Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a111877b-7847-36fa-bcbf-c9a91dd189cc.roa
File:                     a111877b-7847-36fa-bcbf-c9a91dd189cc.roa (raw, json)
Hash identifier:          u4P24XkjJPGjz3anlDBW3jrbJHOna1HEipNH9T+MyX8=
Subject key identifier:   DF:D0:39:02:71:FC:17:C8:05:D2:3F:D7:76:73:91:41:28:7A:7E:0C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA7A06B80EB773B928C514900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a111877b-7847-36fa-bcbf-c9a91dd189cc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:6b:80:eb:77:3b:92:8c:51:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=36be0258-a6ac-4bda-aa87-ab0ac3c1b0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:7b:dc:38:9a:a0:d4:d4:cd:83:25:5a:3a:
                    a8:90:60:af:f5:f4:47:5a:08:d6:0a:69:42:94:79:
                    6b:1b:6c:d8:55:e7:17:6e:df:b7:01:e9:a5:88:79:
                    c6:46:6d:5c:96:7d:50:10:2d:ff:cf:bb:3a:47:23:
                    cb:be:00:31:28:3f:86:45:3b:10:10:f3:f6:85:2a:
                    d8:33:39:17:6c:6c:42:4b:f9:57:b2:5a:0d:90:f1:
                    2a:a1:bb:32:29:f7:6f:94:dd:34:06:a2:ed:a0:ec:
                    9f:44:29:d1:7c:81:af:20:a5:46:d3:81:9c:af:63:
                    4d:a1:4f:34:54:64:d5:b5:ff:39:f3:0b:0d:35:d9:
                    e0:69:93:0e:db:05:67:c5:6c:0f:20:90:f9:b7:46:
                    4d:00:b4:2c:d5:3a:47:e7:2d:ae:a3:c3:f3:e5:f8:
                    2b:6b:66:dc:10:87:d7:8b:a8:5d:e3:b3:dc:d9:34:
                    33:db:ac:08:c8:09:19:4a:a2:53:33:eb:81:63:74:
                    10:d8:eb:84:73:8a:25:8a:fe:7c:5b:4c:68:05:a6:
                    6e:77:4d:34:47:a9:51:34:eb:96:b3:4d:6d:b3:c7:
                    72:05:ac:cc:ab:0b:58:55:89:0e:e4:77:fa:db:e6:
                    1b:3d:9c:bf:f2:ae:72:de:54:da:45:df:54:4a:47:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:39:02:71:FC:17:C8:05:D2:3F:D7:76:73:91:41:28:7A:7E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a111877b-7847-36fa-bcbf-c9a91dd189cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7a:4c:8f:95:a3:ed:72:07:42:00:93:d2:db:37:83:c6:df:
         b0:b9:88:91:31:f6:50:64:5b:9c:d8:ec:d7:75:bb:07:34:5e:
         2e:12:1d:05:95:6c:ca:f2:27:79:1e:a9:e0:1d:20:bf:b5:ec:
         8f:21:17:4e:a7:e8:40:ef:65:c9:c0:19:ac:05:76:b1:84:c9:
         a8:ce:b7:99:62:90:a6:92:2b:ed:2a:67:66:c6:59:bd:66:a4:
         5b:0c:6d:d1:9b:6e:0d:6e:b4:f3:b8:57:30:e0:1a:9f:59:b2:
         12:dc:f3:d9:37:c2:84:fe:79:12:7e:a2:ae:31:d4:7f:2f:12:
         97:56:eb:76:fe:85:f4:2b:be:78:49:b3:f3:37:16:1e:11:4b:
         99:e7:9c:76:32:15:3c:61:6c:f1:ae:64:33:c1:19:ac:96:5e:
         39:83:4b:8f:7c:67:27:c6:af:fb:b6:c5:52:14:6c:b0:b6:ee:
         55:63:17:d7:64:40:ac:15:9d:2e:b5:87:57:12:c5:0d:65:9b:
         f8:76:e9:f6:23:61:ce:6c:a7:61:2e:2b:19:21:05:46:8b:e1:
         6e:e3:a3:2a:0c:5f:f7:3c:eb:92:65:46:68:51:72:bd:0f:34:
         45:7b:22:b2:33:20:c2:ff:4f:46:96:23:07:96:32:85:b2:1b:
         35:57:ca:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noGuA63c7koxRSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzZiZTAyNTgtYTZhYy00YmRhLWFhODctYWIwYWMzYzFiMGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq573DiaoNTUzYMlWjqokGCv9fRHWgjWCmlC
lHlrG2zYVecXbt+3AemliHnGRm1cln1QEC3/z7s6RyPLvgAxKD+GRTsQEPP2hSrY
MzkXbGxCS/lXsloNkPEqobsyKfdvlN00BqLtoOyfRCnRfIGvIKVG04Gcr2NNoU80
VGTVtf858wsNNdngaZMO2wVnxWwPIJD5t0ZNALQs1TpH5y2uo8Pz5fgra2bcEIfX
i6hd47Pc2TQz26wIyAkZSqJTM+uBY3QQ2OuEc4oliv58W0xoBaZud000R6lRNOuW
s01ts8dyBazMqwtYVYkO5Hf62+YbPZy/8q5y3lTaRd9USkejLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/QOQJx/BfIBdI/13ZzkUEoen4MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYTExMTg3N2ItNzg0Ny0z
NmZhLWJjYmYtYzlhOTFkZDE4OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJB6TI+Vo+1yB0IAk9LbN4PG37C5iJEx9lBkW5zY7Nd1uwc0Xi4SHQWV
bMryJ3keqeAdIL+17I8hF06n6EDvZcnAGawFdrGEyajOt5likKaSK+0qZ2bGWb1m
pFsMbdGbbg1utPO4VzDgGp9ZshLc89k3woT+eRJ+oq4x1H8vEpdW63b+hfQrvnhJ
s/M3Fh4RS5nnnHYyFTxhbPGuZDPBGayWXjmDS498ZyfGr/u2xVIUbLC27lVjF9dk
QKwVnS61h1cSxQ1lm/h26fYjYc5sp2EuKxkhBUaL4W7joyoMX/c865JlRmhRcr0P
NEV7IrIzIML/T0aWIweWMoWyGzVXym4=
-----END CERTIFICATE-----
Generated at Sat Aug 22 19:30:22 2026 by rpki-client