Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d3c13d76-cbb9-32a5-8171-dcca1c2efea1.roa
File:                     d3c13d76-cbb9-32a5-8171-dcca1c2efea1.roa (raw, json)
Hash identifier:          VNTEXAnLwe1oigbYR3x3+zVuou+VS8rAKMTsgtE+f74=
Subject key identifier:   D3:7E:8D:69:0D:C8:FA:DA:59:C7:51:B1:CB:C8:8B:56:7E:F5:33:0E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E0005F36BCB4058FBD6166A80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d3c13d76-cbb9-32a5-8171-dcca1c2efea1.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f3:6b:cb:40:58:fb:d6:16:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=cc47639f-a0e0-48d3-83e9-376b3a5c3a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b0:8d:44:23:9c:f7:a5:ee:a0:70:2a:cd:b8:
                    04:b3:26:37:f2:77:d1:9d:17:6d:6e:38:78:b8:b3:
                    a4:3f:af:fc:49:e1:d3:2b:fa:e4:4d:8e:9f:cd:7d:
                    c3:84:67:b6:23:2d:72:30:df:cb:b9:18:b6:38:62:
                    27:d4:2d:dc:18:88:a3:73:0c:1c:31:5c:8f:eb:b1:
                    14:ae:63:97:62:7e:2b:f2:6d:47:a9:7a:c8:e3:ad:
                    27:b2:68:d3:35:be:99:19:cf:93:00:c1:72:87:f9:
                    b0:db:c7:c2:51:5d:62:99:6f:04:89:1c:34:3a:70:
                    91:4f:bf:1c:71:41:36:49:d2:73:8c:81:ed:a2:87:
                    95:8f:da:d9:f1:39:7b:ae:a0:b6:12:37:9b:f1:a3:
                    1b:82:00:da:e7:1c:ae:16:83:5f:8a:7f:0e:25:df:
                    c2:c2:23:ef:a1:b5:36:57:a5:26:a8:06:e8:10:f6:
                    0e:b0:07:d5:ab:21:7e:87:a1:ea:53:37:26:5b:31:
                    02:d7:69:36:f9:a2:19:bf:dd:b3:20:cb:f2:2d:0f:
                    e1:61:bb:3b:c3:a1:87:22:1f:85:85:e1:04:8a:53:
                    92:16:36:c2:c1:b2:d5:9e:7b:06:6f:94:ea:98:16:
                    70:49:35:9e:08:01:5e:6b:c9:ff:8d:6c:d9:a5:e8:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7E:8D:69:0D:C8:FA:DA:59:C7:51:B1:CB:C8:8B:56:7E:F5:33:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d3c13d76-cbb9-32a5-8171-dcca1c2efea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:2a:0e:73:86:f0:08:b6:d5:1d:d6:74:97:99:e5:75:15:
         1f:ff:a5:62:fd:c3:7a:2d:16:5d:ef:3f:b6:1c:b5:d3:f1:ba:
         0b:87:bf:9f:14:eb:89:ad:a0:89:ea:7b:dd:ab:71:f0:2e:87:
         13:d4:d6:e2:37:05:74:48:63:25:48:80:c9:5c:29:40:98:b2:
         58:3c:a8:c7:5d:88:c4:51:5c:60:df:e6:70:02:c3:25:98:fb:
         87:c4:79:b9:08:30:a3:20:44:ce:3f:62:60:9c:f3:61:86:58:
         72:c0:21:80:30:ba:a2:df:26:ac:91:d1:5c:8c:98:32:20:09:
         4c:db:d8:91:57:6f:03:8d:a9:38:12:e5:9f:ab:10:d6:f3:aa:
         c9:c1:47:a1:9d:87:8a:06:c6:ea:e9:4b:79:e9:8c:17:49:7e:
         6d:75:36:59:da:a2:f8:9d:61:e7:75:f9:ff:1e:db:1a:5f:5d:
         5b:ad:c2:fe:f0:34:35:4b:74:20:33:d1:28:30:c8:1d:f4:97:
         4b:a3:cb:4a:d7:e6:ca:15:4e:64:e7:67:90:27:b5:61:dd:3a:
         af:f8:78:0d:95:c2:92:75:e1:c4:30:cc:3f:69:cb:4e:c5:16:
         c9:2b:ee:b6:5f:40:0d:ad:5f:56:42:dc:f9:7b:90:7b:d1:11:
         bf:a1:00:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:20 2026 by rpki-client