Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/879399f8-1838-3e7f-8191-8dc221dd89be.roa
File:                     879399f8-1838-3e7f-8191-8dc221dd89be.roa (raw, json)
Hash identifier:          0X6xqY5IQrlFASbQsbg2LKIc15GvPUH4lvZqkfQPDrs=
Subject key identifier:   46:B1:1C:AD:D0:11:44:C3:30:DC:D4:66:A6:DE:A7:3D:97:B6:15:C5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79EBC8F919477C156537800
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/879399f8-1838-3e7f-8191-8dc221dd89be.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:bc:8f:91:94:77:c1:56:53:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=375db701-b18c-44be-8905-3d831946c1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:03:ba:93:39:5c:2d:35:89:66:93:19:c9:
                    65:d4:6c:26:0e:8d:9f:8d:5b:12:d9:0d:8b:33:79:
                    f9:38:19:f6:60:00:f2:8d:f4:8f:0b:1e:c4:ad:ad:
                    1b:b0:13:6b:f4:d0:5c:85:30:fc:c5:9b:11:e8:e8:
                    f6:45:af:88:e1:5e:c5:68:c0:bf:97:60:45:43:49:
                    76:3f:37:66:02:65:72:e8:9a:74:94:b4:0d:4c:88:
                    f9:da:9f:4a:ad:bb:73:db:2f:db:ff:54:d7:db:85:
                    26:8e:41:46:bf:c8:df:4b:fe:c0:bd:dd:dd:3b:b5:
                    e0:91:a4:05:46:e3:d8:52:cc:c6:a7:0c:0b:a0:94:
                    2c:9d:df:95:fb:5d:87:25:4a:79:c1:ed:01:83:67:
                    09:bb:47:f7:95:08:51:5a:4a:47:ee:bd:c2:26:65:
                    05:77:12:a6:25:23:a5:2d:af:69:04:63:ab:2e:d9:
                    b3:ba:58:cf:c1:28:6a:cf:a0:9c:72:48:77:37:c5:
                    68:b2:c1:a9:fb:96:fc:ab:49:36:de:10:29:88:be:
                    77:08:f2:c4:03:46:3e:50:62:2a:47:91:10:97:9a:
                    28:04:52:e3:17:ad:07:75:28:9a:28:1d:4e:98:f5:
                    05:4b:5c:43:59:b7:87:95:7a:47:f3:fe:23:7c:ee:
                    da:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B1:1C:AD:D0:11:44:C3:30:DC:D4:66:A6:DE:A7:3D:97:B6:15:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/879399f8-1838-3e7f-8191-8dc221dd89be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:70:ad:42:13:98:01:40:5d:9e:12:de:22:fc:13:a5:d4:e8:
         ed:57:09:de:37:ea:bc:b7:c2:cd:a0:ef:3c:99:67:59:d9:6b:
         51:58:63:a2:fb:a1:13:02:eb:fe:37:7d:9c:92:d1:b5:88:9e:
         da:aa:5b:76:79:13:b7:82:e4:16:95:13:93:30:fa:ac:99:35:
         c1:51:e5:a7:98:32:9f:ed:36:27:db:9b:be:f1:19:03:57:9e:
         17:fc:7a:33:20:9d:2c:51:d2:55:5e:59:87:53:57:24:a0:19:
         62:2e:25:d0:72:d0:21:3c:ee:a7:fa:6c:82:3d:f7:55:be:f8:
         7e:c0:72:83:b8:09:18:ee:55:08:a0:6c:45:f8:45:43:cc:80:
         4c:37:03:ee:89:ba:5d:2b:51:f2:2a:e5:fe:98:20:c3:09:2e:
         6a:e7:13:63:ab:d5:aa:ac:3c:f0:b6:d8:58:ea:4b:35:2a:58:
         e4:a6:04:ce:ea:85:ee:e1:b2:b7:df:46:df:43:f1:36:bd:de:
         06:67:8d:a0:41:71:cd:a3:b9:f4:80:db:38:42:c5:fd:05:c2:
         b2:fa:84:6e:37:fa:05:53:78:75:04:2f:23:40:a3:cd:a9:4b:
         88:21:d1:ce:6e:f0:56:68:34:6d:b8:b1:12:2a:0c:66:44:99:
         ac:9d:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:31:03 2026 by rpki-client