Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/538ac9de-4a75-3f69-b455-da6a5cb4052d.roa
File:                     538ac9de-4a75-3f69-b455-da6a5cb4052d.roa (raw, json)
Hash identifier:          NPeFwgwNUyPzw6zV7eG72KRMnt/wWz2iOjCvBUnRt6A=
Subject key identifier:   85:F1:E6:48:C4:85:BB:D6:47:C9:D4:69:19:63:3C:44:53:F6:C1:83
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0FBC73AF4F23E781D4B40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/538ac9de-4a75-3f69-b455-da6a5cb4052d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:fb:c7:3a:f4:f2:3e:78:1d:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=471242a5-a2e2-48ad-bae3-2eb6215b11ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:99:de:06:81:cd:7f:a4:ea:cd:90:aa:62:
                    2d:3d:7e:31:5c:03:6a:89:bb:a3:e4:8a:34:04:de:
                    b9:23:10:80:fe:d0:00:46:c9:f3:a8:2d:cd:d3:1e:
                    48:83:5d:56:8e:0e:52:82:9d:5c:fc:03:77:7c:55:
                    ff:e0:b4:7d:05:92:12:14:b7:49:be:77:fb:9b:bb:
                    ab:d8:7a:84:f7:b2:68:e5:69:6c:74:5b:f3:e5:21:
                    9a:0e:67:aa:9d:2e:02:11:38:ce:df:b8:3f:44:db:
                    6b:5b:e9:7c:14:71:2b:36:74:15:5d:b6:52:54:14:
                    d8:c1:83:eb:4c:24:94:fc:b6:48:81:d8:c6:75:e5:
                    c9:48:5b:8c:07:6b:12:28:89:47:1e:ed:27:05:09:
                    76:cb:cf:e6:22:a4:cd:34:ba:92:44:4b:4a:05:af:
                    61:b0:76:71:19:b3:3b:ce:a1:72:14:1d:bf:24:da:
                    60:f7:a3:b3:32:51:ff:66:3d:18:dc:2f:16:ae:09:
                    9f:b1:b2:a9:1f:ac:7d:f7:91:87:39:c5:c3:2d:71:
                    dc:c2:78:51:cf:54:41:0f:94:28:5e:bb:bd:70:27:
                    3a:8a:63:5b:23:a4:31:91:3f:3c:5c:d8:55:d0:69:
                    70:03:6e:41:70:85:7a:7e:7b:4e:a6:c6:4e:6f:ff:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F1:E6:48:C4:85:BB:D6:47:C9:D4:69:19:63:3C:44:53:F6:C1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/538ac9de-4a75-3f69-b455-da6a5cb4052d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:ad:2e:f1:10:bf:33:da:4b:32:4b:82:87:49:25:52:47:
         2d:8f:86:8e:2c:4a:fc:54:85:7b:5f:e3:38:cd:70:dd:8f:b6:
         dd:bc:9d:dc:a8:0b:e3:b1:3a:97:8a:99:da:5f:8c:de:13:54:
         b8:bb:f5:f6:5d:da:3d:66:60:4c:26:25:af:56:ce:88:e3:bb:
         09:04:6e:8b:ba:99:cd:39:8b:1a:8f:de:01:b4:25:00:8b:05:
         cb:60:7c:65:6b:f5:9a:42:86:b3:bd:2c:c3:57:d3:b9:6f:6b:
         91:52:0a:d7:5a:70:1c:54:86:ce:21:87:f5:fa:c7:78:57:70:
         e4:fd:2d:68:5a:dc:ca:f4:f7:db:ab:f6:4a:0a:1c:e6:57:3c:
         4b:c8:d9:37:90:16:9e:8e:b4:02:e9:13:88:a2:43:01:2d:da:
         0e:39:d5:d5:94:3d:10:77:01:06:82:dc:3e:a0:e8:c5:0e:54:
         91:e1:c5:cb:4d:c9:82:0f:d0:a2:b7:cd:10:2c:95:f2:98:1d:
         82:82:f7:c5:b7:f3:cc:c7:e6:cc:7f:0a:4e:2b:07:c9:23:f0:
         6d:4f:84:cb:10:c1:5c:d6:92:57:4e:22:ee:e9:26:63:d5:7d:
         67:f7:67:0a:76:c9:48:02:0f:c8:a2:23:1c:09:c3:06:db:32:
         a0:71:6e:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PvHOvTyPngdS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NDcxMjQyYTUtYTJlMi00OGFkLWJhZTMtMmViNjIxNWIxMWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowaZ3gaBzX+k6s2QqmItPX4xXANqibuj5Io0
BN65IxCA/tAARsnzqC3N0x5Ig11Wjg5Sgp1c/AN3fFX/4LR9BZISFLdJvnf7m7ur
2HqE97Jo5WlsdFvz5SGaDmeqnS4CETjO37g/RNtrW+l8FHErNnQVXbZSVBTYwYPr
TCSU/LZIgdjGdeXJSFuMB2sSKIlHHu0nBQl2y8/mIqTNNLqSREtKBa9hsHZxGbM7
zqFyFB2/JNpg96OzMlH/Zj0Y3C8WrgmfsbKpH6x995GHOcXDLXHcwnhRz1RBD5Qo
Xru9cCc6imNbI6QxkT88XNhV0GlwA25BcIV6fntOpsZOb//5uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXx5kjEhbvWR8nUaRljPERT9sGDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTM4YWM5ZGUtNGE3NS0z
ZjY5LWI0NTUtZGE2YTVjYjQwNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBb4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzCrS7xEL8z2ksyS4KHSSVSRy2Pho4sSvxUhXtf4zjNcN2Ptt28ndyo
C+OxOpeKmdpfjN4TVLi79fZd2j1mYEwmJa9WzojjuwkEbou6mc05ixqP3gG0JQCL
BctgfGVr9ZpChrO9LMNX07lva5FSCtdacBxUhs4hh/X6x3hXcOT9LWha3Mr099ur
9koKHOZXPEvI2TeQFp6OtALpE4iiQwEt2g451dWUPRB3AQaC3D6g6MUOVJHhxctN
yYIP0KK3zRAslfKYHYKC98W388zH5sx/Ck4rB8kj8G1PhMsQwVzWkldOIu7pJmPV
fWf3Zwp2yUgCD8iiIxwJwwbbMqBxbuw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:15 2026 by rpki-client