Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
File:                     75bde4a1-e87d-321d-917f-10d16a03a5a1.roa (raw, json)
Hash identifier:          6J8fw5rdOIjIlr+CCwt5DX0UWOqlFvS/feWDRFqACGQ=
Subject key identifier:   0C:AC:A8:85:63:08:08:0B:D9:1F:8D:07:25:C1:AA:12:92:84:56:9C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497CA01AA3A7365C940C2F80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:a0:1a:a3:a7:36:5c:94:0c:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8d620ce5-97a0-4b18-88d6-41c4e4fba1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:1c:06:e6:d4:cc:f0:3f:f3:0b:84:cd:fc:
                    fb:48:85:fe:e6:67:1c:50:c1:1a:cc:4c:33:75:4b:
                    e0:24:9d:ec:14:29:f0:28:09:09:87:ed:d1:a0:3a:
                    94:06:d5:6e:8e:05:15:b0:3e:29:32:1e:5c:b5:ce:
                    64:3b:11:f1:41:4b:dd:6e:79:32:07:a1:e8:08:57:
                    63:40:dd:9e:ba:33:d4:27:48:8d:23:44:e7:60:a8:
                    d8:f2:ed:7c:0d:b5:58:d7:63:2c:c1:ef:77:ea:3a:
                    c0:a5:1e:10:3a:f0:e7:65:cc:1e:a5:22:c9:5c:c1:
                    04:07:7b:2e:10:cf:da:5d:71:8e:37:fa:e8:cf:fd:
                    fc:13:36:b3:a0:92:29:82:6e:ad:4d:ab:d5:e5:d9:
                    7f:59:98:74:1c:a7:c0:86:61:7d:27:cb:5d:56:19:
                    c8:2e:7a:0e:c5:00:df:c2:15:f0:6f:65:58:52:ba:
                    11:51:5d:42:c6:33:4a:b6:cd:65:94:5e:d3:b8:18:
                    f1:5f:54:e2:63:ea:f6:ce:18:c0:8d:7c:ee:d0:67:
                    99:a9:f6:e5:80:73:6c:37:0a:5a:66:6c:c7:14:e3:
                    98:62:cb:ec:2c:a0:21:dc:e3:1f:c6:de:85:30:bf:
                    c7:6e:6f:86:51:eb:10:ac:d0:1a:08:3d:94:4a:f0:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AC:A8:85:63:08:08:0B:D9:1F:8D:07:25:C1:AA:12:92:84:56:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:f0:73:2a:7b:f7:a6:6b:2f:81:9d:a5:51:e6:94:13:d7:
         59:92:5c:0f:75:29:62:27:19:6c:e1:19:4b:c1:40:7e:19:63:
         27:24:5c:dd:24:36:fe:59:13:fe:10:1f:8b:85:8d:f2:88:7a:
         be:15:9d:d9:a1:4c:0c:37:41:7e:20:96:93:3d:65:48:c3:46:
         92:83:59:df:8b:d9:d6:ef:80:8c:2b:27:03:93:b9:af:64:34:
         17:59:a1:fe:73:e6:39:5e:04:51:9d:3e:28:3c:77:82:7c:40:
         37:00:2e:c4:d1:3d:0f:f0:93:d1:61:80:15:f1:2c:45:e5:f3:
         2a:77:8c:46:35:09:a3:af:5c:89:a2:1f:12:b5:08:b0:7a:9e:
         15:21:86:f0:19:1f:38:40:d4:3f:69:9d:7e:0f:93:87:ea:0d:
         ad:b7:f4:c3:2c:84:c6:ea:81:7f:fb:38:81:9d:11:6d:18:07:
         bc:6a:4b:3e:6e:24:bc:47:c4:a4:41:a9:93:58:48:26:40:77:
         96:53:c7:93:2f:ba:0b:4b:bf:37:e5:3e:d5:94:89:a2:b1:7b:
         ff:da:b0:79:3a:44:7a:d0:66:0e:42:9b:92:7a:12:60:b7:15:
         2a:da:41:67:39:4a:5e:05:cf:5b:09:14:36:0d:02:d5:6e:31:
         bb:de:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:52:08 2026 by rpki-client