Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/86802958-60b7-3f07-8c28-a0fc82712d1c.roa
File:                     86802958-60b7-3f07-8c28-a0fc82712d1c.roa (raw, json)
Hash identifier:          S+XSrj3yVE9RNSsbWIseuR2SeJSxX/+CzhXSPVeGvWs=
Subject key identifier:   1E:84:02:DE:A9:26:6C:0B:1E:11:80:B2:D3:0C:8A:05:A1:27:81:8A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059BCF89411551CB6AA84D00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/86802958-60b7-3f07-8c28-a0fc82712d1c.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:cf:89:41:15:51:cb:6a:a8:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=1b828ebe-6f59-4047-b445-facc57f0ab62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c6:3e:ae:77:85:fa:7f:b0:43:4e:a2:62:91:
                    33:eb:a4:ed:d5:2e:26:ee:58:59:8c:c3:da:0a:46:
                    fd:07:90:99:7d:3e:0d:76:7c:9b:b4:b7:ba:bd:fb:
                    c5:85:be:2d:84:c4:75:51:cd:ec:03:00:2f:55:75:
                    65:91:9a:2e:70:37:ce:b5:5b:cb:8c:5d:a2:e8:74:
                    24:1e:0e:ba:6a:1f:72:44:06:b6:93:45:17:9d:74:
                    f4:c5:fc:35:88:0b:e4:53:9b:3c:2f:00:79:9c:0e:
                    c9:e1:cd:c2:6d:38:31:0d:e8:4e:1c:c4:d4:9a:7d:
                    bb:bc:7d:a2:2e:a8:ba:00:4e:d0:e6:b9:62:f7:ae:
                    08:b2:6f:1b:9e:15:c1:8e:a1:f6:76:21:34:3a:78:
                    49:6b:c7:e5:08:64:76:c2:37:4f:03:83:69:ef:46:
                    99:55:d5:58:07:16:e3:7e:78:d7:67:a8:bd:1a:35:
                    08:96:64:bb:68:6e:0c:76:44:c6:9b:41:2d:8e:dc:
                    79:61:00:71:f6:69:99:54:11:2f:54:4f:70:4b:9c:
                    b0:de:59:f5:5e:aa:72:c3:05:45:dd:7f:e9:8d:97:
                    9b:c2:13:8d:c3:c6:46:00:3b:57:26:75:ee:31:d3:
                    aa:c8:ce:2c:d0:ca:a4:3a:99:aa:eb:a0:2c:ff:38:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:02:DE:A9:26:6C:0B:1E:11:80:B2:D3:0C:8A:05:A1:27:81:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/86802958-60b7-3f07-8c28-a0fc82712d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5a:11:5d:d5:db:2e:06:4b:fe:4f:89:57:da:9b:3b:93:34:
         df:59:4e:3b:31:ea:b5:d4:41:52:7b:65:68:a7:0d:8b:ba:d9:
         a5:c8:c3:b3:a9:8e:1a:8a:10:52:81:01:f6:a6:26:39:31:04:
         cb:ef:88:3f:7a:f4:5a:e8:e5:5e:ed:9c:43:7c:27:39:34:58:
         9e:68:4e:bd:2d:34:1d:b6:97:40:ba:48:86:4c:77:ad:97:1a:
         8b:43:d8:6e:49:71:ce:d9:5a:d8:fe:ef:36:e9:4b:3e:df:42:
         47:31:20:ca:a1:55:e8:d8:f0:66:3a:a9:2d:41:2d:3d:43:17:
         41:c8:86:3b:b4:55:71:17:61:a8:58:1c:62:1f:84:43:14:09:
         bb:d3:e5:e2:94:3b:21:97:db:c8:a4:3d:8e:75:61:ab:d2:44:
         b0:be:7e:15:40:17:72:56:a4:9a:24:f4:e6:c2:91:0f:ba:88:
         8f:8c:88:5e:e8:8f:d8:e4:d1:8d:1b:3a:b6:21:20:2c:6b:3e:
         ee:4a:36:7c:2c:ac:a5:0d:63:d9:3f:67:82:9a:e3:d8:53:01:
         37:91:1d:1d:5a:df:d4:a5:75:ed:30:2d:a6:24:15:b2:3e:36:
         0b:50:41:35:95:99:35:32:53:d3:a8:55:9a:6d:bd:32:25:8b:
         a2:3a:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:24:11 2026 by rpki-client