Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/511c4fee-d347-3752-b22c-947c770dc9ea.roa
File:                     511c4fee-d347-3752-b22c-947c770dc9ea.roa (raw, json)
Hash identifier:          4ERstwyOqw9kgC5Qm1IPF1CqAcaiOPU9VnX3AiSjww0=
Subject key identifier:   17:C2:E6:ED:BF:01:99:64:93:B6:EA:A0:3F:47:EC:E4:A5:89:20:7A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79AEA08CF59FADB49F3D200
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/511c4fee-d347-3752-b22c-947c770dc9ea.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:ea:08:cf:59:fa:db:49:f3:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3c31ec55-034e-4b18-a6e8-7eb59996ef1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0a:da:6f:00:8e:01:ff:65:0a:5b:74:3c:61:
                    82:e7:f7:a7:b3:38:7b:6b:97:ad:09:e1:c8:f1:b5:
                    5f:6c:e6:c7:87:9f:26:74:5f:b7:75:71:e2:b2:a6:
                    9f:72:ff:73:af:92:e9:51:09:54:fc:8d:32:54:c4:
                    51:9b:b6:54:71:19:8b:10:00:ad:72:07:05:7f:3d:
                    e8:cc:0c:5c:39:e7:65:18:62:2d:fb:53:a8:bd:e6:
                    66:2c:64:2e:5d:7d:71:0a:51:da:c6:8b:39:6e:84:
                    bb:74:ef:8c:e3:d1:c8:5e:66:60:78:e8:ce:d6:33:
                    5f:1c:85:e3:50:b0:9b:fb:3e:74:47:e2:57:f4:39:
                    57:2b:13:a9:ef:35:2a:a9:db:24:66:24:39:c5:93:
                    91:44:7a:c1:36:0b:77:43:68:2e:ab:bb:28:14:b4:
                    08:0f:18:15:37:1f:76:bc:c0:89:a8:5c:88:4f:d6:
                    07:9f:74:ca:10:2a:01:3b:ed:6c:74:3e:96:09:4f:
                    2b:a6:16:dd:c0:a0:1e:75:a4:8a:5c:8b:8d:a0:3d:
                    f3:bd:d2:2e:12:45:34:54:7a:4a:a4:ee:f3:de:86:
                    bd:98:cf:bf:c7:2a:d3:ce:c7:14:2a:39:dd:df:cf:
                    8d:df:a1:78:b3:42:0a:51:e1:e2:c9:5b:12:43:39:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C2:E6:ED:BF:01:99:64:93:B6:EA:A0:3F:47:EC:E4:A5:89:20:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/511c4fee-d347-3752-b22c-947c770dc9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:42:6f:68:d3:53:d8:a3:49:44:12:20:62:9e:b0:36:bf:
         f3:4d:b1:78:41:44:d7:c1:62:56:6c:f5:f8:63:9f:44:e4:3e:
         77:10:d0:96:3e:87:d8:25:80:17:6a:bb:92:e8:3c:90:8b:a8:
         3b:64:82:60:e4:0c:33:34:7f:1b:94:10:d3:c9:d7:d9:c6:66:
         ca:95:ea:a6:e7:f5:2b:b1:08:9a:e2:de:7f:93:9f:11:89:36:
         3d:c6:e2:84:2d:42:bc:3c:51:33:81:fc:57:4a:c9:17:48:51:
         ce:bf:dd:f3:68:27:f3:dd:0f:0b:78:9c:fa:09:16:e7:7f:26:
         85:e4:bb:d1:2d:1d:0a:36:78:59:4c:ee:2c:35:a0:ec:e9:ac:
         25:9b:46:9e:98:fc:3f:af:66:59:85:64:69:83:12:a6:5d:2e:
         57:25:53:ac:e3:6a:06:77:68:6a:47:6c:82:ed:1e:a0:81:fd:
         5c:1a:e8:cc:a3:2f:6d:24:ea:ad:14:d2:01:2a:36:50:34:22:
         f9:ae:d4:bd:72:6b:92:ac:7c:71:03:cf:93:92:c7:37:fe:e2:
         6a:c3:81:92:34:80:83:54:33:1c:36:0a:be:ff:cd:fb:80:72:
         62:1a:31:2d:7b:f4:6a:6b:43:37:45:aa:3a:2d:c4:c3:56:93:
         5e:51:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:30:04 2026 by rpki-client