Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
File:                     75bde4a1-e87d-321d-917f-10d16a03a5a1.roa (raw, json)
Hash identifier:          wBbBO1gvPJ6VX3No6zDKrx7/KaC/zyNwFfhisCDfMPE=
Subject key identifier:   F7:22:45:F7:2F:3A:77:CC:AE:9F:B3:6A:82:99:76:10:1D:23:7D:A3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D1F4A4A427F7E38B838F80780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36492
IP address blocks:        136.22.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:4a:42:7f:7e:38:b8:38:f8:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=f1254847-26cb-4029-bfd2-fedcbb16e086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:61:a8:73:6a:94:21:cf:34:25:b9:bd:58:
                    6c:c4:74:1b:1f:60:f0:73:9e:87:ef:b2:59:b5:6f:
                    af:cd:42:48:ed:d9:f5:86:64:40:f7:49:bd:04:73:
                    ba:45:01:f7:2c:98:ec:2a:55:5d:78:80:60:34:d7:
                    33:05:4a:5c:db:2a:ba:b7:48:eb:6a:3a:5f:0f:f6:
                    5f:4d:db:40:0b:14:9c:8b:11:86:ca:28:fb:99:98:
                    b7:7d:e0:62:71:a6:5b:0c:ab:c3:c2:c2:3f:0f:a4:
                    85:be:58:81:ea:0c:73:9c:82:f1:e0:ed:af:3b:85:
                    31:b0:5f:cf:e0:36:38:b1:b9:55:5a:91:dc:82:e1:
                    e1:c0:10:bd:1b:c7:1a:49:d7:94:a3:86:f8:aa:b9:
                    8f:92:b9:1a:5a:9d:4f:24:b5:c3:ae:9e:f8:72:cb:
                    96:14:9e:d1:4e:a5:bc:8b:80:2b:c3:f0:06:1f:3e:
                    fc:b8:c3:95:0b:7a:8a:d1:f3:8e:53:ca:4b:b2:93:
                    4a:80:2b:fc:60:7e:8d:11:06:80:f0:93:9e:5a:be:
                    70:2e:8a:27:be:42:f7:8f:25:40:54:82:2f:8c:1e:
                    f0:b3:48:e8:40:1a:cf:19:67:ad:d5:e6:f0:e5:4d:
                    87:7f:1b:c9:67:41:d1:56:85:62:ac:55:f8:0e:28:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:22:45:F7:2F:3A:77:CC:AE:9F:B3:6A:82:99:76:10:1D:23:7D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75bde4a1-e87d-321d-917f-10d16a03a5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:50:90:87:c5:15:cf:de:54:a5:68:38:21:0c:9e:ca:25:c5:
         51:3f:f0:52:ea:7e:d6:ed:b5:eb:3b:70:bc:d7:fe:c0:3b:8e:
         50:e9:29:42:4f:e7:9e:e1:47:f3:1d:21:9f:b0:42:d5:e0:23:
         96:c9:d7:d2:91:82:93:7d:0f:b7:57:2c:b4:88:e5:85:84:0e:
         6c:3c:e3:a7:59:00:b2:6f:ee:30:14:79:fc:68:cb:10:3b:0f:
         84:f5:85:a0:72:6d:f6:42:d8:b5:f1:3e:7b:06:0e:14:b4:13:
         9c:78:76:a5:43:ab:ec:fb:82:2d:d7:b6:30:5a:db:ea:4b:eb:
         9e:ba:54:e8:31:6c:b2:2f:66:6a:e5:0b:0f:c7:be:bd:2e:68:
         12:37:ce:2d:86:7f:4a:62:35:09:0d:d8:fe:5e:c4:dc:81:c3:
         4a:37:b8:5c:aa:3b:a9:33:a2:95:fa:2e:a0:18:77:44:f4:7e:
         b9:0b:e6:c0:37:78:78:05:c6:ea:26:ae:d4:39:1a:d9:19:4b:
         cc:47:04:92:49:be:60:d3:c0:0b:94:c6:cc:6d:39:25:05:b2:
         5f:6d:9f:5e:5b:73:16:16:aa:94:e3:e6:16:9a:5a:f5:e1:53:
         15:22:88:ed:96:93:ac:f4:52:eb:74:b6:9e:22:2e:6c:8b:e6:
         c1:4d:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:45 2026 by rpki-client