Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/44e05e02-8b45-34c5-92ee-85fc6a8e5eb4.roa
File:                     44e05e02-8b45-34c5-92ee-85fc6a8e5eb4.roa (raw, json)
Hash identifier:          L4qS2CL9UGzO2MP6FoTlme/wnQczGcv5FmHWGWqgr4c=
Subject key identifier:   EC:10:0B:E0:AE:70:3D:B8:B2:0F:47:5A:75:F7:01:6C:BA:D4:3F:15
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D1F4A71AC17ADD85111BA2A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/44e05e02-8b45-34c5-92ee-85fc6a8e5eb4.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36492
IP address blocks:        136.22.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:71:ac:17:ad:d8:51:11:ba:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=8ec50dd9-55b6-4534-92cd-13d385ae7dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:de:4b:36:60:3a:0e:4e:fa:f6:77:22:e0:
                    64:dc:87:60:c5:b0:9d:5a:b9:64:b0:e8:45:d2:41:
                    21:23:4a:51:5a:80:2d:3b:8b:61:a1:53:c9:ab:01:
                    80:14:ed:f0:45:d6:86:d6:3a:83:9f:51:a2:a7:a0:
                    de:75:64:9a:d3:69:21:2e:e8:78:da:b2:38:ca:f9:
                    17:bd:4e:0a:e4:ef:85:ca:8b:0c:ac:07:28:e8:68:
                    91:a6:38:bc:55:3b:87:3d:a7:fc:fa:c3:8c:7f:38:
                    2d:a0:5d:4b:32:25:b5:bb:fb:fe:18:59:be:b8:09:
                    41:9d:cf:ae:4f:d1:c9:75:44:1c:8c:f0:0c:e4:e0:
                    05:68:35:3f:30:cb:0b:14:7b:3d:b0:57:6f:c0:9d:
                    37:c4:5c:90:de:8b:2f:18:5b:4f:d7:05:be:99:33:
                    7c:57:fd:f9:76:07:d3:d9:1c:23:17:98:6d:7b:1b:
                    f0:63:ef:83:62:0b:b3:69:fa:e7:3c:37:ae:98:3e:
                    88:57:4d:39:99:9d:17:5b:b1:2f:36:db:8d:9a:f6:
                    dd:0c:f6:d7:3e:df:45:f0:df:3a:e1:32:a8:95:b0:
                    7e:a4:aa:d2:8c:4c:20:18:aa:53:f1:88:ed:cf:5c:
                    7d:c3:96:be:df:18:b6:54:c7:6d:38:4b:a8:fc:2b:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:10:0B:E0:AE:70:3D:B8:B2:0F:47:5A:75:F7:01:6C:BA:D4:3F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/44e05e02-8b45-34c5-92ee-85fc6a8e5eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:33:2b:90:56:99:d3:45:35:e7:8c:f2:f7:3e:88:83:78:88:
         9e:92:29:9b:46:a3:19:9a:0a:f3:bd:4d:20:e1:f7:4a:ee:31:
         a3:f0:95:2c:0b:b0:af:a6:56:e2:ca:65:17:55:27:1d:9f:6d:
         6c:19:34:39:c2:90:0d:18:0d:9c:6e:c6:e0:fa:49:c1:3d:58:
         67:71:b8:02:01:63:a5:c5:92:e1:b6:39:73:1a:16:49:06:a0:
         1e:bb:a5:e2:82:bc:08:0e:93:74:e0:56:20:cb:89:48:06:06:
         64:da:c9:32:d6:c6:1a:a1:5c:82:25:16:c6:c3:70:e6:68:d0:
         60:cc:51:56:db:0f:e1:20:30:ec:49:6b:e0:b5:40:1c:0f:d5:
         10:bc:b7:55:ef:94:96:b3:73:15:5c:88:6b:5b:52:df:26:0f:
         ae:ae:6a:bb:78:00:8d:98:b4:83:31:0b:95:95:c3:4b:f6:0f:
         4c:24:b2:53:7f:d9:ea:7e:30:cd:a6:8f:7b:43:24:22:c5:cc:
         b5:a4:66:f5:5a:66:86:b1:aa:53:d0:85:c2:40:43:e4:2d:64:
         d6:54:ca:8a:25:be:49:ea:b1:35:87:5b:f2:5a:21:76:d8:91:
         ae:14:96:0a:f0:18:e8:4c:fc:ea:60:13:c0:6b:21:3f:66:18:
         31:04:ec:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnGsF63YURG6KgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
OGVjNTBkZDktNTViNi00NTM0LTkyY2QtMTNkMzg1YWU3ZGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ObeSzZgOg5O+vZ3IuBk3IdgxbCdWrlksOhF
0kEhI0pRWoAtO4thoVPJqwGAFO3wRdaG1jqDn1Gip6DedWSa02khLuh42rI4yvkX
vU4K5O+FyosMrAco6GiRpji8VTuHPaf8+sOMfzgtoF1LMiW1u/v+GFm+uAlBnc+u
T9HJdUQcjPAM5OAFaDU/MMsLFHs9sFdvwJ03xFyQ3osvGFtP1wW+mTN8V/35dgfT
2RwjF5htexvwY++DYguzafrnPDeumD6IV005mZ0XW7EvNtuNmvbdDPbXPt9F8N86
4TKolbB+pKrSjEwgGKpT8Yjtz1x9w5a+3xi2VMdtOEuo/CuYcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwQC+CucD24sg9HWnX3AWy61D8VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNDRlMDVlMDItOGI0NS0z
NGM1LTkyZWUtODVmYzZhOGU1ZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBZ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJszK5BWmdNFNeeM8vc+iIN4iJ6SKZtGoxmaCvO9TSDh90ruMaPwlSwL
sK+mVuLKZRdVJx2fbWwZNDnCkA0YDZxuxuD6ScE9WGdxuAIBY6XFkuG2OXMaFkkG
oB67peKCvAgOk3TgViDLiUgGBmTayTLWxhqhXIIlFsbDcOZo0GDMUVbbD+EgMOxJ
a+C1QBwP1RC8t1XvlJazcxVciGtbUt8mD66uart4AI2YtIMxC5WVw0v2D0wkslN/
2ep+MM2mj3tDJCLFzLWkZvVaZoaxqlPQhcJAQ+QtZNZUyoolvknqsTWHW/JaIXbY
ka4UlgrwGOhM/OpgE8BrIT9mGDEE7Mk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:44 2026 by rpki-client