Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fee7149-a6dd-3956-b844-7a9685dfb980.roa
File:                     3fee7149-a6dd-3956-b844-7a9685dfb980.roa (raw, json)
Hash identifier:          Ka5xQ11ICIwmSKnE6WgjP4hpEhIqIdyUWgJOaG4or+c=
Subject key identifier:   EE:99:03:D7:D0:D1:68:80:81:1E:75:FF:AC:81:5E:70:59:FB:BB:5E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F4984E170D0305967F173DA00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fee7149-a6dd-3956-b844-7a9685dfb980.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:e1:70:d0:30:59:67:f1:73:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=485284eb-4c97-49fb-82b1-e2a3ff6a9ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c6:e2:a9:c6:f0:fa:e2:ef:d0:76:df:f5:0f:
                    26:1c:b0:30:c9:8b:59:a9:a1:2d:99:62:10:e3:d7:
                    c0:f5:01:b5:5e:4d:64:f3:60:a7:76:73:f5:cf:da:
                    8b:10:4e:eb:67:ac:99:c2:60:d0:3d:16:ab:b5:ae:
                    3c:f8:76:9f:89:5f:7e:7b:b8:50:87:36:9e:e6:0b:
                    53:2d:aa:09:08:42:29:d6:13:b3:3d:6a:df:30:7c:
                    33:ab:b2:26:55:06:c9:a7:45:a7:f3:81:e3:95:65:
                    05:40:4a:36:76:b5:ee:bf:60:a4:12:b0:22:d7:56:
                    7f:1d:96:0f:73:5a:93:f9:0f:05:b1:73:23:11:4d:
                    59:ed:27:03:63:3f:d0:73:e7:02:83:60:19:fa:94:
                    c1:12:e2:94:9c:bd:b2:44:62:a9:df:8c:ec:ce:b2:
                    26:27:81:a0:d3:80:a6:08:e9:3b:ba:10:9d:a2:8f:
                    cf:4c:03:62:02:c9:01:77:71:90:0d:ab:a2:4a:d7:
                    8c:75:00:f4:dc:80:a5:3f:36:62:6b:a8:32:98:e6:
                    01:7f:eb:17:d2:e6:71:29:38:b3:2e:97:fe:fb:55:
                    f2:9d:42:10:14:2b:b6:aa:05:13:bd:da:52:c9:15:
                    0e:da:26:a8:06:4b:d3:c1:78:06:12:f2:1f:82:cc:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:99:03:D7:D0:D1:68:80:81:1E:75:FF:AC:81:5E:70:59:FB:BB:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fee7149-a6dd-3956-b844-7a9685dfb980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6e:a2:51:6c:c5:23:63:a2:68:c2:a7:25:3e:21:0b:71:cf:
         af:d0:33:08:24:1e:bc:3c:58:e2:ec:bb:54:32:c2:5f:ed:20:
         77:77:97:21:e8:bd:84:74:33:5f:d4:e8:17:74:5a:5a:38:dd:
         71:8f:e5:c0:92:9a:6d:32:f1:01:19:85:68:25:b5:6c:31:c7:
         9a:82:47:fc:3c:cf:6a:15:a0:05:52:57:2f:cb:62:40:f4:b6:
         a4:92:7c:42:fa:41:cb:4c:4a:e1:45:ef:35:eb:6e:77:eb:c0:
         c4:6c:cb:d8:72:ad:32:1d:c0:c7:cd:42:dd:30:da:36:9b:27:
         61:e3:82:da:7b:aa:19:6a:03:01:88:4c:d0:55:43:7d:31:f3:
         e4:21:d7:85:fd:db:a6:c5:20:1d:87:f2:59:ce:51:51:b3:3b:
         86:0c:ef:d3:24:11:8f:8b:88:ce:b8:39:97:f0:25:3a:6d:cc:
         ce:43:80:ac:7b:6b:84:cf:85:67:f5:b3:11:d9:0a:2b:90:37:
         f3:5c:00:8a:a4:12:96:7c:0e:15:df:3d:f6:1e:a9:52:2f:70:
         bf:e3:20:94:ec:2b:a4:79:7b:7c:34:1d:e2:a5:7a:21:78:2f:
         a1:ec:f9:37:f3:97:e0:47:d5:4d:da:8b:ad:aa:9c:6d:40:e3:
         e6:41:8f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:30:05 2026 by rpki-client