Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
File:                     53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa (raw, json)
Hash identifier:          ZC4Bu2/H2sxFnAriwAxobszW2qgJbBzRZLBOIu83us4=
Subject key identifier:   D5:68:D5:77:2F:71:79:94:E1:11:13:0C:68:23:0F:AD:62:4C:83:EF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0489FDC468091CA5FA580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:48:9f:dc:46:80:91:ca:5f:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=33076018-cd62-48d3-9272-0d441626c1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:f2:39:8e:64:9d:14:f2:16:f6:91:53:53:
                    71:49:d7:e0:0d:26:30:dc:da:7b:bc:d2:7d:03:76:
                    4b:61:03:4b:c4:fb:97:bc:27:4e:28:c5:24:eb:d2:
                    ef:ff:5c:98:32:77:3d:71:c9:67:f5:1c:67:d3:dc:
                    5d:8d:e2:75:db:79:04:6f:0e:3d:4a:cf:f7:1d:7f:
                    07:7f:da:9b:d1:1a:2a:f0:89:eb:a5:c0:79:38:73:
                    77:2d:46:f4:85:38:5b:40:b4:ea:88:25:f4:9d:a3:
                    68:57:1b:06:d7:c3:4c:38:81:fa:ff:bd:96:70:49:
                    ee:23:d0:0a:32:85:8f:07:5d:95:de:c5:75:69:d1:
                    92:83:85:07:e2:94:37:31:c8:65:8b:1f:68:d1:e5:
                    60:50:b3:4c:8b:41:1e:d2:27:a4:41:31:3e:d9:02:
                    ca:03:4b:65:81:83:69:f2:28:39:bb:8b:4b:87:f4:
                    54:5e:54:99:f7:03:58:b9:10:d1:24:f1:5a:2b:6c:
                    2c:77:5a:81:48:08:d7:61:d7:b6:79:bc:04:2d:de:
                    df:4c:35:be:0d:d3:2b:05:91:8e:89:e5:4e:1f:fc:
                    f6:36:bb:98:f6:45:60:20:32:06:30:79:5f:66:9f:
                    95:85:6b:46:b0:6a:8a:9e:de:9a:f6:a8:d5:ab:e3:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:68:D5:77:2F:71:79:94:E1:11:13:0C:68:23:0F:AD:62:4C:83:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8a:dc:c6:cc:98:ef:0d:01:45:8e:85:5f:81:e9:3f:e5:d8:
         81:48:04:6c:8c:2b:78:5e:5d:92:03:ea:40:02:df:01:64:cc:
         55:58:cb:3e:12:30:8b:c0:ba:97:c6:77:27:85:a5:de:96:df:
         7a:c5:ac:57:6e:d6:39:98:57:36:8d:49:22:89:0a:1a:42:fa:
         42:b4:c8:29:37:4d:d0:d9:b9:ee:b3:75:e4:c9:fb:02:b5:92:
         a5:2d:0f:90:45:f8:d5:a6:35:cb:17:84:25:cf:3c:9e:19:3c:
         9f:40:72:20:b0:f3:d4:b1:f6:60:ee:3e:9f:85:8c:1f:70:45:
         6f:a7:cd:30:74:b4:e2:d4:18:c7:ce:38:f9:7c:c3:98:22:11:
         38:01:83:a9:98:6a:27:90:ee:7f:77:e6:52:7f:bd:33:90:5e:
         fb:45:43:0a:26:5e:33:64:68:a5:99:e1:a1:65:75:b6:9e:1e:
         fc:b7:f7:79:40:3c:10:3c:68:eb:50:99:80:b0:e1:31:33:ad:
         92:3e:4a:b2:37:61:02:0b:61:4c:a2:13:20:40:74:9c:87:35:
         eb:0f:cd:be:d6:b9:f8:96:e5:6e:dd:61:2c:40:23:9b:b8:6b:
         be:41:6e:ef:cf:5e:42:e6:03:6b:69:2c:2e:2e:8e:c9:f4:a6:
         11:bd:8a:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Eif3EaAkcpfpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MzMwNzYwMTgtY2Q2Mi00OGQzLTkyNzItMGQ0NDE2MjZjMWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2ryOY5knRTyFvaRU1NxSdfgDSYw3Np7vNJ9
A3ZLYQNLxPuXvCdOKMUk69Lv/1yYMnc9ccln9Rxn09xdjeJ123kEbw49Ss/3HX8H
f9qb0Roq8InrpcB5OHN3LUb0hThbQLTqiCX0naNoVxsG18NMOIH6/72WcEnuI9AK
MoWPB12V3sV1adGSg4UH4pQ3Mchlix9o0eVgULNMi0Ee0iekQTE+2QLKA0tlgYNp
8ig5u4tLh/RUXlSZ9wNYuRDRJPFaK2wsd1qBSAjXYde2ebwELd7fTDW+DdMrBZGO
ieVOH/z2NruY9kVgIDIGMHlfZp+VhWtGsGqKnt6a9qjVq+MXTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVo1XcvcXmU4RETDGgjD61iTIPvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTNhODIyMGEtN2YyNy0z
NmQxLWE3YWQtYjdiZDhlYjM0NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCK3MbMmO8NAUWOhV+B6T/l2IFIBGyMK3heXZID6kAC3wFkzFVYyz4S
MIvAupfGdyeFpd6W33rFrFdu1jmYVzaNSSKJChpC+kK0yCk3TdDZue6zdeTJ+wK1
kqUtD5BF+NWmNcsXhCXPPJ4ZPJ9AciCw89Sx9mDuPp+FjB9wRW+nzTB0tOLUGMfO
OPl8w5giETgBg6mYaieQ7n935lJ/vTOQXvtFQwomXjNkaKWZ4aFldbaeHvy393lA
PBA8aOtQmYCw4TEzrZI+SrI3YQILYUyiEyBAdJyHNesPzb7WufiW5W7dYSxAI5u4
a75Bbu/PXkLmA2tpLC4ujsn0phG9ivM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:34 2026 by rpki-client