Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa
File:                     7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa (raw, json)
Hash identifier:          zQsITMf24We8rDOSEgXZ2SK8EnyuKDL3mFJRxmyrqC4=
Subject key identifier:   0B:07:C9:5B:7D:45:0D:F6:EB:A3:CE:4F:AA:51:1E:AE:00:20:DE:D9
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E0005FCC389B7665119B653C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:fc:c3:89:b7:66:51:19:b6:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=3539ecc2-e4d8-4de5-a318-2b2e127fe4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:4e:12:f9:5e:42:ae:fb:5b:c0:d1:c3:41:
                    2a:1e:d1:79:72:1a:87:ac:43:30:36:2e:12:3b:d2:
                    72:8f:11:29:98:10:f5:f1:f2:9d:55:60:5f:af:87:
                    cc:9d:bd:3d:e3:f4:20:c5:8a:1b:c8:f9:60:57:28:
                    3a:55:dc:b8:ff:9a:5c:7f:7a:a3:1b:80:57:78:03:
                    69:31:a8:af:fd:25:ae:53:e5:c7:a2:61:a9:c6:a9:
                    bd:a3:4e:00:db:1b:87:d2:77:89:a5:e0:07:90:97:
                    0b:41:23:f0:79:4f:d4:81:ba:74:37:8b:62:f7:23:
                    95:12:87:cb:a7:db:05:79:47:47:45:9c:13:32:ca:
                    88:60:f2:0e:e7:71:fb:aa:98:e4:a1:c7:4b:e9:b4:
                    ed:9f:4d:75:da:21:9f:b7:c0:c7:ff:34:fb:7e:ff:
                    cb:f7:f9:bf:f8:f3:a2:57:ba:3d:13:48:5b:4f:93:
                    58:44:94:90:79:0b:aa:97:f6:b4:0d:85:6d:15:b7:
                    cd:d6:38:24:6e:b7:b0:b5:81:be:fe:d4:ea:42:ab:
                    39:df:f1:67:5b:46:a2:b4:87:46:f3:d5:ea:78:c5:
                    c8:8c:5a:fe:ab:fa:df:71:d5:96:fa:95:7f:4a:77:
                    b2:89:95:0d:c0:61:c2:c4:bd:dc:ac:ff:9f:1f:a5:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:07:C9:5B:7D:45:0D:F6:EB:A3:CE:4F:AA:51:1E:AE:00:20:DE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:1d:a7:88:35:97:d4:e6:f6:47:f2:4b:6a:28:11:e0:53:
         34:d7:d3:7f:bb:9c:9f:11:4b:e6:e8:2c:d7:d4:9b:ae:67:8e:
         09:d4:86:8b:a0:49:84:30:7f:c0:db:bb:f7:22:02:45:45:01:
         aa:9b:b3:51:27:15:74:14:08:85:be:b0:ee:8e:8f:04:65:4a:
         87:32:f4:dd:7c:f0:7f:47:90:50:5c:9c:08:3b:83:0b:19:ff:
         ee:23:ab:57:22:76:be:86:15:ef:7b:a2:c9:20:b4:75:d3:94:
         08:1c:dc:44:dc:b5:98:36:b6:22:80:d1:f7:72:4c:93:3f:be:
         18:c2:20:0c:b2:5f:49:05:ba:58:2c:c4:9f:31:29:1b:65:23:
         4b:02:f2:21:c5:62:17:5e:35:20:63:e2:e9:3b:90:d3:ff:ff:
         38:28:95:16:05:c1:e9:5b:c0:46:b0:02:ac:04:b9:60:00:da:
         3c:73:2b:61:71:b3:dc:e9:9f:66:a4:47:d6:22:23:79:ae:11:
         8a:dd:61:39:8e:a1:43:93:70:4e:f3:f1:47:a1:0b:e8:83:4e:
         8b:ae:56:dc:a2:2f:30:0c:a3:3c:a8:f0:7c:f4:02:0f:83:d0:
         85:91:f9:36:7c:35:e1:11:5b:95:90:72:f6:ef:c8:d0:37:b9:
         5c:63:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:37:19 2026 by rpki-client