Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1e169c94-a0b0-3e45-8465-d50153a96743.roa
File:                     1e169c94-a0b0-3e45-8465-d50153a96743.roa (raw, json)
Hash identifier:          e1NrYGIBc3c0GODQLL2SOzAWjd3AQT4kby2Z3UoK0WI=
Subject key identifier:   8C:9A:DC:E2:60:2B:63:E2:65:2C:4E:7B:95:04:29:9C:06:BA:6D:B3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E000616E594EB42ED3088EE18
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1e169c94-a0b0-3e45-8465-d50153a96743.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:16:e5:94:eb:42:ed:30:88:ee:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=e2d9b590-21e8-4129-b368-f0427cc5d279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:20:1a:98:60:5d:62:10:0c:0a:76:cf:c9:
                    ac:8a:6d:e6:46:7e:73:fc:4d:0e:63:99:32:85:fc:
                    3d:0b:ae:e2:1a:26:3b:f3:67:3a:46:2e:1f:7f:69:
                    20:9b:b6:a1:a4:de:e3:1a:65:fc:7e:c0:a0:bf:26:
                    61:11:71:5e:cc:bd:70:fd:68:ab:09:70:69:5f:40:
                    79:36:d4:d1:64:17:0e:17:f6:79:70:5d:d5:4d:a9:
                    1b:43:88:3f:35:22:af:57:c8:21:40:e2:f2:77:c6:
                    c0:64:c2:a6:54:b4:39:d9:03:9a:02:42:18:24:ca:
                    34:73:3b:41:73:a7:87:27:1e:57:bb:11:b3:67:de:
                    a4:c3:5c:00:36:52:9f:16:d2:01:aa:3b:06:eb:41:
                    e9:78:cd:11:da:4e:2f:c8:7b:ed:fe:2c:d5:27:00:
                    01:6a:c9:4a:ab:33:4a:44:e4:50:e6:9c:eb:d5:54:
                    51:e5:9c:4e:c6:f1:14:1b:05:2a:d0:5a:71:d5:f1:
                    d7:4a:6b:e2:94:5f:05:07:90:1d:b8:3f:ed:9b:5e:
                    68:75:6f:cc:ab:89:a3:4e:d3:d6:00:d0:8c:dc:29:
                    58:d3:07:71:d7:5b:4d:63:c0:ec:65:b1:f9:e6:9f:
                    39:6a:3d:c4:df:7a:da:ac:8a:06:84:dc:66:02:9b:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9A:DC:E2:60:2B:63:E2:65:2C:4E:7B:95:04:29:9C:06:BA:6D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1e169c94-a0b0-3e45-8465-d50153a96743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:d2:10:96:0e:38:3d:e9:3e:c2:72:44:ec:3c:02:a8:e0:
         d5:46:a8:02:cc:33:fa:ce:41:8f:80:13:6c:11:ee:c4:27:7c:
         5c:45:4a:8e:ca:11:c6:ec:cb:31:85:b4:f7:7e:c6:63:9a:9c:
         a4:fb:94:a6:87:d1:ee:fd:ab:d1:29:b0:a2:90:50:e6:13:70:
         30:0d:84:73:4f:46:e2:d3:79:62:82:c0:7f:9e:b0:94:3c:5e:
         bb:31:e6:54:cf:44:e0:98:e4:98:c3:7e:e6:eb:96:2f:93:6e:
         1f:1a:26:5e:35:bc:38:48:77:2c:61:85:63:7b:11:1f:6a:76:
         b8:d0:92:b6:67:79:64:31:6a:55:1a:19:07:23:cb:4d:1a:2b:
         2c:c3:c1:c9:4a:fd:95:a3:7e:d4:04:eb:24:ff:87:3d:e8:f5:
         f5:24:31:9f:db:f8:79:f0:51:06:cf:28:e0:f6:3e:38:bc:f6:
         9a:63:57:55:12:28:72:33:1f:99:6d:ec:4d:b2:66:63:24:b1:
         67:73:3f:67:f4:a3:fb:c2:92:72:5c:b9:13:dd:b6:79:8e:df:
         e5:06:37:51:6c:89:0d:4a:15:26:e1:2e:eb:94:8a:18:b0:46:
         23:27:e4:9b:55:e3:9e:7d:4c:5d:b2:79:0d:8d:a1:d9:5b:5a:
         c9:e2:bb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:08 2026 by rpki-client