Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa
File:                     a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa (raw, json)
Hash identifier:          jnQb6nfnpgsyxoX8f0QOjNPM0B2S3LkwfFMwvl5i4rw=
Subject key identifier:   6D:EA:9B:3A:20:CB:85:2E:0A:14:F2:63:59:D8:21:3A:30:60:50:00
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E0005ECEECD9C9DFA10C3B780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:ec:ee:cd:9c:9d:fa:10:c3:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=4b966930-a05d-4fda-ba9c-12e83d94a86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:7c:c5:54:04:c0:1d:38:9d:ac:8b:d7:6a:
                    d8:1b:56:94:95:ae:60:e4:1d:e5:f9:38:77:ce:43:
                    d5:54:ba:c0:cb:2f:19:fd:45:e2:22:cb:a9:9c:4f:
                    13:c2:fc:65:ce:0c:e8:07:dd:c1:98:9a:fb:62:37:
                    81:9e:f5:f4:9d:29:29:95:1d:5f:22:a3:77:ed:a1:
                    fe:51:3d:65:60:65:f0:2b:45:41:b3:6e:dc:c0:cf:
                    7b:27:b1:a6:cf:d0:4d:30:7d:2e:75:9e:bc:0b:9f:
                    cf:aa:b8:cc:fc:11:5a:57:63:77:e3:76:8b:b8:43:
                    f3:63:5a:3c:d2:20:0e:a2:a5:06:68:2a:b4:97:ac:
                    f4:8c:cc:d9:6f:34:1f:1a:87:32:2e:20:3f:98:6c:
                    71:5c:ce:1a:8d:9d:8f:fe:5a:d3:bf:38:24:50:51:
                    6c:1a:ce:f4:4b:6e:64:b6:32:ee:a5:3d:3e:1d:99:
                    ea:f5:b9:e0:a0:82:00:a9:89:23:ef:45:84:8d:63:
                    1a:0d:4d:ac:77:d0:72:7b:52:d8:bc:c5:87:50:9d:
                    d4:77:7c:1a:aa:ba:a3:b3:b1:af:fb:e0:cb:71:e1:
                    26:f5:cb:90:9a:fb:6a:89:f0:e7:85:b4:6f:3e:69:
                    54:39:10:af:a1:b7:de:2d:e1:df:1d:bc:ae:6f:5f:
                    a7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EA:9B:3A:20:CB:85:2E:0A:14:F2:63:59:D8:21:3A:30:60:50:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a8b6fc78-6a0c-3066-a32c-a9edb47f5a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:76:5e:33:63:36:55:90:aa:04:22:c5:ec:f3:67:d5:e9:ad:
         1c:97:bd:dd:01:b2:8d:68:36:55:56:02:89:03:dd:19:f0:f2:
         63:5e:3d:d3:c1:fa:91:6b:5e:59:87:97:76:bd:d5:7a:5d:3b:
         b0:33:70:1d:c4:87:cb:ec:46:ed:6b:0a:15:84:b4:77:7d:2e:
         42:93:54:2f:f4:b1:3e:7f:15:24:de:f0:f2:48:d7:cb:76:ef:
         7f:2f:38:7d:c0:04:ce:25:c4:f3:89:44:9f:17:79:89:8f:5c:
         63:2b:bc:8b:97:26:db:88:bc:f0:89:64:c0:7d:a5:66:3e:d5:
         79:1f:77:a2:95:72:9f:8e:f1:f0:e7:5a:3c:31:ed:00:d8:8f:
         49:0d:73:ba:a8:0d:eb:82:b7:00:4f:82:f3:d1:d6:23:70:5c:
         c7:eb:47:1e:bb:00:97:94:db:86:41:1d:ec:50:eb:41:ff:88:
         75:97:4b:59:34:23:b2:1b:b7:ce:08:a6:bb:ec:4c:30:85:0c:
         a3:49:ea:b1:7b:2e:99:64:60:ad:9c:b3:ea:ee:e9:d2:68:29:
         f8:8a:a3:15:d6:03:77:90:96:cc:32:4c:f5:88:d1:ec:f3:3b:
         a9:0d:fc:91:77:a6:4d:b2:bd:82:81:2b:1a:a3:b5:e3:c8:a8:
         5a:56:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:55 2026 by rpki-client