Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1a27a583-6981-31b8-b9d1-295d24c60a2a.roa
File:                     1a27a583-6981-31b8-b9d1-295d24c60a2a.roa (raw, json)
Hash identifier:          CGNyUd77PF2u13fAILMlLfKMZfBA+TnivCKIfdqL3Cc=
Subject key identifier:   3D:E2:5B:F4:0C:D1:A3:EF:3F:0B:CD:B5:86:71:E8:DF:59:2D:F2:CB
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059BC7E9ACE18F182BB18A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1a27a583-6981-31b8-b9d1-295d24c60a2a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:c7:e9:ac:e1:8f:18:2b:b1:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=c9e639fe-64be-4d41-8790-1d44375fc055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:91:48:cc:ec:b0:31:97:c2:91:b4:05:c0:93:
                    0d:35:f6:0b:08:bc:8c:c0:cb:b2:00:57:06:10:bf:
                    6f:95:59:7b:21:a1:e8:4e:66:bc:30:2b:63:26:9d:
                    e7:53:84:45:a7:30:92:e0:8c:90:d8:0b:75:91:c0:
                    8c:60:90:2c:ac:c0:00:4a:62:93:06:9e:f1:00:dc:
                    be:8c:99:87:40:f6:3c:02:82:42:e7:df:b2:d8:33:
                    8e:ef:d9:5a:7c:0b:5a:43:a3:5c:6d:09:16:89:c7:
                    f6:2a:5c:98:b2:8b:6d:a1:e7:6c:fe:7f:c2:96:25:
                    6f:ee:5a:52:9e:ec:bc:fc:19:fa:5c:5d:be:60:bb:
                    9c:da:fb:ea:1f:32:03:4c:a0:d9:f7:b2:bf:7c:8a:
                    a0:6a:a2:f7:6c:d1:34:ab:04:ed:24:ed:f6:79:59:
                    8c:ec:c0:9b:25:b1:8c:05:f7:6f:7f:dc:2d:49:40:
                    a9:84:ab:c7:d5:51:37:21:bc:e5:2d:a1:75:27:1f:
                    be:a1:f9:37:09:c9:ad:fc:b6:bb:b0:17:9d:fa:f2:
                    41:8b:c4:1f:0d:40:27:8a:8b:06:6a:71:5c:18:ec:
                    11:23:98:38:5a:fc:e8:11:50:ae:e3:63:e1:62:dd:
                    e2:70:d7:c0:d9:07:84:cc:3f:d5:93:81:29:66:bd:
                    2f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E2:5B:F4:0C:D1:A3:EF:3F:0B:CD:B5:86:71:E8:DF:59:2D:F2:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1a27a583-6981-31b8-b9d1-295d24c60a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:3b:ca:ac:f0:b0:3f:bf:a0:d8:49:22:7f:34:10:20:a7:
         34:be:7b:8c:3e:fa:71:98:ad:91:59:10:fa:de:53:38:7c:fc:
         f2:25:7e:71:66:90:d5:5e:62:67:60:9f:4d:16:3f:0e:98:1f:
         72:08:06:91:c4:e4:ff:44:89:06:fa:ee:d4:17:24:1b:11:65:
         9a:e3:75:d7:d7:04:31:8a:28:22:42:2c:c7:80:0f:b3:ec:a4:
         a8:5c:7a:37:3a:61:44:81:d5:a8:7e:9e:f9:16:19:fd:4e:2e:
         0b:79:4b:0f:84:58:41:6d:2e:5f:08:af:d7:04:23:49:b0:64:
         9d:af:41:9d:02:c4:2c:9b:39:04:26:64:75:3d:13:5d:68:fc:
         fd:03:51:d3:71:53:60:ea:ac:41:9c:2b:1f:f9:9c:46:bc:1f:
         a6:14:99:e3:83:d8:e6:4f:f5:4f:66:81:3f:ed:20:1a:63:15:
         92:d8:21:e7:f1:52:9a:ac:62:5b:f3:b9:d1:23:23:3f:29:c7:
         c8:cb:36:ca:6f:0f:59:75:aa:e3:81:a1:ed:5c:12:69:8a:c6:
         ab:67:ec:bd:89:b4:29:17:83:d7:9b:68:15:5e:22:f7:01:94:
         ca:47:81:a0:19:54:d3:2f:25:b4:66:fa:d0:2a:8b:a1:3b:0e:
         bb:2e:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:23:09 2026 by rpki-client