Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa
File:                     68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa (raw, json)
Hash identifier:          jVkKHbj4ntssXYYGpT6trYwirT81VZwNY/mlecO4AkA=
Subject key identifier:   4A:EB:9B:52:F2:34:21:48:97:20:15:9A:D8:FC:F7:28:ED:E8:97:6E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79EDB8A81E1B16475AC2780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:db:8a:81:e1:b1:64:75:ac:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=531a52e1-1465-40b8-91ff-4715553ca35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ee:f5:b2:de:90:c9:8f:94:dc:0e:95:30:46:
                    d6:b6:9a:8f:db:18:36:1e:8b:43:8b:40:76:99:c5:
                    65:97:19:aa:e7:28:e5:4a:54:a3:0c:1a:91:11:05:
                    09:cf:49:d0:98:9a:ec:fa:00:b6:50:59:5c:af:42:
                    20:5f:40:bf:ac:f0:06:10:11:ea:9f:0d:74:a5:5f:
                    86:a6:08:f3:f3:f8:3c:b4:08:11:8d:58:c8:f0:bc:
                    2c:b0:eb:4d:98:cc:14:e5:67:97:8c:be:44:70:06:
                    ca:1c:7c:ac:f0:ab:a9:e5:27:0d:ae:9e:11:9a:dd:
                    fe:1a:fb:cd:01:d0:0e:7f:35:cf:02:be:3c:8e:27:
                    9d:93:97:93:12:0f:b4:ed:5b:df:34:a7:d3:ac:92:
                    26:41:fe:4f:1b:79:b3:b4:5a:ea:35:28:f3:43:8f:
                    88:da:bf:95:68:51:6d:1c:62:ce:f5:88:28:be:bb:
                    85:28:ed:77:93:d0:32:3b:77:cd:b4:20:b5:13:a8:
                    f1:0f:0f:f2:bf:f6:ea:88:78:a5:cf:9c:d3:db:50:
                    98:96:f9:8b:77:9f:6b:ab:ef:7f:4b:5d:82:fa:ef:
                    9f:ad:22:70:5d:4a:7d:3f:e4:1f:b8:d4:6b:13:a9:
                    ae:4c:4c:b6:ab:45:df:ee:6a:fc:f5:82:ff:63:81:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EB:9B:52:F2:34:21:48:97:20:15:9A:D8:FC:F7:28:ED:E8:97:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:76:ac:c3:38:b5:5c:71:db:f3:46:5b:e2:f9:84:07:11:02:
         cd:fc:5c:98:c0:88:11:4d:9e:39:8c:d6:2f:8f:e8:5f:8d:d4:
         66:66:15:4f:02:b1:68:d7:db:1b:b4:08:84:e5:d3:4c:41:c1:
         b9:dc:4d:3d:84:18:7e:85:2d:1e:fd:fb:de:a4:fd:fb:8a:d1:
         b1:b4:92:23:ab:f0:d9:12:ad:bc:41:50:ec:92:ec:07:97:35:
         b1:b1:dd:ed:72:55:ab:90:eb:08:d2:c5:bd:f3:17:52:d0:18:
         36:ca:b4:a2:a0:da:83:11:18:f0:90:29:2e:7f:95:e9:11:57:
         ed:93:6b:48:18:8a:38:f7:15:03:82:09:bf:03:dc:78:ed:56:
         2a:5c:e7:9a:cb:8b:30:2e:b4:71:ac:72:2a:fb:ac:8c:c6:77:
         d8:3a:b0:30:2a:15:31:c3:27:83:f9:f3:7b:62:0d:a5:b1:2f:
         15:49:86:6a:fc:79:56:50:c5:ec:d2:0d:25:d3:61:45:e7:04:
         e9:a9:78:72:22:d8:8d:ff:a2:51:cd:55:19:6d:42:be:8b:fe:
         be:16:4a:75:6c:06:ea:5a:ba:ce:df:62:03:e8:a5:91:a8:8c:
         5f:4a:a1:44:ba:51:1b:6a:a9:11:81:35:bd:2d:7b:d1:41:6b:
         09:ba:a4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:22:01 2026 by rpki-client