Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6aa0c184-33cf-3032-8bf5-ea48290c4108.roa
File:                     6aa0c184-33cf-3032-8bf5-ea48290c4108.roa (raw, json)
Hash identifier:          Er8HEEof+DkxH0ih5LanL2o056ZIK6dCpvXoxBs0Bk4=
Subject key identifier:   84:EE:8C:D5:0F:A2:7A:87:9A:51:19:D3:B7:EC:C9:C9:7F:06:23:84
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D1F4A5D60998FD15B76A1D600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6aa0c184-33cf-3032-8bf5-ea48290c4108.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36492
IP address blocks:        136.22.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:5d:60:99:8f:d1:5b:76:a1:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=3616dddf-83e8-408c-b36b-c38128804741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:a3:f7:cc:8a:0e:6c:9d:83:39:a5:6c:64:
                    58:80:13:2c:1a:6a:58:8c:ad:f5:f4:cb:33:3a:f4:
                    63:b0:dc:f5:e4:44:5f:bd:a5:a3:fa:78:f4:7e:27:
                    cc:e9:2e:ce:07:8e:3a:92:20:cd:97:af:41:72:59:
                    86:52:0f:5f:85:c0:e4:7f:52:e1:19:08:89:76:eb:
                    3d:81:af:a9:98:37:83:92:e9:9b:9f:27:75:04:06:
                    4d:4c:da:f3:4b:b8:61:80:24:b2:6f:da:85:42:ba:
                    43:5c:00:1e:e7:56:89:34:bb:5c:9d:8b:92:ad:1c:
                    27:a8:a2:3a:1a:db:02:19:55:d5:bf:71:ab:2a:6d:
                    14:11:19:5a:84:2e:13:eb:8e:88:50:50:85:5c:32:
                    6f:84:7e:ef:64:2e:f4:ae:30:71:e2:da:eb:cb:ff:
                    7a:1c:58:c3:26:c2:6f:6f:9a:71:4f:bc:a3:97:d6:
                    df:bd:e9:b4:d6:a8:18:a4:3b:db:90:d2:50:40:bf:
                    73:78:92:98:ee:ae:ed:0f:f1:f7:d1:49:9d:d6:ed:
                    63:90:0e:f3:fd:6d:01:3f:24:dd:3a:eb:9c:95:db:
                    7c:d1:39:e7:b0:5e:d7:62:da:4b:90:19:50:a0:30:
                    75:b7:d4:21:64:c1:e6:78:a5:d6:07:1a:2b:db:ef:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EE:8C:D5:0F:A2:7A:87:9A:51:19:D3:B7:EC:C9:C9:7F:06:23:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/6aa0c184-33cf-3032-8bf5-ea48290c4108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3e:56:29:a2:ca:e7:5d:3c:fa:47:08:3a:1e:70:f2:98:bd:
         0e:65:60:5e:4c:4b:50:b2:49:42:a9:8f:71:cf:b2:b7:91:67:
         31:05:1b:07:26:46:52:7b:69:6f:b1:c9:8e:d9:2a:43:f1:d5:
         95:da:d3:1e:0d:91:98:c7:a3:b7:df:48:f6:15:51:97:a3:79:
         74:0e:42:73:aa:ca:54:d8:3d:b8:19:8e:33:fd:9f:90:34:1d:
         00:ee:cb:84:22:00:d0:1a:df:95:a0:7d:10:40:02:1d:ea:10:
         e8:c0:39:39:a9:54:71:da:0c:7d:e5:5c:1f:aa:3b:db:bb:eb:
         8b:44:ac:1f:64:47:84:4a:de:d9:7d:55:52:69:ac:25:ec:93:
         b3:5c:e0:46:c6:29:d3:6d:2e:b0:e1:ff:97:3a:64:5b:71:80:
         21:c3:05:5c:4e:bd:83:cc:af:5b:0b:3c:b1:1e:04:bc:91:df:
         4f:91:fa:7b:5a:d6:b3:60:e7:63:a6:f6:40:3e:29:02:ce:e4:
         44:ce:bd:ea:dc:08:5e:ad:70:24:c8:c5:8f:52:dc:d9:e2:a9:
         83:84:45:ec:ae:da:47:b5:4d:bc:32:08:10:bf:c1:b2:5b:27:
         a3:d7:9e:d7:5d:e5:4a:a2:ee:c2:20:01:6c:81:94:c9:b2:6f:
         2c:13:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:07 2026 by rpki-client