Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa
File:                     7de72217-a5ed-3f99-8532-8233575f8ade.roa (raw, json)
Hash identifier:          w3EVvRtC4up1TKTHjeQBCCsxxNRJaUg0ytbPjdT551I=
Subject key identifier:   34:48:CE:DD:3F:9F:AC:B5:A3:02:15:B5:49:D7:B3:1D:CC:EC:58:46
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497CF9D1CC25E0F878FBBF60
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:f9:d1:cc:25:e0:f8:78:fb:bf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aaa4b910-de1f-496d-84c0-835985e26a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:2b:63:f8:7f:8e:07:36:5a:1b:4b:7f:d7:
                    35:65:29:b9:ad:1a:f3:5e:b2:86:b0:81:fe:e2:1e:
                    80:31:32:6c:b7:0a:49:e7:08:a3:6a:f8:1a:e0:1e:
                    db:d5:81:05:a4:33:f2:63:b3:16:c6:05:70:18:51:
                    85:e0:04:31:c4:45:f6:5a:18:7a:90:e5:44:17:c0:
                    f9:60:45:2c:80:87:85:a2:f6:a9:b1:ea:6b:e7:c8:
                    66:93:f2:29:48:c5:d7:7e:96:b6:8f:dc:60:1c:0e:
                    64:68:76:37:b7:67:70:28:23:24:d1:ac:2d:f6:d5:
                    8f:b5:94:96:d0:7f:ce:b3:37:47:be:47:fc:ec:6b:
                    be:31:6b:ab:09:c1:a2:43:05:0e:ce:13:4a:ce:a3:
                    3d:22:a8:ca:c1:ce:05:e7:ce:0d:f0:07:c0:4d:d3:
                    3b:ce:81:d5:96:57:ae:44:d1:c8:49:55:5c:ad:7c:
                    c4:4d:b6:30:26:32:ce:2d:22:68:4b:c0:01:c4:8d:
                    df:cd:57:85:ac:02:78:f3:e0:fa:1c:6f:3d:f5:45:
                    d7:ea:c5:b0:6b:63:f4:e4:e8:93:ba:b2:2d:d8:ba:
                    88:81:cd:41:b9:d1:91:03:58:76:4c:fe:25:8c:5f:
                    b9:db:0b:29:a2:51:ad:f1:fa:7b:10:b1:87:b5:9e:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:48:CE:DD:3F:9F:AC:B5:A3:02:15:B5:49:D7:B3:1D:CC:EC:58:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:69:55:4b:62:69:5d:a1:0d:bb:78:55:db:11:81:46:2d:
         95:80:32:77:af:f5:7b:f4:61:19:ea:48:41:ce:32:9b:76:76:
         97:9e:b5:95:a7:83:ce:86:b5:ee:8e:5a:8e:6a:67:1f:f3:ca:
         16:69:6b:fa:c2:69:6e:f2:f6:07:26:36:15:08:11:69:c1:cf:
         bb:31:3e:ee:47:11:9d:2b:5e:37:00:6c:70:cc:a2:24:7d:7b:
         8d:15:ea:63:ac:ad:f0:b1:e6:2c:43:f5:20:51:46:1b:33:61:
         a4:61:ad:4a:1c:86:d2:de:17:17:4f:ee:2a:df:a7:fe:ea:75:
         3d:f5:dd:10:4a:88:c6:90:42:b3:11:dd:11:5b:1f:3b:f9:55:
         2a:3c:b3:c2:3e:28:64:14:d7:c0:03:59:c1:cb:d5:e9:77:ed:
         ff:ed:2e:57:f2:9b:78:a4:32:49:85:4d:1b:c6:07:46:c3:5a:
         85:05:b0:e1:42:17:d8:ed:63:84:67:4c:2d:36:08:a5:25:76:
         a4:67:d8:81:37:d0:25:6b:22:dd:0b:1e:8f:d2:97:d7:f5:ac:
         1a:ff:06:d8:51:6f:1e:d7:0b:33:19:43:c4:f6:c4:8b:d5:27:
         f6:39:9b:c3:85:4c:d0:70:eb:cc:2e:0e:55:7b:bf:26:3d:d2:
         49:9e:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:54:31 2026 by rpki-client