Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f66dd74f-ed98-39a0-b948-3599c5d41e20.roa
File:                     f66dd74f-ed98-39a0-b948-3599c5d41e20.roa (raw, json)
Hash identifier:          DbpSmSEKkZrzm+MO/cqJt5is58bvxONlmww2nj3XdUs=
Subject key identifier:   EC:6B:0D:A3:58:13:FD:9C:AC:E9:44:67:FD:74:0E:2A:C3:1B:52:95
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79A77DCE173823AEA970740
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f66dd74f-ed98-39a0-b948-3599c5d41e20.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:77:dc:e1:73:82:3a:ea:97:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=15d2aa17-779d-4c39-b5f4-bb8fdf7af9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:85:ac:6f:70:9f:55:8b:67:71:2a:18:27:
                    74:64:d7:4b:d0:7c:76:cc:4e:ac:2d:e2:2b:2c:78:
                    f7:4c:a1:11:25:90:57:ef:df:57:56:de:ff:8c:b9:
                    d7:28:38:d2:4c:79:c8:c0:ee:34:51:96:74:54:6b:
                    89:1f:13:32:e8:5c:9b:e6:2a:fa:98:8e:a6:32:ac:
                    28:a7:ee:03:34:ab:74:b3:7d:2c:e5:a0:f8:30:a1:
                    ef:0e:ed:5a:77:d5:92:e9:1e:ed:43:c3:72:aa:3c:
                    a9:26:71:f0:3e:c3:5b:cf:40:d4:8d:b0:08:4f:53:
                    96:66:eb:62:8b:bd:91:c9:b8:ea:d4:0c:67:ef:47:
                    59:cf:20:c3:4a:67:28:94:f0:0a:cc:60:9f:4a:bb:
                    c5:f5:35:5a:83:2a:e7:e1:ec:4b:a8:08:e7:ae:de:
                    98:c6:61:b9:f5:d4:65:6c:6f:a5:2d:31:7a:d6:72:
                    ad:4a:95:5c:d9:46:a9:00:03:a3:8b:f8:7f:ea:48:
                    71:e2:87:41:cb:fa:c8:d4:79:06:1a:3b:ea:6f:0b:
                    25:cc:69:cb:01:c3:97:08:6c:bc:c2:88:36:34:7a:
                    ea:ce:64:a6:e0:94:02:ca:56:86:da:7f:08:48:f4:
                    b5:e7:d7:01:39:93:11:e6:52:00:48:61:bc:52:d4:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6B:0D:A3:58:13:FD:9C:AC:E9:44:67:FD:74:0E:2A:C3:1B:52:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f66dd74f-ed98-39a0-b948-3599c5d41e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:8e:f3:08:5a:ff:74:89:fa:19:9d:e7:3f:f6:e3:38:fc:
         0d:05:63:5e:53:17:e3:5a:39:a8:f3:2b:6b:9d:bd:59:36:3a:
         e6:a6:81:01:a0:5d:eb:b8:09:77:90:4b:48:6b:5a:d9:4f:c6:
         0d:84:94:0e:bf:29:11:c3:8a:aa:a4:48:33:f7:af:3b:27:fd:
         6e:d1:e8:4b:c4:e3:43:9f:57:2d:7e:40:68:80:d7:b8:37:ba:
         72:bc:37:db:fb:68:3f:41:54:d5:e7:cb:17:ba:98:31:c3:49:
         b5:37:3c:5a:b3:ec:66:4e:7a:f0:43:af:ff:74:dc:65:c7:d3:
         1f:25:b3:1f:68:92:97:9b:6b:8c:d2:d7:e2:66:c0:f7:10:f4:
         22:e1:c2:6e:92:11:7b:24:4e:e7:57:ff:e4:ee:9f:1e:25:99:
         37:80:d7:b1:27:40:55:c3:50:ee:34:69:4f:50:97:6d:a1:1e:
         3c:ec:70:77:69:2e:5a:5b:dd:2d:b0:94:0f:fc:a9:88:0b:79:
         5f:8a:b6:d5:5c:ff:45:88:4f:18:d4:28:9f:ac:61:97:87:ea:
         c1:5d:d0:5b:6a:16:c8:92:3d:3e:23:24:9e:cd:30:36:4d:85:
         42:50:5d:58:90:27:88:59:ae:a8:cd:fc:03:a9:e6:68:9a:4d:
         d8:82:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:31:02 2026 by rpki-client