Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5032c97c-1d16-35c2-a426-f84175509595.roa
File:                     5032c97c-1d16-35c2-a426-f84175509595.roa (raw, json)
Hash identifier:          HOfHNOW8Kb6wXIkQ1oJbDwvo2E3Q5q5gFSXDD/KQJNY=
Subject key identifier:   91:5A:96:CA:41:F9:95:52:2D:F0:D1:F8:F6:AF:ED:25:3D:DF:6C:ED
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E0005F560B287B2CF455F3180
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5032c97c-1d16-35c2-a426-f84175509595.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f5:60:b2:87:b2:cf:45:5f:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=b05294fe-43e3-4f7a-8e4e-0e068cb44650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:11:11:4b:61:82:bb:73:5c:3c:7a:31:81:
                    49:8f:5b:c5:d7:1a:2c:43:ba:c5:e5:9c:0f:3f:2a:
                    8b:41:dc:1c:f1:cf:6d:53:1e:5d:50:bb:1e:ae:c8:
                    38:c6:18:96:86:26:f4:80:78:8b:8f:11:5e:81:67:
                    40:ed:2d:8e:0c:e0:4c:d1:44:83:dc:33:2d:5a:53:
                    51:7d:81:1a:d9:bc:cb:9b:1c:bd:50:cf:93:99:3c:
                    99:89:0f:93:ee:2b:88:3d:da:2c:88:4e:92:92:99:
                    21:33:92:50:bf:bf:63:8d:0c:42:b8:17:6e:ae:f6:
                    f9:18:81:23:b6:6f:c6:0a:c6:17:2b:ed:4a:63:f2:
                    32:a8:e7:17:9b:50:41:8d:71:76:23:d4:5b:4d:fc:
                    a0:38:29:4a:23:29:d2:e6:be:7e:97:c4:73:3e:f3:
                    99:dd:f9:55:ea:a0:f1:58:d3:c0:83:78:74:39:2e:
                    7f:eb:56:15:00:f7:6a:d4:a5:22:cc:b4:b7:42:7c:
                    13:57:f4:b8:58:78:49:bb:a3:9b:09:76:63:9b:22:
                    e9:a5:48:8d:40:38:9d:14:fa:05:3b:07:22:d2:64:
                    76:e5:ea:e3:56:69:53:18:ed:13:a5:31:e9:57:c0:
                    52:c2:3d:b4:1a:68:e8:f3:39:f2:e8:d6:da:a0:5b:
                    be:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5A:96:CA:41:F9:95:52:2D:F0:D1:F8:F6:AF:ED:25:3D:DF:6C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5032c97c-1d16-35c2-a426-f84175509595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:7b:24:44:67:34:d9:71:00:6b:48:58:65:e9:1b:8a:13:
         67:fd:ad:1f:11:86:ac:e1:80:c3:f2:fe:e5:6e:5a:75:62:b9:
         16:78:44:a0:50:6e:be:23:08:67:a8:40:cb:3a:06:d5:2e:cf:
         e0:a7:f8:e5:e1:93:d0:3c:d5:c1:d2:8d:31:2f:2c:59:51:e9:
         8f:d0:20:c9:49:3c:65:bb:8d:a3:ed:22:c5:77:82:f0:e6:c1:
         6d:0e:20:86:c6:fc:20:03:fd:12:3d:4a:70:44:bc:69:73:39:
         54:b9:53:77:1f:1d:75:96:46:fd:10:8b:f2:c1:1b:48:2b:d2:
         7a:51:de:f6:4a:e2:37:a8:70:7c:ac:2c:c7:7d:f5:1b:10:55:
         c8:f3:97:f8:d4:b7:22:07:e3:d2:98:19:b6:93:db:90:22:e0:
         bd:c4:cc:61:17:02:9f:b9:53:19:a2:eb:d2:c8:05:1a:21:88:
         f5:4b:83:c0:73:03:d5:c9:4c:0b:06:57:0f:fc:81:e9:ac:cd:
         5a:a0:f8:d1:2e:c2:4a:83:48:25:11:44:73:22:bf:c2:da:d0:
         d4:7f:9c:56:7c:e2:ee:6e:53:b7:4f:d9:c2:84:8e:59:28:13:
         e1:09:2d:12:82:9a:b5:b3:94:e2:b7:08:64:ec:82:69:8a:e3:
         56:61:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:26:08 2026 by rpki-client