Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0c96c42d-234b-33dc-ac09-63f4e3f2da5d.roa
File:                     0c96c42d-234b-33dc-ac09-63f4e3f2da5d.roa (raw, json)
Hash identifier:          1+O3r3fpObENasqH0J3Afnb4bdRyyQl2UlO7JE6pJEQ=
Subject key identifier:   09:21:05:AE:C5:1E:8B:1D:83:8C:8A:1C:0D:14:80:A7:68:38:7C:10
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497D130816A7CFF6ECCCFE80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0c96c42d-234b-33dc-ac09-63f4e3f2da5d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:13:08:16:a7:cf:f6:ec:cc:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1640c760-968a-449e-a6fa-c2a81391e2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:81:2e:b3:f3:25:b0:9d:cf:78:94:fe:79:b4:
                    c9:10:a2:31:77:54:15:e7:08:91:2e:e8:d6:72:b6:
                    52:99:a6:62:48:6d:5a:f5:13:c7:64:73:c1:00:57:
                    06:d9:78:c4:3d:1e:09:dc:58:e9:47:77:c7:81:7b:
                    1d:5b:3b:c4:af:fe:c9:3d:ce:cf:7e:97:bc:26:5d:
                    69:83:83:3f:4a:16:5b:28:81:56:d8:99:78:32:67:
                    3e:67:09:8b:dd:c9:35:8c:45:be:99:f3:92:28:10:
                    5c:57:46:1c:fb:b7:33:1a:79:18:48:7d:78:b1:dd:
                    6b:85:64:eb:ed:e1:a8:d2:d8:05:63:88:e8:96:e8:
                    bd:69:a6:9c:68:11:b0:f3:3d:06:f6:0d:ce:8a:1c:
                    a8:ff:0a:5f:49:33:74:30:af:ae:72:59:72:84:b5:
                    9c:bc:68:47:55:bc:4c:6c:50:2d:33:5f:a4:ad:b5:
                    45:33:64:bd:d9:2a:59:73:4c:4b:cc:72:5f:64:46:
                    b4:58:2f:68:e7:c2:ca:8e:fd:18:86:ae:09:f8:8b:
                    74:a8:86:bd:b0:2f:f2:e5:5c:31:b4:ff:fe:2a:a5:
                    87:28:0d:0b:19:44:bf:2c:61:b0:f9:fd:3f:36:b1:
                    63:6d:ba:2d:1e:e0:10:85:79:99:c3:5d:f5:a9:76:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:21:05:AE:C5:1E:8B:1D:83:8C:8A:1C:0D:14:80:A7:68:38:7C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0c96c42d-234b-33dc-ac09-63f4e3f2da5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:f8:ab:27:8e:7e:2c:ee:1f:70:84:61:34:a8:07:0f:8f:
         5e:6e:6c:69:3e:14:2d:bc:25:0c:1a:87:73:69:ae:a5:65:1a:
         5a:f2:e4:1d:6f:11:fd:57:77:59:f0:b5:f6:02:f1:a2:33:74:
         ad:48:08:2d:7a:ae:bd:5f:4a:51:ad:4d:bb:f7:ce:ef:35:9a:
         74:8e:19:f9:d3:dc:3a:5f:83:5f:66:92:d9:f2:a5:3e:5a:f0:
         dd:3f:4e:d2:24:90:e1:fd:56:bd:ef:c5:b9:e7:22:cd:60:d3:
         53:f0:23:74:a5:30:9b:fb:69:1a:8d:1c:b2:32:f7:50:b7:13:
         ac:90:0f:ea:df:d8:a7:59:6f:28:dd:c8:7a:c4:7f:14:c7:5e:
         69:7e:7f:eb:87:39:a2:d5:12:f7:94:27:5c:20:9d:f3:5b:e9:
         7d:fd:14:8f:94:c3:c1:94:01:f7:10:e0:9f:84:5c:57:f7:f6:
         08:22:f0:47:70:82:91:3c:6c:0b:5d:a1:27:ab:ed:4d:ad:8a:
         1b:39:3f:b5:30:0e:8f:1a:6c:f5:36:64:ca:69:dd:5e:24:66:
         19:d3:d1:9e:49:78:a9:d4:4e:c4:74:e5:f7:ef:ef:48:e9:1e:
         88:76:0e:16:77:cb:cf:dd:1d:13:98:f5:9f:71:88:19:5e:30:
         4f:da:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:40:42 2026 by rpki-client