Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/86802958-60b7-3f07-8c28-a0fc82712d1c.roa
File:                     86802958-60b7-3f07-8c28-a0fc82712d1c.roa (raw, json)
Hash identifier:          TzJZnKu8OBOUMFejPc3NAryKbY5j8Rs/kepqBOW82UI=
Subject key identifier:   8E:57:69:86:F0:75:DE:58:75:DA:71:7D:1C:47:AC:41:9E:66:11:11
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79ECFBCD5BD499DFFD95080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/86802958-60b7-3f07-8c28-a0fc82712d1c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:cf:bc:d5:bd:49:9d:ff:d9:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=76e84020-3f92-4ae6-b0bf-f02cea233e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c2:d5:01:e1:ae:0d:80:5d:40:fc:0a:74:b4:
                    2b:48:32:b7:de:94:3e:da:f8:5f:27:f3:6c:84:3c:
                    d7:89:40:4b:66:c9:e5:d7:66:36:90:96:8f:ea:54:
                    1a:fc:0c:11:3a:f6:f0:59:bb:09:cd:ac:b3:a2:40:
                    1c:de:5b:dd:06:e0:0f:9f:d3:4e:80:be:d8:32:f1:
                    7b:3e:6e:5a:6c:ae:76:a6:55:41:31:8b:cf:4e:fd:
                    cc:b9:dd:81:d0:25:bf:e7:8f:ed:2f:d2:a0:31:3a:
                    db:bb:f8:c0:be:3d:85:b1:7c:83:2f:f0:92:68:5e:
                    96:1f:63:6a:89:8f:0f:aa:2e:88:7c:1b:9c:29:e0:
                    b4:35:60:bc:1d:fb:5a:e2:19:62:6f:f2:07:45:0d:
                    3f:dc:bc:02:04:79:7d:2c:40:f6:b2:c2:e2:e8:36:
                    bb:bb:dd:70:d5:14:d0:00:86:9f:51:23:8c:14:13:
                    ea:1f:cb:4b:37:73:77:2b:ba:c6:36:b9:a1:6b:85:
                    13:e3:18:41:99:90:16:7d:5b:be:d4:49:b9:7c:c3:
                    0e:05:a4:5d:77:ed:6a:56:da:e2:46:fb:b4:6d:59:
                    97:32:6e:44:b4:c1:58:95:52:9e:b3:f3:d6:4f:8b:
                    cc:91:89:77:50:a5:c1:1b:56:e2:f7:fc:6a:c5:b3:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:57:69:86:F0:75:DE:58:75:DA:71:7D:1C:47:AC:41:9E:66:11:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/86802958-60b7-3f07-8c28-a0fc82712d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ee:7f:ce:b4:22:e0:96:4c:37:63:9c:9b:90:24:96:4f:c3:
         40:b2:72:23:b5:bd:a7:b3:93:1d:d5:28:85:18:9b:6e:80:26:
         e5:b1:b5:ac:7a:14:04:a3:44:50:b4:bf:fd:cd:70:44:a3:bf:
         6d:92:0c:5a:72:a5:f5:54:e3:53:82:4a:1b:81:57:29:60:35:
         1e:80:b1:51:eb:60:33:42:60:ef:21:f9:2e:2d:92:0f:33:02:
         ff:99:a9:19:d4:c3:04:d6:fd:51:4e:c4:7c:9b:fe:08:8d:d7:
         ba:24:c5:64:08:a9:b4:a2:13:29:37:d5:09:7a:dd:17:f6:5f:
         b8:1a:f4:af:e2:eb:df:8b:23:8d:5b:3e:f5:a3:6c:8a:8b:02:
         46:91:8b:8c:a5:e6:bb:d2:0c:c8:c1:3e:14:3f:41:48:eb:be:
         5a:ca:4d:51:0d:e9:1c:9e:14:23:42:78:7d:18:8b:bf:ec:e6:
         ce:50:77:3d:6f:c0:77:89:23:03:cd:36:1b:96:98:ce:c0:4f:
         b5:93:8d:85:a3:31:36:d7:47:41:39:6f:88:3a:dc:32:5e:57:
         e2:f8:64:58:e7:e2:6b:d5:c9:44:19:44:5a:fb:19:bd:2a:ee:
         e4:07:47:d2:56:84:83:42:4e:96:9c:42:7b:51:4e:3f:b4:c4:
         23:f0:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:31:30 2026 by rpki-client