Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5b3603ee-65da-3eb0-a699-b264b01b7b3d.roa
File:                     5b3603ee-65da-3eb0-a699-b264b01b7b3d.roa (raw, json)
Hash identifier:          ERvquMQoWBw0Cndf1OVz8CdUyjbudqakW2e7pQc9evw=
Subject key identifier:   7A:2A:2C:E9:81:6C:FD:D7:17:90:A9:AD:54:2C:8B:84:94:C9:2B:88
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0302BADEE92FC8852B660
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5b3603ee-65da-3eb0-a699-b264b01b7b3d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:30:2b:ad:ee:92:fc:88:52:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=54eed8d4-9d87-445b-837b-a40ef7d3623d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:fa:f9:45:2f:94:87:03:3a:e7:7d:4e:1c:
                    2c:29:54:4c:d3:16:25:4d:95:59:30:5b:87:4e:2d:
                    30:34:a1:9c:06:c2:9e:df:79:28:d8:6e:58:46:78:
                    ea:0d:9c:68:8f:01:ea:54:a0:4d:52:f3:22:ce:1b:
                    f1:1f:a0:31:c3:c7:bf:d0:c6:5c:94:15:1e:4c:09:
                    fd:e6:0b:f4:be:05:ea:e0:90:e8:a9:ca:5c:c3:9b:
                    b1:b1:66:76:b2:76:57:b6:b5:a5:46:f5:0c:af:f8:
                    1c:8a:be:16:80:ab:eb:a2:11:10:94:a8:9a:ed:38:
                    d1:ba:8e:2c:fb:68:52:5a:d2:24:2c:3d:52:a9:d7:
                    97:f2:78:27:8c:e3:64:f2:05:e8:dc:89:08:f9:25:
                    76:db:ba:df:48:bf:4b:d5:36:9c:ea:5e:54:b6:d8:
                    78:e0:e7:86:c0:56:d6:07:38:0b:46:9e:29:8f:30:
                    2b:25:f1:8c:22:36:5d:aa:12:f2:74:9f:97:e9:ff:
                    59:54:dd:0f:2e:79:a8:4e:83:57:5f:87:4e:de:b8:
                    2c:c9:59:c9:15:45:7f:f3:7a:ce:47:db:96:b5:b2:
                    50:75:f5:e1:65:75:5b:67:c0:4e:20:17:5c:25:94:
                    5f:9c:16:aa:9f:af:0b:fe:01:9e:43:9f:86:66:40:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:2C:E9:81:6C:FD:D7:17:90:A9:AD:54:2C:8B:84:94:C9:2B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5b3603ee-65da-3eb0-a699-b264b01b7b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:88:99:8f:2a:7b:92:2e:a5:08:95:9f:c0:d0:7c:cf:32:b2:
         07:51:59:63:ef:ea:7a:8b:8b:ea:15:41:ea:75:70:2e:da:23:
         e6:a1:b0:5c:95:7e:12:24:e2:0a:02:2e:52:0a:a4:67:50:2e:
         bf:82:be:e8:88:75:d4:95:96:46:d0:05:25:2c:b7:51:25:da:
         3f:f6:63:84:a6:53:da:dc:a9:4f:5b:4d:eb:25:45:83:3f:c7:
         13:56:dc:ab:40:87:c3:c4:fa:30:e5:bc:72:f2:ca:a5:e6:12:
         8a:6e:98:bb:48:d1:e1:4f:8c:48:f1:08:2f:c7:62:fc:cc:5d:
         1a:96:7b:1d:16:66:bf:f1:00:f2:bc:d1:c5:38:24:64:03:8d:
         30:e2:eb:9e:ee:56:4c:f3:59:c5:5a:5c:a7:ed:ed:56:90:30:
         ff:d3:19:31:15:4f:34:c4:03:3a:08:7f:da:fa:93:d0:a0:34:
         a9:29:d7:a1:8d:e2:ac:70:32:41:91:e5:f9:94:59:5a:ab:0e:
         e0:ab:5d:a5:2c:2c:d9:22:d4:9b:88:5f:f5:ef:e5:77:20:bb:
         79:a5:ff:61:18:8b:61:00:3d:98:b3:8e:e1:bf:42:1e:79:e6:
         6a:67:ad:01:df:b4:2c:b8:fa:9f:56:36:66:9d:33:07:8b:b3:
         31:59:76:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DArre6S/IhStmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NTRlZWQ4ZDQtOWQ4Ny00NDViLTgzN2ItYTQwZWY3ZDM2MjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuX6+UUvlIcDOud9ThwsKVRM0xYlTZVZMFuH
Ti0wNKGcBsKe33ko2G5YRnjqDZxojwHqVKBNUvMizhvxH6Axw8e/0MZclBUeTAn9
5gv0vgXq4JDoqcpcw5uxsWZ2snZXtrWlRvUMr/gcir4WgKvrohEQlKia7TjRuo4s
+2hSWtIkLD1SqdeX8ngnjONk8gXo3IkI+SV227rfSL9L1Tac6l5Utth44OeGwFbW
BzgLRp4pjzArJfGMIjZdqhLydJ+X6f9ZVN0PLnmoToNXX4dO3rgsyVnJFUV/83rO
R9uWtbJQdfXhZXVbZ8BOIBdcJZRfnBaqn68L/gGeQ5+GZkCxnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHoqLOmBbP3XF5CprVQsi4SUySuIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNWIzNjAzZWUtNjVkYS0z
ZWIwLWE2OTktYjI2NGIwMWI3YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6ImY8qe5IupQiVn8DQfM8ysgdRWWPv6nqLi+oVQep1cC7aI+ahsFyV
fhIk4goCLlIKpGdQLr+CvuiIddSVlkbQBSUst1El2j/2Y4SmU9rcqU9bTeslRYM/
xxNW3KtAh8PE+jDlvHLyyqXmEopumLtI0eFPjEjxCC/HYvzMXRqWex0WZr/xAPK8
0cU4JGQDjTDi657uVkzzWcVaXKft7VaQMP/TGTEVTzTEAzoIf9r6k9CgNKkp16GN
4qxwMkGR5fmUWVqrDuCrXaUsLNki1JuIX/Xv5Xcgu3ml/2EYi2EAPZizjuG/Qh55
5mpnrQHftCy4+p9WNmadMweLszFZdu4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:05 2026 by rpki-client