Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa
File:                     00254be6-db70-327f-95c7-76419c22955d.roa (raw, json)
Hash identifier:          u3qX9ui8RRRWMyyKogX9iaPj/bYqjQeqvMMauaF7620=
Subject key identifier:   C2:16:4D:B4:A5:7A:09:85:3A:BC:C1:E8:5A:62:AB:79:52:D6:E4:2A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F4984E2EA175EDBD8FA8F6180
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:e2:ea:17:5e:db:d8:fa:8f:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2068d31e-b0f0-42c0-ab78-6d0aae30168c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c8:91:0f:6d:c1:da:e1:b1:64:11:84:dd:d7:
                    37:b0:5b:b0:94:8d:6a:75:56:1e:71:44:85:45:37:
                    39:e7:0a:ee:b4:52:b4:c3:70:9a:e2:d9:6d:b3:41:
                    31:1d:46:60:02:98:bf:c0:9a:ae:68:5c:56:80:a1:
                    65:c2:ca:60:dc:34:48:53:3a:09:86:a6:2d:20:5f:
                    29:08:fb:f2:d5:b2:fb:a5:18:70:5c:74:1a:8b:74:
                    84:38:76:c1:0b:19:fa:7b:cb:f7:78:30:70:be:88:
                    c7:64:c6:5e:67:5c:22:5b:4a:07:e3:ed:8f:25:e6:
                    44:55:00:05:18:69:c7:3a:d5:12:c1:2a:2e:28:51:
                    53:b0:7c:cd:0d:86:ff:9d:1b:04:eb:dd:1c:1e:aa:
                    e9:22:6e:ee:92:07:44:64:bf:62:29:62:4d:4b:f2:
                    04:b7:18:c9:a2:ef:4a:99:0c:c4:27:b2:72:67:b2:
                    ee:b5:cd:91:41:bb:74:46:c8:1a:92:3f:41:fc:4a:
                    94:e4:ed:0f:d5:f0:57:10:45:2e:62:d8:e0:6f:ba:
                    78:8d:f7:f2:08:e2:f5:54:d1:6a:4c:b5:08:90:80:
                    85:0a:84:5d:d0:03:14:0a:c4:d3:0a:98:cd:f2:b9:
                    4e:57:84:07:8b:7f:df:a0:57:c4:e5:7b:90:9c:78:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:16:4D:B4:A5:7A:09:85:3A:BC:C1:E8:5A:62:AB:79:52:D6:E4:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:78:79:b2:b2:f7:f2:57:47:50:df:16:7b:a8:fd:a8:a9:d1:
         1a:03:e6:84:e0:9d:af:46:f9:55:42:2e:34:7b:be:93:07:3a:
         80:8b:8f:bc:88:b0:93:2e:1e:88:e5:f3:c3:2c:1c:f5:fa:c2:
         e1:1d:b1:57:69:95:86:f6:3e:ad:37:12:75:06:15:c3:5f:f0:
         dd:3f:a6:1c:77:71:0b:fc:5d:e7:72:18:5d:cf:fa:37:66:78:
         63:dc:28:70:53:78:e0:23:13:ee:d9:77:f8:21:01:23:55:ea:
         a6:20:ba:55:29:4e:6a:25:97:ba:20:37:c3:76:17:39:b0:bc:
         2d:21:be:29:c4:36:44:ca:93:c8:1d:11:d4:a4:53:22:b1:c1:
         ac:8e:ec:cf:b6:94:69:1a:bb:f0:b8:0b:06:ad:d4:a7:48:5f:
         df:49:56:fc:77:67:1f:1f:11:5b:43:1a:28:b8:b1:7a:fc:1c:
         b9:ac:ca:e8:9d:72:c8:df:9c:7f:10:55:9c:cd:2d:1c:15:be:
         07:b9:62:07:0f:79:48:f5:2d:6a:8b:4c:e4:42:64:f3:00:04:
         ac:71:cf:8d:f1:52:a9:94:38:50:d0:cc:37:72:82:03:2a:33:
         b9:6b:df:0e:71:3d:32:54:98:8d:81:3c:68:1c:72:b0:0b:f7:
         c9:41:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:49:10 2026 by rpki-client