Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7a1704e8-7ccc-335b-aa08-405d8288ba92.roa
File:                     7a1704e8-7ccc-335b-aa08-405d8288ba92.roa (raw, json)
Hash identifier:          5kFT4zyUEHleW1YnF5D5xIUg38uGTKtts7CWuYfOWaM=
Subject key identifier:   4C:60:19:5A:A1:F2:86:4A:7E:4D:FD:EF:38:25:FE:D3:23:5F:78:56
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F498506FC41B998C41B4AD300
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7a1704e8-7ccc-335b-aa08-405d8288ba92.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:06:fc:41:b9:98:c4:1b:4a:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=10c928bc-4e54-4702-862d-fa5ba6d5c3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:ce:16:b0:d5:be:bd:ac:4d:e8:c4:89:7f:
                    79:c9:57:a0:6c:25:18:9e:95:ff:3e:66:6d:a8:1b:
                    ee:e1:77:68:23:d0:40:e2:04:c4:72:85:94:1e:25:
                    62:93:15:74:bf:b3:df:c8:e7:44:82:c1:4c:5f:ec:
                    bd:83:b0:c7:39:16:49:c9:d9:9a:94:b6:6d:3f:44:
                    25:19:fd:88:bf:d5:44:53:94:b6:89:5a:42:e6:df:
                    ae:cb:8d:73:20:70:19:5b:fb:d3:dd:1a:fd:b1:92:
                    5f:79:0e:d8:f6:f6:be:3e:19:4f:d2:d6:25:6f:c7:
                    14:1a:c2:af:3a:42:c1:07:c5:d7:7a:fa:95:b1:d5:
                    0f:f4:98:3d:04:ea:a0:94:c0:b9:3a:e1:c0:32:c1:
                    3b:63:2e:61:bf:20:bb:d0:fd:89:0d:5f:65:a3:90:
                    d3:da:32:7e:6e:ee:c1:f4:ac:c1:90:c7:b3:e7:99:
                    9f:7a:66:dc:85:ac:e9:35:32:00:e9:86:da:a8:ff:
                    32:33:87:a5:c1:05:49:ee:2e:e8:18:03:a0:fc:21:
                    c1:bf:2a:59:b0:ea:a4:40:7d:9c:e1:30:d1:ef:1c:
                    ea:b0:b8:be:ed:17:ca:31:70:94:26:44:7a:b1:53:
                    59:3c:07:02:47:62:af:19:47:78:c3:ff:3a:af:6c:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:60:19:5A:A1:F2:86:4A:7E:4D:FD:EF:38:25:FE:D3:23:5F:78:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7a1704e8-7ccc-335b-aa08-405d8288ba92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:46:d8:5b:b7:19:c6:91:29:02:68:e4:97:26:51:3f:8f:98:
         bf:fc:d1:f1:a0:27:65:7d:59:02:5e:86:a6:90:22:25:b9:c6:
         90:39:87:41:b8:5c:84:14:e0:c8:1b:b9:54:7f:ea:ca:1c:12:
         36:4c:c6:b4:e8:8f:95:8c:78:5d:be:dd:38:b9:a5:c3:62:95:
         45:bf:a9:c9:1a:82:ba:c0:8c:e9:16:b4:86:f8:9b:4d:2e:8a:
         7a:fe:0a:5b:06:94:e3:d3:ef:5b:02:39:a8:f0:db:4a:ac:a6:
         da:a8:37:85:84:e7:7c:80:fa:40:94:92:8b:ec:82:25:a1:9d:
         30:03:bd:ad:0c:1b:09:ff:54:2e:58:fc:c5:62:4a:c3:78:1d:
         e2:4b:8d:e1:a0:75:34:1a:fe:93:59:12:c8:27:50:2d:01:65:
         2c:7e:41:e1:bf:ef:e9:a6:72:fd:1a:eb:cc:15:00:d3:23:63:
         01:89:53:28:23:43:42:76:28:b2:aa:bf:2c:7e:b7:46:ee:b8:
         c2:35:84:be:3d:84:07:f3:43:bc:e4:0a:2d:0b:1d:ec:25:3c:
         bf:f8:58:e5:52:41:ff:01:9f:a2:92:97:2b:bc:e2:b9:6b:07:
         bb:5d:7c:eb:14:d6:0e:37:2e:1c:f4:5f:79:4d:cb:65:ce:2b:
         8f:da:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:17:37 2026 by rpki-client