Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6000c889-142a-3ff9-b839-daf701ab8d23.roa
File:                     6000c889-142a-3ff9-b839-daf701ab8d23.roa (raw, json)
Hash identifier:          G0Zvgxwxu0AiifOSx+sJrsXIhyiwGpYGmRXFMB+ei9w=
Subject key identifier:   AC:0D:6F:8E:7A:C8:4C:1A:4E:DC:EF:01:B1:11:8C:7A:AA:77:AB:59
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EA79AFDC0D8DDC8B0BAF69B40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6000c889-142a-3ff9-b839-daf701ab8d23.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:fd:c0:d8:dd:c8:b0:ba:f6:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e7da5f5a-6e96-4a7a-9fdd-f60fd2f5a18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:01:2e:94:f0:ed:3b:28:52:67:ac:36:d2:
                    8d:a4:7b:15:b4:47:20:28:09:9f:5d:fd:9c:31:d1:
                    96:02:2f:9a:f2:ab:7b:b1:3f:ca:bf:9f:ef:5a:29:
                    71:41:27:70:f6:65:90:a2:25:73:d4:49:30:af:84:
                    84:9a:ab:5c:50:58:9c:ca:c4:1a:2e:3d:c2:a6:50:
                    24:05:5e:4a:1a:e4:8e:0d:5e:1e:17:f1:ff:99:fc:
                    72:83:4f:fc:4c:e5:e0:25:08:4b:c4:77:ee:10:49:
                    c0:55:aa:c3:d7:67:f3:2b:6a:4a:c3:3a:b8:21:e4:
                    a0:02:f7:de:33:89:08:18:6e:5b:b8:5e:a3:d0:5d:
                    bb:b7:78:2d:3f:bc:a7:b4:fe:11:cc:ce:72:d6:8d:
                    9c:f0:f8:b1:63:81:a4:5e:03:f1:16:9a:e0:a6:bf:
                    bc:1d:eb:f2:7e:b2:a3:1c:39:75:bb:29:8f:c7:3a:
                    ac:e0:46:14:da:77:95:00:2c:80:af:70:2c:d3:1a:
                    55:b7:04:7f:73:bc:c3:dc:72:5a:4c:4a:96:f0:1d:
                    1b:34:79:cd:30:6e:48:63:3b:f8:da:96:45:a6:88:
                    69:9f:be:30:46:cd:d3:a8:4d:68:23:39:b3:5e:f8:
                    a0:83:41:fe:13:72:bc:9b:e9:e4:fc:a1:41:51:71:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:6F:8E:7A:C8:4C:1A:4E:DC:EF:01:B1:11:8C:7A:AA:77:AB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6000c889-142a-3ff9-b839-daf701ab8d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:09:1f:15:25:99:91:47:80:9c:68:0d:69:7d:2e:b8:4e:f6:
         0f:df:00:38:34:15:fd:e3:ba:02:5e:ef:b5:32:01:9c:4b:cf:
         8a:fc:fe:c1:ab:47:0b:b4:d9:64:68:c3:12:bf:9b:24:16:f4:
         9b:ec:a3:a9:dc:16:9c:5e:62:91:50:42:07:4c:48:6e:71:0a:
         53:2e:6c:eb:4c:98:2c:87:57:fb:0e:be:12:29:47:66:c6:1b:
         b8:e6:b5:d3:6a:99:12:92:bd:e3:6a:bc:fb:87:21:c1:f6:8f:
         05:b2:57:e7:fe:24:51:1c:f8:b9:f2:fb:7f:83:b7:7e:82:2a:
         22:0f:20:2e:64:e7:13:99:d1:69:92:1b:5f:88:f0:fc:fb:4c:
         d5:4a:49:45:be:ba:65:1b:f1:9a:74:54:f2:2c:3f:fa:49:b6:
         7a:cf:a9:5d:5c:18:4f:63:3a:20:f5:e9:71:e7:bb:79:c6:c2:
         64:a0:2a:cf:c8:62:60:19:72:9f:2c:82:63:a4:80:e9:29:50:
         f2:3a:59:d1:bb:cd:2b:19:f2:9c:32:b9:47:fb:d2:e2:46:2a:
         d3:37:52:9f:ec:0a:79:96:b5:e2:f5:fa:f3:3a:48:06:06:9d:
         ea:05:f4:7c:ca:8a:83:c5:a3:06:c4:10:ce:89:29:8f:23:48:
         4a:1e:e7:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmv3A2N3IsLr2m0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTdkYTVmNWEtNmU5Ni00YTdhLTlmZGQtZjYwZmQyZjVhMThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYIBLpTw7TsoUmesNtKNpHsVtEcgKAmfXf2c
MdGWAi+a8qt7sT/Kv5/vWilxQSdw9mWQoiVz1Ekwr4SEmqtcUFicysQaLj3CplAk
BV5KGuSODV4eF/H/mfxyg0/8TOXgJQhLxHfuEEnAVarD12fzK2pKwzq4IeSgAvfe
M4kIGG5buF6j0F27t3gtP7yntP4RzM5y1o2c8PixY4GkXgPxFprgpr+8HevyfrKj
HDl1uymPxzqs4EYU2neVACyAr3As0xpVtwR/c7zD3HJaTEqW8B0bNHnNMG5IYzv4
2pZFpohpn74wRs3TqE1oIzmzXvigg0H+E3K8m+nk/KFBUXF3sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwNb456yEwaTtzvAbERjHqqd6tZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjAwMGM4ODktMTQyYS0z
ZmY5LWI4MzktZGFmNzAxYWI4ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkJHxUlmZFHgJxoDWl9LrhO9g/fADg0Ff3jugJe77UyAZxLz4r8/sGr
Rwu02WRowxK/myQW9Jvso6ncFpxeYpFQQgdMSG5xClMubOtMmCyHV/sOvhIpR2bG
G7jmtdNqmRKSveNqvPuHIcH2jwWyV+f+JFEc+Lny+3+Dt36CKiIPIC5k5xOZ0WmS
G1+I8Pz7TNVKSUW+umUb8Zp0VPIsP/pJtnrPqV1cGE9jOiD16XHnu3nGwmSgKs/I
YmAZcp8sgmOkgOkpUPI6WdG7zSsZ8pwyuUf70uJGKtM3Up/sCnmWteL1+vM6SAYG
neoF9HzKioPFowbEEM6JKY8jSEoe5/o=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:39 2026 by rpki-client