Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2af689b-f051-3307-bf96-ed2e990c49fd.roa
File:                     b2af689b-f051-3307-bf96-ed2e990c49fd.roa (raw, json)
Hash identifier:          W/8PRP3ghdr8r1zr6Y85pS6446oc5Q2/XkuYiVFdu0A=
Subject key identifier:   C4:4C:08:86:67:1A:D8:3F:41:62:1B:B9:05:F8:2D:C3:5A:49:C2:F1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059C4242A226B52CA1255A40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2af689b-f051-3307-bf96-ed2e990c49fd.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:42:42:a2:26:b5:2c:a1:25:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=4590c046-8abb-4b23-8c8d-921a4549731b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:66:a5:a5:c6:1a:44:2a:48:7e:c5:5f:e7:
                    c7:d5:a5:e2:79:49:51:e3:31:89:e3:b7:c3:c8:a8:
                    9d:e5:e5:5e:f0:7e:75:43:21:06:6a:39:90:b9:31:
                    38:1e:55:72:f6:25:cc:c2:2e:94:ee:b0:f2:a5:fd:
                    e1:92:9f:05:d2:c6:27:85:64:12:78:c9:1a:94:6b:
                    64:af:32:84:fe:30:3a:b7:b1:f8:cd:15:57:63:d4:
                    b8:cd:96:3a:95:f6:b4:9d:e8:13:2d:1d:26:46:ed:
                    9c:7f:b8:45:ed:0c:e2:48:a8:01:4c:d1:72:31:87:
                    a1:09:2a:8a:c1:b8:cd:bb:a8:4d:67:85:8b:b7:ef:
                    a8:b5:c1:ae:24:48:3d:68:42:c9:4b:c8:4a:bb:ca:
                    c4:4f:93:e0:65:95:1b:9b:49:eb:b7:c4:56:02:45:
                    02:4d:a0:c1:90:70:ac:02:e3:09:b7:16:0d:18:0d:
                    0d:06:9c:37:ad:66:16:db:49:65:e7:52:9f:98:79:
                    46:ce:a9:14:1a:e3:c9:62:0c:0b:f3:9b:c1:26:02:
                    62:f6:aa:25:6a:1a:03:a1:f6:86:18:76:65:f3:d9:
                    d0:2e:17:c9:c5:90:56:56:f1:ef:c5:09:71:f3:11:
                    a9:c0:ec:58:e3:84:3e:17:f6:b7:61:7d:c6:db:aa:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4C:08:86:67:1A:D8:3F:41:62:1B:B9:05:F8:2D:C3:5A:49:C2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b2af689b-f051-3307-bf96-ed2e990c49fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:25:d3:89:13:49:cc:e3:eb:29:69:cc:fd:a3:07:6e:7f:
         42:76:dc:f0:d3:e3:70:70:0d:eb:04:ec:e4:91:ba:38:14:19:
         d5:85:b4:09:ed:56:6b:f3:7b:09:25:db:93:43:f5:64:7b:90:
         e5:d6:bd:ee:3e:01:34:5f:c2:78:71:49:4f:2a:24:11:50:3d:
         ed:d8:26:5c:fd:b4:3e:b9:a7:90:86:d2:a7:74:55:dd:69:ad:
         f7:f5:b5:b7:c2:61:e7:5f:9d:ed:52:64:8c:62:5a:05:80:c8:
         93:12:52:5f:27:f5:6e:9b:18:f6:ee:72:ab:6f:27:a7:01:db:
         23:7c:82:f9:17:64:a6:fb:f2:3f:3c:ee:c9:6c:00:d1:33:60:
         48:6f:67:f0:bc:1f:23:01:0c:49:5f:28:2c:14:88:18:db:b4:
         cc:64:cc:b2:b3:2a:d7:cc:5e:13:f3:cb:59:9d:c1:3a:93:98:
         03:5e:35:22:c2:63:75:3d:b1:d4:5b:db:53:43:db:a7:46:6e:
         0f:17:91:c1:66:59:d9:4e:e8:d8:36:c3:da:b8:c7:ec:cf:ec:
         a8:a3:a2:5a:07:cd:c9:d5:bf:40:eb:59:ec:6b:0f:a0:d0:c1:
         f7:62:13:aa:76:60:1b:56:e4:a5:e9:71:52:74:cb:2c:29:63:
         bd:66:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:43:28 2026 by rpki-client