Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6000c889-142a-3ff9-b839-daf701ab8d23.roa
File:                     6000c889-142a-3ff9-b839-daf701ab8d23.roa (raw, json)
Hash identifier:          n8V+XReNH9eAg9k5uGRhNTZ3Zxp0PCI8EQDqjGtuaO4=
Subject key identifier:   AB:98:B8:3D:52:74:3B:CC:24:3A:33:FA:70:A0:E5:AC:D8:66:A0:AA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E00061A2CC941120799B87200
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6000c889-142a-3ff9-b839-daf701ab8d23.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:1a:2c:c9:41:12:07:99:b8:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=a8cbd8bd-e25d-4510-b982-34c2238a4cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:06:c8:6f:aa:dd:58:8a:d3:af:63:ff:d4:
                    88:29:ab:7d:c7:53:de:a7:d1:c7:7f:55:ee:e9:e6:
                    cc:d0:60:d7:25:a6:73:eb:3b:39:bd:a6:0b:76:27:
                    20:dc:eb:6f:e4:de:34:a0:d6:07:0e:5d:05:c0:18:
                    92:b9:c1:92:43:bd:67:32:a3:94:17:b1:b7:3a:37:
                    f5:47:c2:af:e2:49:74:c0:08:c0:05:31:1e:af:ea:
                    a3:26:d5:5f:c8:97:84:61:b5:c1:62:09:9b:f9:04:
                    5c:af:ae:27:ac:93:70:de:05:be:e9:fd:2b:af:63:
                    7f:e3:de:90:66:fa:65:dd:f5:a1:6a:f6:f8:0a:82:
                    a9:e1:2c:d4:f4:fc:cf:ad:29:6e:b9:30:02:9f:bd:
                    cc:63:e2:27:47:eb:6b:6e:1a:bb:fc:99:c5:aa:5f:
                    95:78:55:92:7c:8a:b2:36:a5:be:a3:1f:97:ce:47:
                    73:27:a7:c7:31:da:07:39:f7:a8:b2:81:63:e4:17:
                    34:4c:c2:16:d8:3e:22:48:7a:09:d9:f2:47:62:17:
                    de:39:94:01:88:7e:e3:ee:c7:8c:bc:7b:72:43:12:
                    2c:1e:e8:84:0b:9f:c7:a9:c6:90:ff:80:31:75:8a:
                    2f:cb:b6:08:a6:14:ad:5e:20:bc:aa:61:97:60:8b:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:98:B8:3D:52:74:3B:CC:24:3A:33:FA:70:A0:E5:AC:D8:66:A0:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6000c889-142a-3ff9-b839-daf701ab8d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b3:03:79:e5:56:bb:ec:c8:ce:3e:b0:6f:db:ae:f9:31:7c:
         80:71:fe:32:be:93:0d:7d:1f:60:64:01:ba:2c:c3:7b:28:f1:
         66:7c:e8:13:60:16:a1:b5:f7:06:84:bc:28:12:c6:0f:8a:a2:
         b8:e0:09:ec:09:02:35:a6:b4:e0:2e:28:55:87:d0:95:1d:49:
         6b:9a:f2:aa:50:50:9a:4e:39:a7:fb:70:f3:73:af:45:99:56:
         85:c5:a3:fa:f0:4d:23:26:bd:70:33:78:56:05:50:bc:dd:54:
         31:37:51:f0:fc:ac:03:fd:a9:eb:d8:9a:21:3c:29:82:20:33:
         d9:20:43:95:c9:7d:ab:19:49:e4:f5:6d:a1:17:67:76:e2:83:
         f8:76:5a:32:ef:19:ea:6b:be:02:a1:a7:a6:4d:74:91:0a:c5:
         e2:8e:76:f9:8f:54:76:27:75:b9:01:81:63:c4:52:a6:9c:62:
         74:11:ae:eb:91:be:88:62:bf:7e:37:3d:61:82:58:11:e5:04:
         ad:ed:f0:c2:fa:49:58:2d:a8:74:3d:7f:9b:26:11:90:1f:d4:
         b0:87:80:94:3f:6b:63:81:02:98:14:2a:d7:dc:9c:6e:a2:0b:
         d0:37:ca:e6:12:5b:da:a2:1c:ef:67:e8:ad:aa:ca:fd:38:38:
         3b:b2:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:24 2026 by rpki-client