Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
File:                     75bde4a1-e87d-321d-917f-10d16a03a5a1.roa (raw, json)
Hash identifier:          75aszHJG0uCX9gA6VMxpYNFNfa/9IvsBv+y1ZwRXzNs=
Subject key identifier:   74:DC:DB:A5:17:EC:5F:7A:D3:BA:89:C5:C0:3C:A1:79:A8:2B:0A:38
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79A6E7BE4D83B0AAB142AE0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:6e:7b:e4:d8:3b:0a:ab:14:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e3c2d243-ba3b-4354-8068-9a6e356badce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cd:36:9e:77:9c:3e:e6:bc:fc:eb:1e:b0:8e:
                    47:56:63:52:4d:04:09:11:bb:6a:77:98:2d:0b:f1:
                    b2:da:63:1b:be:81:f7:2a:96:47:73:67:9d:79:84:
                    f3:a1:85:c8:44:8b:73:b1:13:93:27:22:a4:5d:83:
                    53:02:98:22:06:68:59:7e:b7:42:e0:37:9b:bc:fb:
                    40:10:ee:30:03:56:3f:ad:58:79:b3:cb:d7:b6:ee:
                    c0:48:d0:08:3f:74:cf:dd:7f:64:c0:70:49:bf:66:
                    5b:20:ba:2b:8d:f8:ea:4f:6b:99:7a:fa:ad:1d:24:
                    13:92:90:b1:1e:50:51:b5:00:0d:70:3d:e8:ae:fe:
                    79:a6:c2:b1:82:37:9a:10:82:66:3c:eb:8f:92:c6:
                    25:9d:c8:6a:bb:de:73:da:38:f2:bd:7c:89:3c:14:
                    9e:09:04:20:d4:51:dc:82:c4:ef:6a:d9:f0:5a:67:
                    77:20:cf:d9:1a:37:d1:15:dc:63:3b:0c:73:8f:83:
                    ca:ef:64:4d:9c:ad:20:70:9f:08:58:04:3a:db:77:
                    5c:1b:fe:b7:8d:d5:ea:17:5f:46:99:f4:50:88:d7:
                    6c:ad:95:a9:23:50:40:e5:95:d8:37:35:64:03:6d:
                    d9:62:c2:96:49:91:ae:18:5f:ee:e4:25:fe:4f:2c:
                    0f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DC:DB:A5:17:EC:5F:7A:D3:BA:89:C5:C0:3C:A1:79:A8:2B:0A:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:83:3d:2b:65:89:f3:6e:77:fd:79:97:ce:35:36:7b:71:2e:
         0f:04:60:33:3b:aa:fb:91:22:df:5e:95:ad:d3:de:14:19:e5:
         be:47:98:dd:2c:8d:b8:a8:82:17:61:ec:de:8a:9c:1f:91:73:
         55:a3:93:b5:23:b7:06:dc:0f:49:a9:fe:7b:00:a1:c6:ab:75:
         95:dc:5f:2c:45:08:73:0a:35:7c:b9:c5:6d:d1:c7:aa:04:86:
         25:99:bf:f2:da:2f:e2:64:c6:28:32:d7:57:2d:ad:ea:e0:de:
         fe:b9:c5:b2:14:48:18:ed:cc:15:e1:97:c3:c6:6d:18:d7:13:
         35:d5:a6:7d:c5:05:2f:09:b5:72:16:38:72:16:cf:59:58:f3:
         d4:20:6c:61:a9:50:31:47:b6:f3:72:73:b9:e3:4a:c6:c1:8c:
         5b:00:a9:86:97:1b:d6:fe:0c:99:63:6d:6b:2e:a3:82:96:bf:
         b5:5c:cc:14:0a:80:1d:aa:a7:79:b6:9f:19:c2:c1:65:1c:75:
         54:e2:54:c6:97:02:16:be:66:54:2e:a8:5a:3a:9d:2d:53:96:
         1c:38:f1:e2:be:2a:9e:56:b2:4f:c8:cf:99:a7:5d:cd:dc:4a:
         1f:9f:65:b9:3c:d3:cf:45:9c:a4:a1:ad:dc:08:55:0c:f7:4e:
         1b:75:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:29:30 2026 by rpki-client