Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ac818b5-57dc-33e2-ba48-5b05a497b571.roa
File:                     5ac818b5-57dc-33e2-ba48-5b05a497b571.roa (raw, json)
Hash identifier:          xhTzNRM7Z3c/CAaXFvFgA0EurLztdC+EFeIAPRAPItY=
Subject key identifier:   A1:99:10:9C:0D:4F:4D:22:54:CB:02:33:3C:49:ED:C2:17:A9:6F:8D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497CF5340DECA137ECAAE180
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ac818b5-57dc-33e2-ba48-5b05a497b571.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:f5:34:0d:ec:a1:37:ec:aa:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7bd0d562-ab3c-4408-b328-ba7a652f3120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:13:bd:f9:9f:21:88:77:c1:60:63:19:72:
                    53:02:6e:92:10:ae:88:ce:41:7e:e5:04:5e:24:b6:
                    59:a8:59:70:21:1d:76:16:14:1b:e6:02:51:02:55:
                    5f:4b:e3:c8:d1:6f:50:ed:0c:b4:2f:8e:37:5f:cb:
                    f0:26:f2:64:c8:54:99:d8:2a:03:d6:f4:d4:1f:a7:
                    0d:92:db:06:a4:37:90:50:d4:d5:ac:da:82:9c:7d:
                    72:3f:ea:5a:13:0e:4f:2f:39:73:5f:92:d3:2f:56:
                    1c:f7:be:f3:56:15:5e:72:8b:42:a9:44:02:e5:e2:
                    8a:81:91:61:a6:20:67:c3:8b:d6:9e:58:f4:af:d0:
                    1e:21:eb:af:73:cc:0c:fa:35:4e:9e:39:b1:f8:5a:
                    f5:29:79:6c:0b:52:53:4f:fb:9a:7d:1d:27:c4:41:
                    77:9d:b6:ef:e8:0e:61:9c:37:6d:a6:5b:d6:2e:3b:
                    24:98:60:91:4b:ae:8c:48:a1:08:11:fe:17:1b:32:
                    fc:2e:cf:3c:f6:ba:86:3a:fc:86:16:f4:7c:38:29:
                    2a:dc:e1:14:83:a9:89:6b:67:79:be:f2:55:39:ba:
                    62:16:44:a9:11:26:27:83:93:0e:13:1d:36:c2:47:
                    08:54:67:0a:f4:a4:77:38:f1:d1:27:aa:cf:88:c4:
                    5c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:99:10:9C:0D:4F:4D:22:54:CB:02:33:3C:49:ED:C2:17:A9:6F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ac818b5-57dc-33e2-ba48-5b05a497b571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:cd:c6:74:c2:df:d2:9b:b0:ca:8b:a4:eb:4b:a0:9d:3e:
         e3:68:50:69:c7:4b:e6:88:b0:35:7e:1f:dd:1f:7e:af:01:18:
         83:61:a4:b0:d2:35:1e:d1:d1:46:8e:6f:69:0c:29:87:72:03:
         4f:31:0f:db:db:ef:62:dc:4b:59:17:ea:38:3f:cd:5e:c9:cf:
         9a:26:ac:eb:74:d4:8d:ba:ae:25:29:f7:c7:b4:7b:f7:fc:6c:
         09:30:01:a0:ac:23:97:a8:67:92:e0:29:04:30:ff:48:55:d8:
         de:de:6a:cf:80:2a:94:84:4d:27:80:c4:0d:d5:e4:d0:6e:52:
         c7:d3:30:86:a6:19:16:4c:60:b7:3a:da:be:9b:1d:35:1d:ad:
         ee:8a:55:23:b0:d4:d2:47:ec:a5:66:b1:8b:db:8f:d7:f0:8a:
         63:5e:f6:20:3c:dd:88:c4:78:91:ff:e8:5a:b0:76:e4:12:fc:
         8b:4e:5a:22:d9:c9:cc:3a:28:86:c4:6c:1b:47:2d:e0:e8:3b:
         56:4f:3a:61:a7:c4:a0:89:0f:42:23:f4:00:9a:b3:29:d8:d8:
         f3:59:41:a2:0b:ba:da:00:3a:5a:5e:05:b3:37:41:b2:40:09:
         ba:ae:31:41:5f:8a:bc:25:a4:3a:29:cb:fd:ce:bb:ca:34:8b:
         f0:6d:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:27:26 2026 by rpki-client