be:bf:9a:f8:fa:
         a3:41:f2:47:0d:b0:d2:40:54:61:03:39:c5:1e:a3:32:5a:20:
         36:0a:4e:e4:72:67:61:41:98:8b:18:de:86:2b:82:9c:8f:75:
         c1:de:2d:85:21:44:bd:86:09:97:9b:98:86:f3:3b:29:0a:03:
         54:62:7c:ff:5a:f1:84:0d:30:80:d3:ec:6c:5c:e9:c0:77:95:
         ef:db:8b:a4:d4:fb:49:9f:ab:f6:57:4c:6d:1f:32:84:ec:be:
         cd:b6:f3:01:b3:0b:fb:c2:99:57:d1:82:cf:ac:12:d0:6b:df:
         3c:c7:79:a0:21:82:31:f8:9a:71:73:e7:c3:74:0e:46:b6:36:
         f1:dc:c6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:31:42 2026 by rpki-client