Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa
File:                     21908a76-1951-32c5-96cf-7506f81108ff.roa (raw, json)
Hash identifier:          mMmn+dt0QUu3FSauhQI9HHgJP7xZafEAiNrQUarFVVc=
Subject key identifier:   40:FF:3C:69:1C:A6:E6:D9:9B:6F:1D:64:24:1B:CB:2A:B5:27:52:04
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059C40706A99803BED8D82A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:40:70:6a:99:80:3b:ed:8d:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b0678913-8eb0-4542-998e-a1c23fe8a19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:53:29:f1:d6:56:f4:51:1d:ce:cf:6f:e6:
                    c9:85:49:01:60:d7:62:d8:84:bf:b9:e7:0f:b0:23:
                    f6:a5:63:48:69:f9:ff:34:2a:0b:46:b3:52:35:0b:
                    67:9a:14:a7:f3:1a:79:c7:b5:eb:34:eb:82:60:cd:
                    ef:fd:7f:20:33:8c:cb:6d:5a:f7:51:a7:db:02:52:
                    da:67:40:04:60:33:87:5f:45:58:ce:6b:66:8b:c2:
                    b0:9c:55:79:56:3e:d8:8e:af:6e:ae:0e:05:d4:5e:
                    c9:18:d5:65:db:17:c5:11:5c:57:9b:b1:1f:36:c6:
                    29:71:db:b7:3d:e8:c2:c7:18:5a:64:4a:ec:5c:7b:
                    e0:33:9f:70:66:92:3e:bb:69:54:44:11:e2:8f:46:
                    e7:29:81:c5:24:aa:1f:93:1a:2d:c1:5d:de:50:f7:
                    db:56:d7:66:04:5c:5c:3d:90:19:86:66:12:9c:e0:
                    cb:59:d4:68:07:12:d5:a5:70:12:6c:30:f6:d8:2c:
                    ed:c3:c9:7e:11:9a:6f:a2:c2:33:79:5c:c6:38:c6:
                    63:91:4a:f1:c0:ad:eb:c0:5e:ba:52:88:dd:e6:e3:
                    d1:a4:c1:bf:5f:d3:5e:9b:bf:0a:c4:03:77:55:45:
                    df:43:ed:18:41:74:00:3f:00:0f:5e:75:c2:6f:0e:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FF:3C:69:1C:A6:E6:D9:9B:6F:1D:64:24:1B:CB:2A:B5:27:52:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:09:5c:c4:57:ce:ee:b0:27:9e:0a:0e:7f:d1:17:82:1f:
         0e:81:79:a0:f3:90:fa:64:4c:e1:ce:c5:fc:9e:f1:6a:8b:94:
         ea:ff:cb:6a:77:a4:ff:bc:63:c6:45:4e:d7:32:e6:f2:75:f2:
         41:ca:15:66:6e:69:48:cd:42:1f:09:1d:84:3b:65:91:01:66:
         24:22:b5:54:b0:42:5a:a4:ef:f0:b1:a5:0b:b7:b8:30:73:9e:
         79:bc:db:13:99:88:97:67:20:16:17:5a:a9:c6:c2:ac:60:ef:
         37:9e:57:7b:60:4b:de:d6:40:aa:99:0d:ce:e7:33:81:f8:3b:
         74:66:ad:d7:9e:04:4e:1e:dc:6d:18:c5:a5:a4:fc:39:03:46:
         9d:21:ab:6a:16:5a:bf:36:8f:c4:8d:1d:04:ec:5e:ea:3e:44:
         61:43:4e:6b:ea:74:48:56:92:cd:02:6a:85:e9:be:c0:32:fb:
         ff:7e:86:7e:ba:3b:51:95:06:c2:f5:8a:b3:d8:96:48:a5:3b:
         a4:54:30:bd:91:23:3e:95:da:3a:fb:17:79:ee:38:aa:c5:27:
         19:f2:24:71:00:2e:4d:a8:d3:82:3e:30:cc:65:a4:1f:7c:82:
         ce:12:fa:26:03:4a:fd:84:37:ed:9f:e1:a3:e2:2c:33:06:ee:
         6c:87:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:46:38 2026 by rpki-client