Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3d16215f-d73b-3466-9033-22317dada0bb.roa
File:                     3d16215f-d73b-3466-9033-22317dada0bb.roa (raw, json)
Hash identifier:          //K1CIENQM7l6SwaDnwJxwOnIjnKGRTYlendWCLGlXg=
Subject key identifier:   8B:0F:CD:BB:B5:17:21:CB:D8:C9:86:83:96:68:EE:74:4F:4A:C0:F9
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E03B9ED4C537433640A940
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3d16215f-d73b-3466-9033-22317dada0bb.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:3b:9e:d4:c5:37:43:36:40:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=1e84aab8-f2cf-4ed5-bb1f-c50c9d495163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:3d:f9:3d:67:92:61:91:23:9b:31:a9:82:
                    47:68:a5:7f:89:e1:c0:0b:21:4b:4a:59:4b:98:3f:
                    65:7f:44:f0:f0:b0:4c:50:a0:09:ee:44:ba:9e:0f:
                    0d:6c:1a:40:ff:b3:93:e1:0c:61:da:f2:f0:7d:8c:
                    ef:0f:0d:56:f1:58:e8:ba:f7:cc:12:f4:47:8f:ba:
                    82:3b:04:35:0a:19:3e:72:e0:ca:cb:1d:63:82:04:
                    65:7d:df:80:20:41:08:cb:6a:fe:d1:4c:ef:71:46:
                    db:ab:7e:17:4b:46:f8:93:f3:ec:8b:05:b0:1b:ef:
                    62:a6:b5:f8:37:5f:35:9d:ce:fe:74:40:0a:a6:18:
                    81:5d:96:48:90:80:60:d6:97:5f:d4:62:9d:34:a2:
                    48:b7:4e:97:d7:73:08:37:28:6e:a0:1b:06:90:90:
                    ea:95:26:80:58:a6:79:e3:d7:29:96:a0:9d:82:5b:
                    e0:5d:08:3b:36:37:79:66:1a:83:34:35:59:5d:8c:
                    b6:4a:87:4a:b4:1c:e1:18:f1:c9:2b:40:7b:af:ab:
                    80:2e:c7:9c:31:47:6d:10:b2:1d:9d:a0:2b:e0:43:
                    2a:56:46:47:9a:cb:6e:51:a7:9b:f2:0a:78:d6:df:
                    ed:3f:f5:e1:1e:21:bc:58:15:e4:fd:94:98:38:8f:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0F:CD:BB:B5:17:21:CB:D8:C9:86:83:96:68:EE:74:4F:4A:C0:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3d16215f-d73b-3466-9033-22317dada0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:66:ad:f2:2b:2b:52:d9:1c:ad:74:09:b0:f1:59:b2:fd:
         2c:04:18:b6:55:3d:c9:7f:5c:ec:b1:ec:35:2f:15:07:3c:93:
         b6:0a:b9:fd:4c:b6:73:ff:ed:8f:d6:36:14:ec:c0:d5:53:ae:
         34:3b:e1:ff:18:79:f1:a5:6f:7a:7c:17:40:27:2d:7e:0f:8d:
         c5:46:fc:d6:8e:e0:0b:b7:bc:4d:2d:b0:a8:3e:aa:20:7c:37:
         3a:89:48:cc:ec:82:03:24:97:76:26:08:c4:99:8e:89:07:e0:
         84:da:9a:0e:68:2f:81:3b:2b:87:a2:bb:92:74:fa:41:aa:7d:
         7d:83:b2:16:67:73:ff:f6:6f:61:40:fe:3f:52:e2:3f:22:26:
         4a:29:d9:bc:d1:36:e4:cb:12:30:f0:ec:5f:46:93:26:cc:7c:
         74:ee:23:4b:4d:23:27:3c:b2:f9:ef:e3:1b:eb:70:33:eb:d8:
         05:43:5d:96:a3:7c:64:4e:ed:a8:bc:77:27:ca:76:9a:a6:de:
         25:36:c7:04:5e:1e:f8:0b:73:3e:f9:b7:a5:9d:6f:8b:53:11:
         7c:c5:22:3d:09:d1:d7:9d:dd:ec:1f:e4:fd:62:77:50:71:37:
         03:96:2e:b1:33:43:bc:ff:28:37:d7:6f:2f:e5:84:0e:88:f0:
         5b:42:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:03 2026 by rpki-client