Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/85b1ea83-a4ed-350b-9b1f-47843c170b9b.roa
File:                     85b1ea83-a4ed-350b-9b1f-47843c170b9b.roa (raw, json)
Hash identifier:          XZjM5daV1z8BGp1mVIo8WnplzyQGP9DK58F1KlmrIxs=
Subject key identifier:   8A:22:4C:AB:0E:1C:55:1A:58:1E:9B:4F:F6:98:51:C3:BB:D5:02:FE
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059C4F93EF5266C6DE760A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/85b1ea83-a4ed-350b-9b1f-47843c170b9b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:4f:93:ef:52:66:c6:de:76:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=814203b3-ca6b-4137-8703-5558c38b1bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9e:ba:4f:de:ec:d2:32:8d:ac:e7:48:32:a6:
                    16:0e:c3:5c:c9:95:17:5f:ee:6c:90:26:28:66:15:
                    14:f7:86:79:06:b8:32:ba:25:89:21:38:97:1e:43:
                    ae:89:84:c8:d4:3b:b7:b0:d2:bb:7a:55:fb:4e:2e:
                    3a:f5:1b:16:a2:82:c5:6b:d3:69:a2:5a:6b:88:dd:
                    90:13:31:06:bf:fd:58:5c:59:d0:3d:db:c6:30:01:
                    21:95:02:0b:c7:73:11:37:26:bb:b7:95:f5:0b:61:
                    97:12:5f:e3:20:e2:0d:07:01:e9:64:6b:14:a0:8a:
                    b6:e8:86:06:a3:66:fb:3a:51:ac:90:7e:bf:34:59:
                    19:f2:50:92:a3:4c:99:73:1d:00:89:c2:27:4d:1e:
                    aa:08:68:ca:40:19:90:c0:fb:1d:68:e6:52:4c:22:
                    15:07:45:83:be:04:3c:43:c8:61:80:4d:78:90:d8:
                    0e:18:f6:7b:87:3b:88:d6:20:bf:ea:ce:90:4a:d2:
                    7b:16:5b:92:2f:c3:27:c6:22:af:76:e1:ef:f5:42:
                    e6:9a:bb:f7:99:81:68:f4:e6:73:1a:48:a3:80:e4:
                    bf:63:36:5a:6d:43:83:23:33:54:25:40:e8:3e:54:
                    d0:f3:e3:29:37:5a:09:f8:92:11:48:ed:17:ca:ec:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:4C:AB:0E:1C:55:1A:58:1E:9B:4F:F6:98:51:C3:BB:D5:02:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/85b1ea83-a4ed-350b-9b1f-47843c170b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:31:e0:22:f4:af:00:32:75:d6:04:69:a5:2f:b9:d0:2a:be:
         15:b6:91:69:34:fb:c5:46:d6:0c:4d:a9:42:36:e8:ce:82:db:
         af:ac:54:42:8c:43:98:d7:80:00:f2:9c:c0:60:ce:de:19:b1:
         00:71:53:f9:59:eb:a2:39:56:eb:77:9d:74:06:40:cf:de:64:
         3e:c8:89:ba:77:0b:ee:69:a9:69:13:de:d4:9b:81:8c:7c:c4:
         8b:5c:84:24:a0:3f:86:79:e9:c3:2a:38:5d:54:52:98:1e:65:
         95:5a:6a:c2:e3:3b:60:d9:6b:40:b9:34:a8:9b:f2:74:9d:4e:
         ae:d5:31:14:a8:44:05:8a:66:2c:72:b4:9a:27:13:85:89:8c:
         32:25:2e:59:13:cc:58:9a:5d:56:7c:1d:10:67:65:e9:24:6a:
         93:d6:39:40:fd:64:9d:ea:32:bc:15:dc:ee:22:21:f9:db:93:
         71:f0:64:07:df:a8:ec:be:9f:fe:4b:6f:26:4d:ec:b4:4d:b6:
         c1:78:db:bd:46:44:cc:ed:cf:5a:3e:1e:2a:78:f7:f3:31:82:
         40:9b:30:f2:b1:a3:a1:80:71:a2:5a:67:7e:c3:d7:e1:a8:9c:
         35:f2:7b:2f:34:58:03:34:86:16:de:ef:ba:63:70:9b:0c:2e:
         bd:79:0f:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnE+T71Jmxt52CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ODE0MjAzYjMtY2E2Yi00MTM3LTg3MDMtNTU1OGMzOGIxYmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp66T97s0jKNrOdIMqYWDsNcyZUXX+5skCYo
ZhUU94Z5BrgyuiWJITiXHkOuiYTI1Du3sNK7elX7Ti469RsWooLFa9NpolpriN2Q
EzEGv/1YXFnQPdvGMAEhlQILx3MRNya7t5X1C2GXEl/jIOINBwHpZGsUoIq26IYG
o2b7OlGskH6/NFkZ8lCSo0yZcx0AicInTR6qCGjKQBmQwPsdaOZSTCIVB0WDvgQ8
Q8hhgE14kNgOGPZ7hzuI1iC/6s6QStJ7FluSL8MnxiKvduHv9ULmmrv3mYFo9OZz
GkijgOS/YzZabUODIzNUJUDoPlTQ8+MpN1oJ+JIRSO0XyuxZXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoiTKsOHFUaWB6bT/aYUcO71QL+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvODViMWVhODMtYTRlZC0z
NTBiLTliMWYtNDc4NDNjMTcwYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUx4CL0rwAyddYEaaUvudAqvhW2kWk0+8VG1gxNqUI26M6C26+sVEKM
Q5jXgADynMBgzt4ZsQBxU/lZ66I5Vut3nXQGQM/eZD7Iibp3C+5pqWkT3tSbgYx8
xItchCSgP4Z56cMqOF1UUpgeZZVaasLjO2DZa0C5NKib8nSdTq7VMRSoRAWKZixy
tJonE4WJjDIlLlkTzFiaXVZ8HRBnZekkapPWOUD9ZJ3qMrwV3O4iIfnbk3HwZAff
qOy+n/5LbyZN7LRNtsF4271GRMztz1o+Hip49/MxgkCbMPKxo6GAcaJaZ37D1+Go
nDXyey80WAM0hhbe77pjcJsMLr15D/Q=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:25:49 2026 by rpki-client