Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f40d0af2-a10e-399c-8b7b-63515888b194.roa
File:                     f40d0af2-a10e-399c-8b7b-63515888b194.roa (raw, json)
Hash identifier:          Yni7Dq/j8KiMpDL/w6RaGKu0DdX7aoZHHrnBa92EfVM=
Subject key identifier:   D9:E4:AC:8C:D9:76:2B:CB:1E:18:D2:E3:FA:B0:CD:D1:73:AE:E7:86
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584EA79A76088587EC9E39265E80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f40d0af2-a10e-399c-8b7b-63515888b194.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:76:08:85:87:ec:9e:39:26:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=81b6d0aa-a474-497c-837d-f0e783ada753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:7f:5f:2d:e3:89:fa:6e:26:8d:b6:82:61:
                    33:3b:2a:42:e5:fa:1e:bb:5d:99:cb:6a:3b:b6:17:
                    58:22:c1:5b:c3:eb:70:7d:b8:69:a0:62:7f:d4:b2:
                    ad:d0:0e:d4:78:0c:50:6c:62:d6:d0:ca:65:f5:9d:
                    8f:99:c1:c8:9a:77:eb:15:4d:18:d5:bd:27:9a:60:
                    6c:77:99:96:24:c7:4e:5b:0d:47:e2:b3:05:8c:6f:
                    d2:eb:85:e4:6e:74:95:34:4c:a3:a4:e7:8a:dd:0d:
                    66:c0:04:9a:42:59:4a:22:73:28:f7:1d:21:38:89:
                    fc:0b:c0:4e:89:6f:ef:40:14:19:ce:ee:55:32:4a:
                    2e:5b:79:93:02:b1:80:4f:2c:10:9c:1e:f4:a5:bb:
                    5c:46:77:83:0f:97:12:88:7c:0e:83:88:c7:29:51:
                    f6:62:71:70:90:c0:2a:c4:36:6e:f0:7f:47:f1:d1:
                    39:8a:48:09:ea:c2:a4:8d:36:4a:d0:8e:a0:54:d6:
                    9f:3f:47:9a:ea:c6:b3:75:79:0c:e9:6a:90:10:24:
                    31:37:bf:da:ba:90:ee:29:e7:ce:f4:b4:da:76:79:
                    e8:c7:1e:b0:56:d2:8e:61:5a:79:fc:96:68:30:78:
                    86:d9:c1:6d:4b:c6:a6:6f:2d:91:14:4a:49:c4:75:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E4:AC:8C:D9:76:2B:CB:1E:18:D2:E3:FA:B0:CD:D1:73:AE:E7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f40d0af2-a10e-399c-8b7b-63515888b194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:66:7b:d0:91:30:99:de:71:fc:53:89:64:88:82:a2:a9:50:
         ac:db:86:2f:0c:3b:1d:bf:0f:32:8a:91:2f:b8:5f:9e:f6:df:
         d8:11:e4:6a:27:66:c8:6d:2b:88:b1:9b:31:29:a4:de:41:47:
         0f:1c:a7:7d:36:2f:f4:80:9b:c8:95:ce:bf:3a:e9:64:ae:76:
         cf:d8:72:b8:84:58:11:c9:2d:95:2c:2d:2c:5c:91:09:12:94:
         d7:92:bd:20:68:df:d3:74:d1:67:be:e3:17:71:98:52:2c:c6:
         f4:67:03:45:14:fb:22:bc:a8:bc:19:c9:d1:c9:5a:ad:5b:a2:
         4b:f1:aa:0f:4d:bc:ad:22:3a:ad:6b:a7:76:31:b0:15:0c:b2:
         c6:ac:96:37:69:9c:25:18:e9:85:ff:a6:00:c6:5a:db:4a:25:
         7f:39:35:0e:8c:88:7f:c6:94:34:c0:05:80:d1:57:f1:a3:9e:
         14:3c:14:96:a7:d5:43:f1:87:9d:4c:50:4f:9e:d4:b3:98:13:
         c0:ba:df:79:e6:1b:7c:86:d1:51:09:f5:7c:a9:57:f0:e9:9a:
         96:30:d6:b3:25:c6:94:95:12:e5:15:b2:8f:08:40:11:47:95:
         e8:21:63:df:fd:1c:b9:40:02:93:7f:50:7c:15:e5:93:6c:67:
         f2:7e:2f:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmnYIhYfsnjkmXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj
NTg1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODFiNmQwYWEtYTQ3NC00OTdjLTgzN2QtZjBlNzgzYWRhNzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Z/Xy3jifpuJo22gmEzOypC5foeu12Zy2o7
thdYIsFbw+twfbhpoGJ/1LKt0A7UeAxQbGLW0Mpl9Z2PmcHImnfrFU0Y1b0nmmBs
d5mWJMdOWw1H4rMFjG/S64XkbnSVNEyjpOeK3Q1mwASaQllKInMo9x0hOIn8C8BO
iW/vQBQZzu5VMkouW3mTArGATywQnB70pbtcRneDD5cSiHwOg4jHKVH2YnFwkMAq
xDZu8H9H8dE5ikgJ6sKkjTZK0I6gVNafP0ea6sazdXkM6WqQECQxN7/aupDuKefO
9LTadnnoxx6wVtKOYVp5/JZoMHiG2cFtS8amby2RFEpJxHWZwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnkrIzZdivLHhjS4/qwzdFzrueGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky
N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvZjQwZDBhZjItYTEwZS0z
OTljLThiN2ItNjM1MTU4ODhiMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx
YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi
YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy
OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdme9CRMJnecfxTiWSIgqKpUKzbhi8MOx2/DzKKkS+4X57239gR5Gon
ZshtK4ixmzEppN5BRw8cp302L/SAm8iVzr866WSuds/YcriEWBHJLZUsLSxckQkS
lNeSvSBo39N00We+4xdxmFIsxvRnA0UU+yK8qLwZydHJWq1bokvxqg9NvK0iOq1r
p3YxsBUMssasljdpnCUY6YX/pgDGWttKJX85NQ6MiH/GlDTABYDRV/GjnhQ8FJan
1UPxh51MUE+e1LOYE8C633nmG3yG0VEJ9XypV/DpmpYw1rMlxpSVEuUVso8IQBFH
leghY9/9HLlAApN/UHwV5ZNsZ/J+L/c=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:09:25 2026 by rpki-client