Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d27695a-73c7-3751-bc92-207e66c57da9.roa
File:                     8d27695a-73c7-3751-bc92-207e66c57da9.roa (raw, json)
Hash identifier:          6Ko/Q5G3kOZhFzLgUAV21Pkkvds0PRYwg65MvyqqIew=
Subject key identifier:   CE:9A:D4:6C:30:2E:55:74:01:B0:AC:09:61:37:DD:6D:9C:C6:6F:D2
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059C3F0BBDD7384768E2B100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d27695a-73c7-3751-bc92-207e66c57da9.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:3f:0b:bd:d7:38:47:68:e2:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=340d843d-49ee-4cfe-9dc8-f540b1850e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:62:fa:20:91:f0:4a:d0:48:f1:fc:be:7c:
                    3e:85:b8:26:11:58:96:7e:79:70:f4:46:61:85:3a:
                    94:01:2d:b2:17:25:f5:1d:8d:a9:51:aa:aa:bc:59:
                    78:10:04:66:57:5e:33:91:5a:9a:d1:b3:f0:0a:e9:
                    b2:09:c3:33:72:46:de:80:e6:ce:93:e4:85:00:d0:
                    89:13:b6:18:b6:e6:08:10:f3:99:66:cb:39:e0:f7:
                    03:17:c2:fa:57:67:08:43:0d:49:08:e4:57:f5:0c:
                    42:1c:0b:e0:5d:3a:d0:a6:30:67:81:be:5e:00:56:
                    f6:76:4a:8d:31:fa:50:5b:83:43:12:ef:9f:33:2b:
                    b5:34:9a:34:96:12:6c:be:72:3c:90:3f:3a:21:5f:
                    3b:7f:16:aa:f6:4d:b9:44:93:7b:ce:f8:17:61:98:
                    10:fa:5a:ca:57:25:14:33:a8:f8:a6:a4:3c:d9:7a:
                    79:65:d7:a0:df:95:be:31:84:1c:a1:9b:2f:8e:d1:
                    9f:52:da:2c:91:ae:fc:59:d6:27:9c:10:90:aa:df:
                    d3:62:40:09:74:71:0b:75:c0:fb:0d:4b:66:41:2d:
                    84:25:67:0e:3b:40:9a:6f:a2:26:0e:c2:e2:6f:2c:
                    77:b8:0c:44:0d:ec:ce:6b:c5:41:36:4b:ec:a8:4e:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9A:D4:6C:30:2E:55:74:01:B0:AC:09:61:37:DD:6D:9C:C6:6F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d27695a-73c7-3751-bc92-207e66c57da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:2d:dc:ad:87:41:37:cd:34:49:a5:57:5a:d2:5b:4b:65:
         d6:8a:b5:9d:ec:46:8f:41:83:5f:9f:37:94:5d:66:a2:8c:41:
         ca:1a:19:b5:0e:50:3e:89:0e:85:ce:8f:46:aa:97:54:74:5d:
         79:96:6a:a2:8b:d1:b5:c6:a9:94:54:f1:d8:56:9f:68:08:d8:
         75:b6:f6:63:45:f0:67:59:69:5a:01:39:cf:5c:26:4b:0e:80:
         bf:20:23:dd:20:b7:33:ec:c2:72:2c:e7:e0:ed:56:cf:ed:c8:
         68:2b:d6:fe:ce:ac:90:48:f6:a0:41:af:c6:91:36:53:ae:b5:
         bb:54:65:8f:7e:36:90:74:a1:6c:22:83:55:49:2c:51:66:78:
         41:d9:5d:fa:d9:b6:5f:b5:93:c2:d6:f8:66:ff:36:49:21:8f:
         5d:cf:58:4b:01:91:cf:ab:6a:ac:d1:a6:e5:a0:a5:f3:54:7f:
         5b:a6:a3:92:f2:3e:78:15:2c:b0:f5:72:2b:3f:97:48:e6:21:
         79:f5:72:10:84:3b:35:44:2a:cc:b9:e6:c6:a2:7d:48:c4:51:
         4b:92:a3:92:f7:ed:7d:9c:ed:49:fd:7d:c4:1f:13:17:15:cd:
         31:23:11:92:1c:b6:cb:ec:12:db:bb:4f:24:ed:94:b8:7e:e4:
         40:4c:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:37:43 2026 by rpki-client