Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/13a9ff0c-7c48-32d9-a748-2018a7af637a.roa
File:                     13a9ff0c-7c48-32d9-a748-2018a7af637a.roa (raw, json)
Hash identifier:          jW2vE7nS181VGzHgzEEGJwVqP+AYtzYZXn85BxqT4fI=
Subject key identifier:   27:AE:FA:B6:5E:7E:00:3F:A4:D9:4F:5F:BB:24:F6:17:7E:6B:55:D7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E04A0407BD9BEF2730A840
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/13a9ff0c-7c48-32d9-a748-2018a7af637a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:4a:04:07:bd:9b:ef:27:30:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=57aa11d5-129e-4997-82f8-eaa03ed031f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:11:7d:fe:54:3d:4b:af:76:4a:43:7e:d8:3d:
                    6e:c5:21:c0:fa:2d:c3:94:96:d3:e7:69:d6:fd:49:
                    b6:ba:78:ef:d8:c0:f8:ee:cf:ad:ea:94:7d:69:f9:
                    de:c4:00:1a:34:99:33:69:f1:0b:f2:ef:4d:5f:65:
                    c4:7d:68:f4:79:29:1e:38:18:86:cc:22:c5:b0:68:
                    b7:17:de:65:3d:2d:e2:79:e1:71:75:3f:78:54:d1:
                    ed:98:0c:cc:c1:59:0f:ca:a1:2d:7f:cd:e3:eb:8b:
                    20:20:a0:d4:63:e0:36:2c:1b:d0:d7:a5:26:f1:f9:
                    d1:2a:3f:62:fc:93:77:40:1e:87:bd:2e:f2:94:20:
                    72:69:89:c8:b4:9a:ca:2d:9f:4d:90:aa:f4:c2:9e:
                    3b:11:ec:17:d3:7e:73:f9:52:83:76:e4:5c:5b:b7:
                    cb:ce:29:b8:fd:eb:ba:5d:ad:7e:3c:a1:5b:87:45:
                    50:e4:9b:e2:52:6f:fc:46:85:a4:4e:43:09:42:93:
                    67:9b:9c:f9:5a:cf:c3:11:ae:3e:c0:d7:9d:74:1e:
                    47:75:27:93:7b:d2:db:eb:61:97:a5:6e:c8:ad:e5:
                    59:b7:35:f3:0b:59:b2:3c:4e:a4:f9:7d:25:2f:bb:
                    c7:3f:55:d8:f8:d5:ee:28:2c:21:69:fb:b0:ac:6b:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AE:FA:B6:5E:7E:00:3F:A4:D9:4F:5F:BB:24:F6:17:7E:6B:55:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/13a9ff0c-7c48-32d9-a748-2018a7af637a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:8f:46:c1:2c:0c:f9:5b:05:02:86:c6:82:f9:58:ad:b3:
         f4:c9:e6:3a:bd:2c:dc:91:0d:04:5d:18:39:93:ca:11:fa:2d:
         80:c1:72:6e:ec:e3:c8:a6:ca:13:e2:d9:90:71:66:e3:a1:15:
         a5:67:74:8c:c7:f3:5b:a6:09:c5:f2:66:14:69:06:c7:6d:bd:
         9e:a5:b4:e4:2d:14:77:f1:d4:09:e6:18:a4:3d:e9:82:34:d2:
         26:1d:85:89:6f:c6:29:77:6f:38:b6:e8:43:70:a6:25:a2:f9:
         d0:79:2e:aa:c1:7e:9f:da:e2:75:35:ca:41:f6:1b:32:1e:21:
         3c:09:33:ad:cc:0a:66:81:49:d8:70:88:09:b8:36:7b:a8:90:
         6c:4a:7b:6d:f8:2e:bd:4c:4b:e4:ff:b0:ff:00:ce:a3:b1:50:
         4a:2c:37:af:1a:50:5b:d0:35:be:a3:e6:44:90:61:58:c9:74:
         e8:b5:ac:2f:ff:5b:85:db:93:01:4a:3b:09:94:57:23:99:e3:
         93:ca:b8:c6:a0:bc:1c:35:af:b1:62:e3:0e:e6:c2:5a:d2:46:
         7e:4a:0b:be:c2:e1:9c:f8:68:f5:4c:18:a4:99:fa:91:f8:ef:
         21:cf:49:dc:cf:f6:83:f1:80:f3:95:cd:a2:f5:f4:3a:01:80:
         c1:34:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:07 2026 by rpki-client