Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
File:                     53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa (raw, json)
Hash identifier:          E8UhsmdgvqlpxijPGZeVoC8zXy+SWe5VlX/q9XGViqg=
Subject key identifier:   DB:EA:B6:4F:46:C5:D0:AE:46:EA:D4:5A:B0:6B:6D:D5:0F:BD:9B:2B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059BD024D3A50041CC9D1980
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:d0:24:d3:a5:00:41:cc:9d:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=53165287-9b07-47a1-87e7-58290b6259fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:33:76:3f:a9:be:77:84:c5:a9:e5:97:28:
                    06:8d:76:07:b4:cf:6e:06:1b:f6:c0:9c:fa:7f:35:
                    ec:8c:9d:92:9d:07:c5:0a:e1:97:d5:91:65:c3:58:
                    de:0d:94:91:dc:d0:a1:dc:94:d1:33:e7:49:97:ef:
                    b8:66:8a:97:e1:49:8b:91:83:a3:5d:00:18:46:aa:
                    8a:8e:1b:cb:b4:57:40:01:00:13:dd:38:e4:8c:c8:
                    d4:ce:5a:d0:93:8f:99:9d:b8:1d:27:46:ab:36:b0:
                    9b:94:dd:c0:c2:88:46:1f:01:c3:4f:3a:85:24:8f:
                    95:ce:37:97:65:f4:d9:6a:d1:ec:92:02:27:65:19:
                    15:70:9b:f1:fb:a7:db:19:0a:1a:d1:54:cb:ee:7d:
                    8c:65:ee:7d:e2:c4:50:2f:18:42:f0:3d:ad:0a:fb:
                    f8:1b:25:83:b2:11:ea:12:5e:02:ff:05:75:92:f2:
                    da:64:f9:77:63:18:fb:e6:39:39:71:ae:c7:11:43:
                    1c:eb:67:8b:01:36:18:9d:c7:88:1f:73:c5:2d:7d:
                    df:f0:cf:06:42:32:ad:23:06:0c:05:00:9e:df:14:
                    93:28:a8:23:0a:96:5e:12:29:7e:d5:6b:de:b2:4c:
                    13:91:ec:92:fd:67:34:39:2a:49:a4:d6:a4:ce:c0:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EA:B6:4F:46:C5:D0:AE:46:EA:D4:5A:B0:6B:6D:D5:0F:BD:9B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a9:12:1d:32:54:60:53:03:86:2b:ff:8c:78:4c:a6:de:76:
         02:d5:90:cb:85:74:6b:61:61:8a:cc:1c:fa:4f:a1:cf:ab:dd:
         aa:1d:f5:55:1f:89:c9:37:ff:33:e0:2d:51:36:b0:69:14:98:
         74:78:fd:71:60:3e:a0:e8:39:6a:8c:d8:1c:a5:ce:df:6b:71:
         84:8d:1e:6a:71:67:d5:87:82:38:b9:c8:58:7d:3d:84:3e:f5:
         86:82:88:5d:b1:d0:e4:b5:5e:ab:31:1d:2d:bd:21:c1:b6:b1:
         6e:09:66:1e:1c:08:34:03:f5:ef:09:0f:47:8c:16:f1:3e:0d:
         e5:79:c2:f7:df:98:86:9a:75:9f:97:c3:4b:fd:43:f8:86:da:
         e6:a6:18:f7:df:50:cc:75:a3:7d:2c:dc:e9:5c:24:36:86:1c:
         cf:9f:a0:18:96:c5:67:38:21:3b:84:0f:1b:14:b0:8c:31:21:
         21:b2:ed:69:42:88:a4:c3:04:8d:a0:9e:c1:5b:cb:3c:12:49:
         6e:ad:f2:d6:51:f4:6e:78:55:03:73:87:23:0a:35:1d:63:2b:
         92:2c:f0:b2:65:8a:eb:c6:47:45:53:28:03:9c:b2:7f:fb:aa:
         f9:8e:a7:e2:cc:2e:c5:0f:f9:a0:f5:5b:50:31:5a:34:05:1f:
         48:a3:74:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:12:45 2026 by rpki-client