Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ff4cac2-1c06-3652-a574-da5c2f31b183.roa
File:                     5ff4cac2-1c06-3652-a574-da5c2f31b183.roa (raw, json)
Hash identifier:          L/eUPzt/8PqVG5Um8s7hu4O3din1DxZ9jvkbRUbtI4A=
Subject key identifier:   AC:38:1E:45:5E:4C:12:F4:13:F9:27:91:B1:38:97:E9:53:FE:45:FF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA7A043D6D25EFB7B0FE54300
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ff4cac2-1c06-3652-a574-da5c2f31b183.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:43:d6:d2:5e:fb:7b:0f:e5:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=455046a1-5289-4fc2-978b-a34d25132fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8c:c6:40:48:5d:07:2a:bc:8c:e4:25:45:4e:
                    0e:97:0f:17:ad:c4:47:40:4f:7c:db:41:25:72:e5:
                    d4:ed:a1:e5:55:93:ec:fe:ed:b5:f5:08:bf:ae:b6:
                    6d:39:7c:74:ab:3e:e5:c6:b8:7b:7c:63:61:14:d5:
                    e8:54:8d:5d:b3:69:41:3d:22:c6:d3:08:04:8c:21:
                    6e:05:05:cc:05:43:dc:d8:dc:81:f0:70:45:e2:6a:
                    85:7d:9a:25:9d:d1:8a:43:87:98:e1:ae:91:1b:17:
                    37:e9:e7:88:4f:28:e8:58:76:20:b7:15:b2:79:73:
                    b4:12:05:ea:0e:8b:61:18:e0:5b:05:9c:1f:68:76:
                    ce:5c:20:56:bf:ba:55:35:3c:1b:84:d6:1f:79:99:
                    10:b1:b7:59:f7:d0:b1:64:15:19:5c:9b:b4:cb:e0:
                    43:78:a1:46:3f:8b:b6:e7:24:62:27:13:b5:0d:87:
                    15:8f:53:32:fb:71:16:24:82:17:c6:8f:1d:48:b5:
                    c7:8b:f5:cb:50:60:8f:19:e8:d5:39:d4:4d:bc:ae:
                    72:78:79:3b:8b:52:a7:c3:af:44:62:e5:86:06:81:
                    e6:ca:df:25:68:77:57:11:69:ec:24:cf:39:31:66:
                    d3:a7:d6:8d:8e:fd:93:d6:ef:fc:ee:fb:6f:19:a9:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:38:1E:45:5E:4C:12:F4:13:F9:27:91:B1:38:97:E9:53:FE:45:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ff4cac2-1c06-3652-a574-da5c2f31b183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:67:0d:bb:aa:2c:00:cc:04:59:4b:b4:0b:42:92:12:95:df:
         2f:40:a4:34:1a:1c:6b:d4:45:0f:ab:5d:99:93:07:6e:52:40:
         f7:b4:50:06:62:29:1b:99:83:de:0e:b6:1f:c9:2f:39:38:7e:
         ca:fc:c1:9e:af:84:ab:ca:6b:56:62:73:b5:9f:a6:b0:aa:cf:
         50:5c:1a:8c:93:78:0f:a3:3d:91:6c:ca:14:80:64:6b:ed:e1:
         0f:f5:3e:28:5b:5a:cd:9d:e3:64:6c:64:d2:dc:89:9f:8e:3a:
         47:c3:cb:56:a5:63:48:60:a7:e1:e1:82:94:11:70:3e:6e:99:
         4a:33:9d:fa:01:ae:71:a8:56:52:99:3a:ee:ec:9c:62:a3:b0:
         47:f5:ba:2e:fc:1d:71:fe:f8:76:57:8a:0e:01:39:db:38:d0:
         ae:29:d8:fb:04:64:97:43:11:5f:dc:56:a4:1e:8f:0c:c7:ce:
         45:fd:a2:44:3f:98:d2:c9:81:a4:8a:dc:04:cd:52:16:98:e7:
         a4:77:03:47:f2:af:7d:9a:28:64:fb:44:5a:f3:13:f6:8d:a0:
         84:b1:79:20:a8:74:65:73:c7:c6:85:9c:11:5f:7d:ce:c9:dd:
         10:d1:f4:63:9d:2b:e0:0c:12:3a:d4:9b:a7:6b:b0:84:63:6a:
         7d:1a:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:30:14 2026 by rpki-client