Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa
File:                     38637c89-cc87-3358-8ba2-8284fe77e03e.roa (raw, json)
Hash identifier:          KNsuDXU6acLJozJGHAD1OIDI8mGfxW8iVNAoSmddqp0=
Subject key identifier:   C6:1E:AF:67:6D:4E:CC:48:4E:D2:FC:DA:88:15:C2:C6:FE:6A:E8:81
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0E900FDB5BE2C27877980
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:e9:00:fd:b5:be:2c:27:87:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=cfaa0cda-8b5b-43ff-8342-0a9bc9d881b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:18:d2:50:ad:f9:70:91:b5:ea:61:f8:67:
                    5a:db:df:d1:e0:58:00:85:c4:1a:85:37:75:f1:60:
                    35:8c:ce:d9:c9:45:63:4f:16:66:dc:98:76:1e:dc:
                    a9:8a:9b:62:e3:65:71:45:79:fb:81:3b:13:f5:22:
                    d4:c9:ee:0c:a3:21:a4:c6:f8:3a:84:26:12:3a:b4:
                    41:c4:5f:21:ab:e4:d9:38:80:6d:b5:61:bf:b6:a2:
                    c4:14:27:48:f9:f3:0f:31:6a:9e:f0:6a:65:de:c9:
                    0c:9c:88:f6:a1:27:fb:74:01:48:bf:f6:06:be:2e:
                    b7:20:45:ea:4b:55:64:89:09:62:ad:fd:5a:57:e5:
                    1a:e4:24:8c:b9:83:5e:36:3e:b8:02:01:24:f2:9f:
                    61:89:d4:eb:bd:b3:ec:4a:1f:b8:6d:26:9f:74:c7:
                    b6:a6:bc:04:c9:69:75:86:56:d4:d0:c3:8c:51:6b:
                    fb:da:3f:f3:82:b2:ad:6c:38:22:11:54:2c:00:b9:
                    d6:f2:73:b7:88:a9:41:38:d0:38:85:e8:a2:83:39:
                    84:a4:8d:05:a2:2c:86:61:36:d6:24:e9:97:0e:e1:
                    54:f1:7b:73:62:0f:bb:a0:ed:57:00:12:7a:95:d3:
                    dd:07:76:bc:cb:89:64:89:a9:ee:62:44:3f:77:84:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1E:AF:67:6D:4E:CC:48:4E:D2:FC:DA:88:15:C2:C6:FE:6A:E8:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/38637c89-cc87-3358-8ba2-8284fe77e03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:aa:99:f0:0b:41:d6:42:dc:4a:20:0b:b7:49:bf:a9:00:
         da:47:f1:2d:ff:4c:9a:36:ad:a3:37:9d:f8:41:52:fc:23:70:
         bf:ec:0a:df:51:a0:67:d4:9b:5e:27:b9:b8:62:64:06:82:a2:
         b6:46:63:9e:9d:6a:fe:37:3b:b6:b2:5c:40:0e:2e:10:bd:ea:
         20:b1:9e:9d:03:7a:6e:c9:2e:a3:d0:d7:0d:65:27:61:5c:c8:
         87:7b:df:ea:8f:8a:f4:3c:48:b4:c7:d0:e3:f3:79:f7:0a:a7:
         b1:28:51:d9:87:07:b8:70:fe:bb:e3:00:0e:58:a1:a4:33:1d:
         19:0a:5f:09:e2:fb:1f:fb:64:2d:df:6a:f3:44:f1:1a:71:af:
         95:d6:53:fe:92:ea:d8:ac:c0:d0:ed:83:75:cc:c4:e7:ab:ec:
         a1:5a:0e:98:62:27:8b:69:d0:2d:c9:e1:cd:9f:b6:62:93:9d:
         f9:c1:47:83:49:04:d6:ea:ee:25:f2:f7:01:24:38:f2:70:16:
         b7:de:7f:52:b4:01:17:19:4a:6a:f9:8e:34:d0:c9:76:95:d6:
         13:5d:77:95:eb:a9:6d:1c:ff:ba:e4:74:62:b1:09:26:31:f6:
         13:85:6b:f6:69:9c:86:76:51:1b:74:e7:ea:b5:e6:f8:98:8b:
         81:6b:72:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OkA/bW+LCeHeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
Y2ZhYTBjZGEtOGI1Yi00M2ZmLTgzNDItMGE5YmM5ZDg4MWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9QY0lCt+XCRteph+Gda29/R4FgAhcQahTd1
8WA1jM7ZyUVjTxZm3Jh2Htypipti42VxRXn7gTsT9SLUye4MoyGkxvg6hCYSOrRB
xF8hq+TZOIBttWG/tqLEFCdI+fMPMWqe8Gpl3skMnIj2oSf7dAFIv/YGvi63IEXq
S1VkiQlirf1aV+Ua5CSMuYNeNj64AgEk8p9hidTrvbPsSh+4bSafdMe2prwEyWl1
hlbU0MOMUWv72j/zgrKtbDgiEVQsALnW8nO3iKlBONA4heiigzmEpI0FoiyGYTbW
JOmXDuFU8XtzYg+7oO1XABJ6ldPdB3a8y4lkianuYkQ/d4Qw1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYer2dtTsxITtL82ogVwsb+auiBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzg2MzdjODktY2M4Ny0z
MzU4LThiYTItODI4NGZlNzdlMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDUqpnwC0HWQtxKIAu3Sb+pANpH8S3/TJo2raM3nfhBUvwjcL/sCt9R
oGfUm14nubhiZAaCorZGY56dav43O7ayXEAOLhC96iCxnp0Dem7JLqPQ1w1lJ2Fc
yId73+qPivQ8SLTH0OPzefcKp7EoUdmHB7hw/rvjAA5YoaQzHRkKXwni+x/7ZC3f
avNE8Rpxr5XWU/6S6tiswNDtg3XMxOer7KFaDphiJ4tp0C3J4c2ftmKTnfnBR4NJ
BNbq7iXy9wEkOPJwFrfef1K0ARcZSmr5jjTQyXaV1hNdd5XrqW0c/7rkdGKxCSYx
9hOFa/ZpnIZ2URt05+q15viYi4Frcnk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:59 2026 by rpki-client