Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e0eb5fae-f64d-315a-a219-97d6c298f1e3.roa
File:                     e0eb5fae-f64d-315a-a219-97d6c298f1e3.roa (raw, json)
Hash identifier:          Iumv2t7XGQW/PT07W/SWaa+KaqtUDSvtjUljFa24u8g=
Subject key identifier:   30:B7:7A:E0:4B:04:A9:DD:89:79:7F:C3:35:35:58:59:BD:62:61:FE
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E059C456F4701BEB19D2DDF00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e0eb5fae-f64d-315a-a219-97d6c298f1e3.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        136.22.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:45:6f:47:01:be:b1:9d:2d:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=9e060d0f-3f15-4bb9-91cd-6249cf42540c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:71:02:3e:8f:22:9e:c1:4e:c1:27:dc:ac:
                    46:58:57:3d:bf:f1:d3:7b:fe:20:60:10:e3:96:53:
                    51:59:6f:67:41:a5:37:a3:0c:56:2e:08:0c:5b:f0:
                    99:c9:89:e0:52:e7:5b:70:ad:27:86:2c:0e:a4:84:
                    7c:35:b9:20:e9:98:0d:f3:f4:1e:b8:f9:c0:a4:29:
                    10:c3:fd:89:57:64:16:b4:b5:48:b7:be:78:6e:8e:
                    cc:8f:ac:b7:30:78:f4:be:03:5c:5f:82:16:a8:06:
                    3f:dd:c1:25:01:a2:0f:69:ca:8c:a3:f5:c1:78:86:
                    39:89:2d:a4:28:f4:05:68:85:ed:e6:81:93:ea:8f:
                    9e:ea:95:67:78:e5:ff:01:cb:04:93:75:27:e1:29:
                    92:00:dc:72:09:75:39:8e:66:10:27:f3:46:bc:1a:
                    04:72:c1:a9:d3:cd:88:d5:c6:51:f7:b9:cc:b7:9f:
                    5d:60:d4:17:37:d4:1b:6c:17:e1:97:eb:2a:a3:c1:
                    60:56:d6:93:5f:d2:cf:14:2c:ac:01:06:74:2d:ea:
                    8c:b2:f5:d2:96:8c:75:c7:8b:9e:34:73:54:d3:a0:
                    49:50:f1:3f:49:bc:0c:85:76:62:12:83:e9:e7:7d:
                    b0:11:23:86:36:db:ec:ad:29:c5:4d:dc:5d:38:23:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B7:7A:E0:4B:04:A9:DD:89:79:7F:C3:35:35:58:59:BD:62:61:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e0eb5fae-f64d-315a-a219-97d6c298f1e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ac:a8:0b:f7:3a:7d:41:5f:a6:fb:50:30:06:65:bd:e8:18:
         49:1f:10:ce:bd:86:12:03:1e:1d:6b:38:08:d5:14:7c:c9:08:
         d6:87:ae:77:a8:ee:94:36:7d:17:52:d6:cb:7b:b1:0d:3b:7f:
         42:2c:46:c8:4a:01:e9:93:54:88:55:2e:c2:3a:f1:2f:41:c5:
         48:0c:b6:41:f9:fd:2f:1d:00:fe:c2:65:55:4e:23:19:75:c3:
         dc:f6:14:1e:a6:b0:ea:16:c9:87:f7:64:89:ed:fc:ec:c2:1a:
         98:a7:99:06:51:cb:b8:28:be:42:ad:ad:14:93:fe:24:ff:e9:
         30:c1:93:4f:75:56:03:fc:bf:03:e6:bd:c2:c4:d7:f6:e3:eb:
         23:97:20:e5:44:44:4f:d6:9d:6a:11:cc:5c:2d:c7:b7:21:a6:
         25:15:e9:9e:da:0b:42:f2:c0:90:4f:a4:6c:39:f6:cc:57:b4:
         e4:dd:3c:f2:f4:f7:13:b1:83:1e:bf:97:41:89:ac:bd:3b:6f:
         6f:f9:a8:e5:e8:0f:cf:22:d8:12:14:39:de:88:45:ca:46:30:
         4e:fe:2d:4a:ca:00:4c:df:08:02:a3:6e:96:a4:1b:25:b2:56:
         1f:d8:8a:e1:dc:02:4a:dc:13:4e:5d:c1:73:24:dd:de:2b:3a:
         45:38:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:13:21 2026 by rpki-client