Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
File:                     75bde4a1-e87d-321d-917f-10d16a03a5a1.roa (raw, json)
Hash identifier:          AZfQWGANl053dv7fv/d/HZULzoxVw5hCiTAz7kfb+kU=
Subject key identifier:   A0:2B:DA:A9:04:92:6F:60:81:2D:0E:CD:2D:90:2B:D4:1B:5A:20:A4
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E0005EBD1156F01BAFB01FFC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:eb:d1:15:6f:01:ba:fb:01:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=ea2b56ae-4023-4b36-a02b-be99696ba233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:8f:7f:65:81:1c:07:f7:46:60:0e:3f:aa:
                    f2:18:2a:1f:9a:51:54:3c:82:3d:45:09:5b:df:0d:
                    5e:b6:33:bd:ce:e4:f2:aa:b4:c7:ce:26:7d:7c:fd:
                    dd:26:44:ea:ea:ff:58:8d:f0:25:f3:92:f7:9e:5b:
                    27:3c:a6:9d:63:0d:b8:dc:eb:cc:d6:36:bc:83:7c:
                    58:2c:c4:2a:2f:8c:1d:8d:a2:b1:84:40:12:14:77:
                    1d:ca:3b:e0:c5:94:ee:a2:3c:84:a1:ac:cb:89:86:
                    5a:9f:3a:81:b9:37:91:f4:9c:ff:f4:03:ab:83:5d:
                    59:e4:23:06:5d:b0:79:35:b3:99:1e:d4:49:cd:6b:
                    6e:ec:09:6f:56:fc:16:b0:f6:dd:66:44:b5:da:c0:
                    26:fc:6c:34:4a:1e:8d:e5:5c:72:65:50:8c:c5:69:
                    a9:37:7c:df:76:b9:cf:16:35:5b:d4:80:6b:2e:17:
                    22:6e:29:d8:d5:a2:d1:1d:ba:d4:3d:2f:ba:13:08:
                    a9:c3:6b:fb:d6:2a:a3:34:7f:f5:d7:5b:33:ea:65:
                    35:67:b4:f4:5b:05:4d:cf:37:3f:b0:2a:d8:21:db:
                    0c:1c:f1:5c:e1:91:84:97:87:91:85:30:e5:2b:53:
                    10:1d:c7:de:79:c2:51:57:6f:f5:ec:82:7f:30:51:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2B:DA:A9:04:92:6F:60:81:2D:0E:CD:2D:90:2B:D4:1B:5A:20:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:65:f5:f9:e5:2b:d9:5f:fb:41:38:f9:5f:c0:eb:ae:7d:
         b7:95:c1:9f:5a:65:72:72:b2:7f:19:3b:13:10:54:b1:6a:8f:
         69:51:5e:b9:4d:16:af:c1:60:53:45:8c:50:9d:a1:dc:a8:87:
         59:73:31:4e:d4:4e:c9:45:ae:36:2f:f3:c0:07:8b:93:7d:30:
         7b:4c:12:a7:fe:65:ad:44:53:e3:6d:9c:c8:a8:16:10:fc:ea:
         7c:5d:28:d3:b0:ab:08:5f:88:a6:74:28:82:ab:00:e3:b4:96:
         70:be:1a:3e:1d:ed:fb:78:36:90:b9:e8:9d:5f:68:3c:52:e3:
         1d:79:e4:73:cb:c4:06:71:39:9a:8a:f1:16:f9:90:cf:3e:e2:
         52:7a:0c:2f:bc:5f:19:7b:12:a7:1d:5b:a7:cd:45:27:61:dd:
         28:1e:a3:63:95:a1:81:10:27:64:f2:51:b6:08:5d:a7:3c:98:
         23:72:08:d9:3c:4a:86:ba:4f:b9:bb:93:04:31:47:d1:97:83:
         8f:b4:89:48:73:cf:97:1a:78:e4:b8:1f:4b:d1:22:64:b7:a1:
         ca:88:63:b7:30:a0:5f:25:c6:2e:86:3c:6d:7b:d6:fd:e4:1a:
         5e:bb:32:55:2f:a7:e5:52:33:f3:2c:d0:42:ac:de:92:e0:c3:
         14:55:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:24 2026 by rpki-client