Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03fc8902-5741-3264-a3bf-8836a3aaede2.roa
File:                     03fc8902-5741-3264-a3bf-8836a3aaede2.roa (raw, json)
Hash identifier:          s1vi1tKhYX9SdEOEXDSoJunCDa2g9ENZ2gsxnljKcak=
Subject key identifier:   95:F0:E9:C5:A5:C4:C1:0D:09:3C:C3:03:51:89:90:1D:45:7B:41:C7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA7A06FCAA9B18F30141756C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03fc8902-5741-3264-a3bf-8836a3aaede2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:6f:ca:a9:b1:8f:30:14:17:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=786e7cd0-4c8e-4b2e-b166-eb74ce0faf4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:c3:fc:b6:f1:d5:2a:19:3b:8d:10:e0:8b:
                    6d:4a:6e:0b:78:5f:2b:64:60:9b:a3:3d:c0:14:41:
                    33:8a:82:e4:2b:3f:f8:20:01:ce:e5:26:4f:d9:84:
                    6c:98:a4:ac:03:ba:e1:e3:2a:fa:12:fb:36:b9:b4:
                    11:a8:c7:32:ed:43:a0:a7:4f:4c:d6:9a:0f:f9:62:
                    c1:5b:d7:d1:28:9c:96:29:cf:fd:6c:89:4d:da:04:
                    74:83:28:04:ee:ca:f8:f9:2b:4d:ba:74:71:e9:4b:
                    71:09:bd:f0:53:16:9c:91:81:dd:9e:ab:ab:32:9d:
                    aa:8b:4c:97:b2:fe:d6:cc:7c:2a:7a:61:cd:c8:78:
                    f5:3c:d4:35:61:ba:5a:0b:bb:ba:a3:00:9c:ce:1a:
                    55:5e:df:b6:24:84:4e:02:4e:ea:26:47:6f:69:37:
                    94:4e:98:a4:95:2c:03:96:0c:2d:60:91:fa:3b:82:
                    5f:38:23:e2:9a:36:86:f9:1c:a2:69:f6:d7:c0:69:
                    0f:ca:d4:a0:fb:eb:2e:03:48:b3:9a:38:7c:32:a7:
                    b5:38:d7:a4:ca:b0:bf:6d:a9:74:0f:2f:b7:5d:f7:
                    58:2a:86:90:5e:5b:d4:6c:9a:cc:6c:3b:fd:c7:74:
                    81:42:1b:45:95:12:21:90:c5:46:ed:18:66:89:1f:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F0:E9:C5:A5:C4:C1:0D:09:3C:C3:03:51:89:90:1D:45:7B:41:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03fc8902-5741-3264-a3bf-8836a3aaede2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b0:f5:c0:21:d1:5b:76:45:61:b5:e5:38:9b:54:aa:b2:aa:
         4f:15:59:bc:66:e9:08:e4:03:2d:3a:78:5e:83:e5:e9:8a:a7:
         40:32:81:f3:87:55:75:84:30:8e:c9:92:59:55:c4:7f:01:9b:
         c2:75:42:d7:6d:e9:83:26:5f:6c:fe:ba:5e:b5:20:14:46:8b:
         6d:4f:29:57:c8:ff:a8:c5:94:02:1f:de:ae:8b:49:7d:72:2f:
         25:6a:c6:97:1d:90:4e:32:0a:1a:5b:e5:45:13:1f:c9:91:99:
         21:58:b1:70:0b:04:2f:b1:ac:1e:aa:8d:06:47:f0:60:de:74:
         fa:17:ca:ba:26:04:15:7b:92:20:80:1c:5d:73:88:08:f4:d4:
         c2:f5:fa:c0:b1:1e:83:1d:5a:7f:2a:05:3c:12:e8:8b:0e:2c:
         c4:fa:5b:24:65:fe:b0:86:dd:e2:77:93:4b:ea:64:7f:2e:17:
         60:ed:ae:a7:56:1b:65:a6:b9:34:25:41:57:09:ce:2a:9b:fa:
         22:b5:e9:53:24:24:1a:fd:54:58:3d:32:72:1f:d1:db:04:c2:
         aa:c3:23:0e:65:fd:7e:54:47:9f:f7:6d:6a:90:a7:c5:e6:83:
         74:7e:f1:62:0f:c6:d5:48:18:5b:ba:75:3f:71:e1:fc:39:90:
         64:29:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:24 2026 by rpki-client