Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa
File:                     53960a1b-a057-314e-9200-bfba1423d151.roa (raw, json)
Hash identifier:          TiW3pGloRflTU7jqAMuEbSXRCLjhoF/IgH17PTGF0Hs=
Subject key identifier:   81:D3:82:98:F6:69:81:BD:EB:EF:55:FF:FB:AE:CE:04:75:1A:58:7B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D1F4A591422C553597529C100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36492
IP address blocks:        136.22.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:59:14:22:c5:53:59:75:29:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=cee5e304-9353-4d5b-90c7-6f32af50f68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:b8:c7:98:cd:cf:cd:16:fd:a5:6c:b0:55:
                    12:af:bf:ac:96:6f:09:72:9b:87:1e:4e:de:10:d6:
                    75:e2:25:11:ae:f0:e1:44:ef:08:e7:80:62:cf:b6:
                    37:fe:9d:14:a7:1a:05:32:bd:85:67:67:ed:42:6f:
                    c7:a4:34:29:d8:ea:95:10:10:ba:d2:ba:20:b6:8d:
                    a6:a3:f2:0d:f3:29:b6:d0:0c:62:2a:b9:01:c7:b5:
                    78:e2:a6:80:e3:af:9f:39:26:f2:0b:bd:60:0a:57:
                    98:d5:e4:51:97:96:ca:94:69:87:71:f8:3c:a8:09:
                    c8:2a:70:06:96:aa:9f:bd:ac:2a:ea:d2:82:ef:ae:
                    0a:7e:4b:93:99:79:ca:e7:c2:d3:eb:32:be:8b:0e:
                    a8:1a:a7:c5:4b:27:08:e7:76:3c:3c:41:a4:1b:c5:
                    53:8c:6f:c1:97:9b:16:8e:5d:55:ef:58:69:12:b9:
                    34:d8:df:62:84:59:51:82:3e:0f:7c:0b:83:2d:8c:
                    d4:03:09:35:b0:4c:4e:85:3e:89:4d:d2:cd:3b:38:
                    88:ae:9a:e8:de:0e:a1:fd:11:b1:e3:af:e5:a5:d1:
                    09:32:4b:9b:bb:e1:f1:0a:7a:b8:ae:80:6c:d8:b4:
                    70:e8:ec:9c:20:d8:5e:1e:08:57:e9:f8:2b:ba:8c:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:82:98:F6:69:81:BD:EB:EF:55:FF:FB:AE:CE:04:75:1A:58:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e9:06:18:90:f5:97:cd:56:9c:4e:45:06:ef:26:ec:63:7b:
         38:b8:a9:bc:99:bf:32:85:ce:44:4f:4f:3d:23:b3:16:26:40:
         60:f0:07:4f:16:c4:cb:28:ba:35:a1:28:58:d1:6d:e8:d4:a7:
         dd:e7:d0:f1:6d:4d:da:5f:75:d5:17:84:a9:9e:ef:1b:59:ba:
         ca:bf:f7:ee:fa:12:09:09:16:f6:95:fa:2a:9a:50:d7:1a:16:
         87:b1:ea:cd:ad:b2:f7:85:5c:3c:7b:c2:3a:be:24:9f:e4:4c:
         c6:e3:69:36:93:49:b2:41:73:8e:f2:ad:92:27:da:21:2f:9c:
         d2:53:ae:27:e7:1a:b1:32:ce:f3:93:af:b5:4a:82:50:0c:d7:
         d1:98:12:02:84:9a:9c:7f:fc:f2:5a:c2:5e:d0:63:d1:46:16:
         fd:b6:7e:4f:80:7b:7c:65:1a:80:2c:68:46:4e:d6:52:7d:a8:
         6f:86:05:1a:18:1e:c8:f6:95:28:a2:89:9a:86:d3:ea:22:a7:
         c5:15:a1:cd:e3:6d:7f:19:fc:27:61:fc:82:af:f6:0f:1e:f0:
         fa:1e:d7:08:1f:f9:ef:4d:c2:61:08:d2:89:85:f1:55:ea:12:
         48:4d:21:0e:43:aa:22:df:30:a6:9c:4e:4b:88:89:11:72:3a:
         ca:9b:cd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:51 2026 by rpki-client