Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71c9f720-23f4-3d8b-9453-c41916e8ac49.roa
File:                     71c9f720-23f4-3d8b-9453-c41916e8ac49.roa (raw, json)
Hash identifier:          5pNx91PBwFihn4Aj0LgsQ+XfX544tpnsmFs27krpps4=
Subject key identifier:   0E:46:F1:F5:DC:44:EB:59:F2:85:C5:D5:CD:C4:CE:78:D7:20:50:CE
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79E9FEF68464C799D923DE0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71c9f720-23f4-3d8b-9453-c41916e8ac49.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:9f:ef:68:46:4c:79:9d:92:3d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f37b4117-e0af-44e5-bacd-8795e1eaa4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:19:f1:de:b8:ec:30:2b:a6:eb:d9:a9:03:fa:
                    ac:90:f7:88:f8:80:f8:10:c0:a1:4b:d3:1e:6c:81:
                    d2:8a:d0:27:b6:72:fb:9b:5a:4c:6b:a0:4c:1a:9a:
                    3d:cd:36:3e:3d:8b:e9:78:67:a6:c7:32:32:1f:a6:
                    db:17:b5:53:db:fa:f3:19:7f:f6:8a:cc:65:53:d0:
                    fa:8a:8d:64:f7:7e:d0:ca:f1:56:7a:dd:40:74:11:
                    58:c1:f5:28:a2:28:bf:7e:2c:fb:a2:c8:1c:35:88:
                    e0:69:45:e1:30:3f:04:d5:25:cb:1e:6c:e2:cd:05:
                    68:4c:b0:c7:5c:81:52:1b:a6:76:bd:d0:fa:37:3a:
                    58:a0:43:a1:1e:bb:57:d0:17:9a:08:cb:44:d3:85:
                    de:fc:f9:de:8a:73:33:cd:5d:08:f8:e7:b0:8f:30:
                    ef:a5:44:1b:8d:b4:86:1e:91:bb:37:d4:ed:5a:a3:
                    8a:fc:67:e2:62:0a:08:a7:77:78:b8:3b:06:dc:4e:
                    01:2d:8f:2f:77:2e:21:60:fa:71:e5:ed:b9:a6:94:
                    79:e8:49:da:c6:76:ff:40:82:23:c3:10:c4:c8:63:
                    2c:79:3a:ad:19:39:29:d8:89:30:82:8f:66:24:18:
                    ed:5b:57:0a:19:a7:dc:d8:17:ee:da:ca:d7:fa:f1:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:46:F1:F5:DC:44:EB:59:F2:85:C5:D5:CD:C4:CE:78:D7:20:50:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71c9f720-23f4-3d8b-9453-c41916e8ac49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e3:1a:ec:fb:ee:b8:af:d6:77:b1:d5:48:09:66:e6:5c:20:
         1c:76:c6:58:71:43:c9:7b:18:81:b7:14:d5:35:27:05:0b:a3:
         50:24:d8:07:8e:60:dd:cc:bd:c4:6d:a6:d8:c0:f5:40:f8:79:
         28:2b:93:67:1d:d9:f5:96:3f:48:cf:0a:ef:bf:45:ba:92:0b:
         1d:d0:cf:d8:fd:f3:aa:a0:70:64:3a:a6:f3:b0:0c:76:ee:4a:
         d6:e8:aa:37:18:b0:3e:3e:48:c0:98:59:a9:2c:2d:9a:95:26:
         6f:33:aa:cb:8f:4b:5e:d4:a7:66:9e:8c:a4:f7:bd:b2:99:23:
         2e:9a:1d:4f:d9:d4:72:4f:df:b1:3f:ef:13:6b:7d:a9:68:ca:
         5e:18:f8:39:24:fc:87:71:a8:c1:20:29:e8:f6:61:44:25:8c:
         49:f2:85:85:a4:4b:38:09:ff:47:6e:ce:70:04:08:17:61:1b:
         a5:21:82:ba:07:1a:b6:04:d6:9c:03:fc:1a:da:82:09:a2:bd:
         e0:18:4f:cd:10:a5:99:c4:b7:29:30:5c:42:ff:1c:b9:92:5d:
         89:27:d8:71:b6:17:2b:78:a3:10:35:82:dd:2c:5f:6a:db:c7:
         20:23:06:a4:87:39:2d:e9:99:51:ff:b7:6a:72:63:fb:8a:ab:
         60:d9:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:31:23 2026 by rpki-client