Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa
File:                     340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa (raw, json)
Hash identifier:          lX+TYEjk/2Sov6r56SzVk0GXcuheW1/GlX39MZVF9Xc=
Subject key identifier:   A6:44:F2:23:D7:F1:78:5B:E2:A5:20:A4:38:E9:92:69:DD:DD:AB:26
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0E97EBF699B81792E1880
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:e9:7e:bf:69:9b:81:79:2e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=8a15e2c2-f831-4867-aea3-7c9cf90abace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:95:60:bd:58:65:e2:8e:f2:50:e6:f1:2e:
                    f3:62:f8:97:42:56:9b:b3:67:46:30:d3:56:8d:b0:
                    14:90:92:04:03:70:0e:d7:ae:d6:f2:0c:00:6b:1f:
                    bd:c6:1e:37:af:4a:00:83:40:22:3a:85:17:29:2b:
                    29:2d:8c:11:35:c1:81:b6:42:be:42:68:5c:8b:c3:
                    6b:68:56:00:63:3e:af:08:f9:84:3f:21:f4:19:90:
                    22:29:c9:5e:50:4b:81:8b:9a:fd:d8:7c:5f:a2:5e:
                    7c:76:33:7a:3f:aa:c4:2b:6c:00:92:b3:f9:de:52:
                    fb:6f:d7:e7:5c:1c:71:77:74:c0:d8:60:70:38:6e:
                    f3:66:21:c1:15:12:ee:f8:5b:fb:74:57:20:92:12:
                    fe:28:78:42:6a:75:41:62:c2:dc:0c:04:e5:94:5c:
                    d5:1b:7a:f3:ad:46:32:44:5a:74:1e:a6:c4:07:76:
                    c2:6f:04:a5:59:fe:b9:db:00:2d:03:cb:39:f0:80:
                    0c:d7:8e:72:c6:8a:79:6a:37:db:fe:a8:bb:35:47:
                    9b:c2:72:e1:fd:2d:22:65:ef:c2:66:91:6f:84:15:
                    f4:24:58:d9:71:77:7c:6c:c2:0d:52:b1:59:ac:2f:
                    64:60:56:2e:2a:d0:79:ad:e3:d2:7f:96:89:71:29:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:44:F2:23:D7:F1:78:5B:E2:A5:20:A4:38:E9:92:69:DD:DD:AB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/340d84a5-9f7f-3a63-9d29-c3d2d4594aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:5a:9a:17:cb:6c:88:a6:a8:3e:2f:e8:44:99:38:f7:e6:
         e1:60:fe:42:e3:ea:28:7a:c4:ee:8e:17:f4:91:9b:a0:14:ab:
         0f:1b:4d:39:9a:21:4b:e0:7e:49:58:99:ec:59:1e:a0:24:63:
         6d:3c:05:99:de:59:30:81:6e:12:9c:df:bd:23:19:76:5b:c0:
         a7:79:1e:d4:94:e7:0d:2f:ef:42:cf:34:cc:f0:7d:15:f5:5f:
         a5:e7:ae:7a:7a:61:24:55:84:1d:14:0d:11:1d:d6:35:16:ea:
         40:c4:97:4b:4d:7b:8b:13:f3:1f:35:05:01:38:6b:1a:74:5c:
         a3:51:5c:42:6e:be:db:1e:1a:f7:65:11:a8:d5:56:28:1b:af:
         45:e5:82:2d:47:65:c7:bc:df:35:5a:7c:0c:27:2e:08:41:d5:
         1d:05:12:eb:83:6d:c3:58:ba:f0:51:f5:a5:7d:88:4a:b1:ca:
         be:7e:a4:f7:3b:08:90:d1:c6:5f:12:ee:0c:12:aa:82:0f:10:
         fd:6f:a6:41:01:38:d1:89:04:86:7d:03:b9:42:0e:49:88:67:
         d4:f1:b8:62:13:04:c7:7e:6d:a9:d2:a8:3b:53:d1:c2:54:39:
         64:a6:bd:02:8c:26:4d:f5:2c:1a:31:ad:5e:79:0f:d3:09:ae:
         25:0f:a3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:21 2026 by rpki-client