Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa
File:                     53960a1b-a057-314e-9200-bfba1423d151.roa (raw, json)
Hash identifier:          GWk5uRYYlxbxts2/v6L6hfnMPNdFetFPKHg/H5dMNvc=
Subject key identifier:   AA:30:64:53:DB:CD:0D:43:A2:98:76:B5:93:76:D2:38:5F:FC:6E:30
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79A8F8284C41927B9C4E780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:8f:82:84:c4:19:27:b9:c4:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3aad5329-a177-4547-82af-f02031b211b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:cc:eb:42:f7:7d:2f:e6:76:85:73:78:61:
                    44:71:e9:41:39:23:24:25:48:58:60:de:ba:76:72:
                    62:c7:83:f1:95:ee:a8:e1:3a:16:ec:2a:4f:53:29:
                    5b:b0:de:c4:94:a5:f9:8f:06:94:ab:98:10:92:41:
                    a3:e5:6c:ed:9e:46:22:12:b2:cc:95:e2:be:86:87:
                    95:3d:82:b4:55:76:5f:2f:55:0a:61:22:f6:6f:33:
                    6e:30:75:bb:8b:ff:6b:44:74:bd:54:7f:69:fe:21:
                    97:30:29:d7:08:a6:6f:4b:b1:8f:b6:e2:63:7e:ba:
                    b9:68:ee:89:ed:0e:a8:91:ed:c6:09:2d:8e:27:69:
                    63:25:7d:5d:fa:52:ba:9a:af:fe:15:ef:f4:9f:9b:
                    93:40:c3:c0:90:9e:d2:5c:61:a3:61:80:ef:bf:10:
                    8a:3e:d7:13:ae:8c:29:9d:2f:a5:2c:2a:f6:9d:21:
                    9d:8f:20:8d:35:eb:0c:4d:ad:7f:06:89:e2:64:a9:
                    6e:62:b5:96:a8:4d:a5:d6:92:45:46:ef:29:c2:4c:
                    a1:09:63:42:b3:cb:96:6a:63:21:1e:48:cd:6c:7d:
                    27:42:22:dd:00:39:88:8e:4f:b2:d5:d8:89:6a:33:
                    0e:35:1b:47:d7:3c:02:f1:ad:fe:6f:96:1c:ca:01:
                    34:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:30:64:53:DB:CD:0D:43:A2:98:76:B5:93:76:D2:38:5F:FC:6E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e7:48:bb:52:b3:af:0e:32:7d:38:0b:5a:9b:a2:db:e5:0e:
         fc:f3:d2:cb:fa:40:b5:df:6d:e2:d8:e9:08:6c:c9:ef:a0:4f:
         af:07:e2:78:36:a7:07:76:1a:b3:4a:b2:0a:b8:0d:c3:f5:18:
         42:28:48:0e:f0:b6:e9:b2:81:d3:6d:dc:91:9f:8a:e7:11:ed:
         e2:86:bb:ec:03:e1:d3:1b:33:db:ac:ce:9a:82:0b:94:fa:d2:
         94:1d:d7:48:90:19:3c:f8:e1:dd:b0:c9:2e:ae:a3:8c:76:4c:
         64:8d:ed:fe:24:c7:d7:d8:79:e3:c7:45:76:f1:0a:d9:ae:47:
         de:17:cd:77:3d:73:ae:e2:df:79:54:3e:b2:db:ef:64:d4:78:
         d9:4e:93:30:34:bd:c5:ee:7a:ae:15:a0:3a:19:06:ea:76:e1:
         1c:91:53:7f:92:8a:0d:2d:6f:99:65:e6:f9:76:3b:14:5a:13:
         63:47:86:0a:d1:89:e3:4b:6c:7c:57:12:f7:fb:a7:0a:b4:18:
         cf:73:28:cf:34:68:9e:1c:bc:86:a4:d8:b6:fc:03:c4:8e:16:
         39:21:ec:b3:77:d1:22:b6:47:9c:f1:13:6e:4b:98:0d:51:c9:
         65:f6:b5:e9:ef:f4:25:e8:87:da:47:a7:aa:15:5e:7e:fa:5b:
         a0:06:10:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:23 2026 by rpki-client