Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c7d22898-b12c-3add-b0fb-e4039a5eaccf.roa
File:                     c7d22898-b12c-3add-b0fb-e4039a5eaccf.roa (raw, json)
Hash identifier:          k9GyHCTrtNzX1bK37uRRmjFgLBf/GizBnzOtD9sdd/A=
Subject key identifier:   1D:B3:80:61:9B:B9:0B:2D:7E:EF:72:AA:CC:DC:0B:86:B5:38:C7:7F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059BC256E082648F68F38D00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c7d22898-b12c-3add-b0fb-e4039a5eaccf.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:c2:56:e0:82:64:8f:68:f3:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=54536a22-70e9-43eb-adc9-2c83d7cbda09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:d3:2d:97:dd:9d:50:71:d5:4e:ee:06:c4:
                    2c:44:cc:ad:a8:91:18:df:41:44:23:6b:7d:bf:b1:
                    c2:bb:46:57:1d:20:a3:62:b7:5b:1d:89:28:62:14:
                    36:7b:cf:52:40:25:88:22:4d:58:14:8f:7c:96:f9:
                    54:22:f9:ec:56:9d:1f:52:4b:f6:c5:b5:a7:af:58:
                    0e:0a:9f:93:f1:b6:20:c2:13:2c:c2:0b:82:f4:54:
                    0c:b7:54:96:79:e2:72:70:33:cd:95:0c:b8:e1:f4:
                    0c:0e:25:c8:9a:50:08:f1:04:fb:d8:6d:63:03:bb:
                    f5:42:a5:3b:fb:71:86:48:b8:10:42:45:52:b7:e8:
                    53:3f:04:9f:f3:5f:ba:ff:08:74:c8:a6:39:02:c3:
                    66:8a:27:c7:cd:f2:c5:fe:28:cc:d8:2d:f9:4e:59:
                    24:ff:7c:18:40:b0:9f:d1:dc:2b:cf:00:5e:7e:8d:
                    f8:60:85:4f:52:9e:73:90:5c:27:b6:9e:4b:3e:0b:
                    ef:a6:b0:a6:cb:10:87:1a:f3:27:cc:03:c9:e0:cd:
                    5a:83:5f:d2:be:1a:c7:5f:cc:7d:c3:47:50:c3:95:
                    21:c5:d4:ec:eb:b5:5f:2b:46:47:ff:a2:ed:59:0a:
                    16:ac:38:f5:07:93:a6:23:b4:f9:cd:9e:d4:16:99:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B3:80:61:9B:B9:0B:2D:7E:EF:72:AA:CC:DC:0B:86:B5:38:C7:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c7d22898-b12c-3add-b0fb-e4039a5eaccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:0a:41:7a:53:6a:93:76:37:8f:1d:1a:6e:71:49:ea:a1:
         62:58:a3:72:d3:d7:a2:75:03:b5:5c:3e:9b:8a:34:c8:10:6b:
         b2:1b:66:0c:8c:03:e6:b2:c1:60:1d:c8:15:11:8d:81:de:f1:
         1a:8f:22:a9:19:cd:ec:ad:8e:83:13:a3:d7:77:8b:1a:56:41:
         27:59:86:9b:c6:aa:9a:85:73:14:85:f4:c1:f4:19:8d:4c:c3:
         79:ab:3d:42:8b:4d:8d:f5:ff:29:80:07:74:b7:ae:ce:00:86:
         2c:70:4c:20:fa:77:5e:6f:e7:cb:7d:ae:71:95:ef:e0:b7:95:
         01:10:22:df:60:b1:a7:51:88:69:e8:a9:7f:42:e5:a3:40:64:
         07:d5:35:1c:62:61:4a:bb:d4:d9:af:1b:64:7d:26:9f:29:9b:
         21:27:a8:f4:ad:c5:ca:5b:26:3e:ee:c7:a9:39:ac:26:ec:cd:
         ea:52:dc:20:95:b2:a8:22:d4:39:94:7a:94:b3:50:20:97:40:
         71:ed:2e:1f:1c:dd:2e:9d:d9:8b:ef:01:e5:5c:65:be:74:a3:
         ca:53:21:a3:9a:03:f8:f1:31:d9:79:b7:3c:53:a8:6d:03:aa:
         71:b6:60:4e:e7:b8:72:2d:c9:ba:e1:55:d6:c8:eb:ff:c0:b2:
         57:95:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:35:21 2026 by rpki-client