Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/413d5b1b-9df2-3aa8-a317-a665f46210d0.roa
File:                     413d5b1b-9df2-3aa8-a317-a665f46210d0.roa (raw, json)
Hash identifier:          5v9iFdrni0p7dreCtfQaegKpuA48nOXvH+BTsS6aVrA=
Subject key identifier:   97:F4:5A:64:0D:9B:5E:D2:48:4C:FA:13:1B:29:F0:4B:F6:16:A9:BA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497CCDF28CCD3F85BEDC4C00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/413d5b1b-9df2-3aa8-a317-a665f46210d0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:cd:f2:8c:cd:3f:85:be:dc:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fe47c8d9-39ab-4be1-a148-96b946d4ea53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:a4:ec:27:86:c1:0c:1d:21:85:74:30:17:
                    44:62:76:fe:fc:d4:ee:6a:6a:45:c8:39:7a:7d:c5:
                    e7:51:e4:c8:48:2c:ed:14:84:79:a8:1e:ed:8b:53:
                    7f:c6:cf:56:33:d9:a9:a9:13:1c:0b:2e:ad:46:af:
                    1b:4e:32:2f:24:ed:0c:bc:ed:cb:e4:9a:74:9c:bf:
                    72:75:94:a6:80:db:26:44:f7:1f:21:5d:f7:dc:75:
                    a5:de:f9:57:23:c0:a3:5b:36:60:84:fa:d0:3a:a3:
                    fe:75:bc:30:9b:96:bb:0d:7e:82:54:3b:38:b9:45:
                    14:4e:d0:79:09:01:02:3c:79:17:93:85:ee:d5:4e:
                    35:f5:58:a9:5d:f9:9b:4f:55:ec:80:bd:80:39:1a:
                    3d:ab:c8:9a:6f:4a:c3:45:52:80:71:d0:82:55:be:
                    fe:e7:5a:5d:45:fe:cc:69:77:08:bb:a8:f1:81:bd:
                    96:ca:ba:ad:0e:36:c6:14:29:17:28:09:55:89:bd:
                    7f:6e:c2:9f:44:d0:52:7e:6c:96:5d:ae:31:ea:2e:
                    71:ce:b5:9c:10:c8:16:3d:e8:0e:98:dc:07:a5:73:
                    04:2b:ab:5c:cb:0e:df:fb:97:bd:ee:10:be:26:bf:
                    83:24:38:26:ed:ca:8c:40:5d:52:62:47:af:d0:08:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F4:5A:64:0D:9B:5E:D2:48:4C:FA:13:1B:29:F0:4B:F6:16:A9:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/413d5b1b-9df2-3aa8-a317-a665f46210d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:45:fc:03:74:6c:94:8e:b4:fe:af:a0:75:41:b9:57:ef:23:
         da:71:22:a6:40:60:bf:cf:2b:5f:21:0a:c0:de:fb:db:55:bd:
         76:dc:98:59:a8:11:43:5a:40:86:72:1f:0d:0c:25:91:a0:32:
         ce:5d:03:07:89:8f:ed:e6:15:7a:e9:08:d8:c7:a2:4b:8c:9a:
         16:8d:29:67:0f:e7:17:c3:6a:47:4b:ad:67:3e:d8:df:26:24:
         94:96:bb:9c:d9:33:5c:c7:18:b3:5e:c0:17:31:05:17:c5:5b:
         d5:73:b7:bd:e1:88:c8:11:de:3d:84:00:c1:ec:de:26:0d:c2:
         87:5d:6b:bf:07:9e:aa:22:15:b0:9c:06:d3:1f:f3:d2:ab:58:
         63:51:e8:be:34:ff:ea:fd:94:04:9d:a3:51:93:50:29:5b:1c:
         1b:de:2f:3a:67:d8:14:5a:9f:f4:92:2c:8c:ae:0e:ce:7e:44:
         43:8c:bd:3f:24:7f:87:e9:47:7b:4f:dc:ac:ca:b9:02:5f:28:
         d4:cb:a2:7b:1e:83:9e:10:84:84:d7:63:ca:28:a4:4a:8b:5a:
         b4:4a:28:1e:f7:71:d6:86:d2:64:ea:40:e8:aa:86:01:35:45:
         74:58:02:34:04:d2:c2:87:2c:5a:1d:20:ac:0e:4e:04:6e:c3:
         de:36:66:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:26:38 2026 by rpki-client