Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/879399f8-1838-3e7f-8191-8dc221dd89be.roa
File:                     879399f8-1838-3e7f-8191-8dc221dd89be.roa (raw, json)
Hash identifier:          obJwV+0RzB0rxHqMGpQb+uu4+lcrU0O6cTWdX/0lAfc=
Subject key identifier:   FD:6D:B7:E2:10:BC:40:DF:44:C3:4D:BD:2D:35:00:86:CE:8D:C1:E5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F497D0CCA7C3B7D44B7D27BA0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/879399f8-1838-3e7f-8191-8dc221dd89be.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:0c:ca:7c:3b:7d:44:b7:d2:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ecf99804-cee1-42d2-b94e-c41fd7c58954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:2d:bc:cf:79:27:b3:6a:d6:63:46:8d:ac:
                    52:8c:00:e9:f9:98:41:fd:d8:5e:e0:f6:73:1b:30:
                    9e:03:e4:70:b4:6a:4b:3e:f8:13:c6:29:c1:4f:32:
                    c9:b2:04:5a:bd:cd:80:d9:f7:71:82:58:95:3d:f2:
                    75:54:db:c4:4a:97:16:2e:f1:fe:36:05:f1:d7:6e:
                    40:26:83:cc:71:e4:71:4d:03:11:65:91:bb:e1:e3:
                    78:2e:cb:b7:32:3e:b5:58:43:6a:51:7b:23:ab:00:
                    a2:3a:9b:86:9e:c8:16:0c:3a:c7:66:58:2b:ba:bc:
                    1f:af:12:51:aa:f4:7a:84:dd:b9:6e:c5:49:da:78:
                    8f:a0:d8:14:73:a0:79:16:fe:16:ea:f4:50:ee:11:
                    66:c9:67:d7:44:d7:1a:27:32:99:a9:d8:1e:35:74:
                    86:78:a9:b6:83:f0:34:2e:cc:0f:e1:c8:63:e8:9f:
                    74:da:22:9c:54:da:28:5d:82:e6:f7:6c:39:81:6f:
                    f6:c4:ee:b5:f1:3a:9d:fb:31:c7:c0:fd:64:0f:c0:
                    ac:0e:87:2d:e7:b3:dc:91:c4:76:52:4e:09:4d:f4:
                    77:00:76:7e:85:e2:67:42:0d:64:6e:96:cb:76:30:
                    5b:ab:79:5b:24:39:7a:25:99:55:d3:6e:a4:ca:43:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6D:B7:E2:10:BC:40:DF:44:C3:4D:BD:2D:35:00:86:CE:8D:C1:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/879399f8-1838-3e7f-8191-8dc221dd89be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b5:af:bf:3c:e6:7b:29:2f:52:40:db:89:df:df:fa:45:97:
         c3:85:e7:32:0f:3c:a4:28:08:de:0a:0e:56:75:2c:9c:af:08:
         db:56:b5:ff:e7:5a:cd:8f:1f:0a:65:89:d8:09:95:2e:04:99:
         1a:04:d9:80:1b:91:02:b5:3f:03:7a:5f:ce:7d:6c:c3:68:d2:
         64:ba:91:b1:73:37:e5:39:cd:b7:e9:02:2b:98:10:b1:cd:3a:
         06:f3:00:a4:fd:2d:a5:87:fa:c5:cc:d7:c4:88:8f:b6:bc:e6:
         83:e5:4a:2f:2b:3e:ac:cc:6a:51:93:40:a1:5b:4b:20:ac:53:
         6d:7d:9a:de:9f:5b:4b:11:07:f1:d9:c5:13:b3:a4:b7:23:88:
         4c:51:dc:4f:4b:fc:b7:b2:17:9c:92:1f:25:1d:d1:c2:a8:b6:
         be:81:6e:e4:f7:57:fb:f5:62:df:b1:e2:44:bd:63:4b:2d:b4:
         bf:5e:58:a4:59:57:a6:86:1e:a7:17:02:bc:13:35:58:5b:b3:
         97:b9:ec:ce:79:a1:70:0f:b1:09:9a:73:e0:b9:4d:9e:a7:26:
         a1:78:f2:f4:fe:c9:4e:33:fa:b8:77:51:fc:f2:f7:a5:77:1c:
         f2:d8:f2:52:dc:73:29:78:2f:b8:56:86:f9:71:db:5f:84:77:
         05:55:a7:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfQzKfDt9RLfSe6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWNmOTk4MDQtY2VlMS00MmQyLWI5NGUtYzQxZmQ3YzU4OTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihktvM95J7Nq1mNGjaxSjADp+ZhB/dhe4PZz
GzCeA+RwtGpLPvgTxinBTzLJsgRavc2A2fdxgliVPfJ1VNvESpcWLvH+NgXx125A
JoPMceRxTQMRZZG74eN4Lsu3Mj61WENqUXsjqwCiOpuGnsgWDDrHZlgrurwfrxJR
qvR6hN25bsVJ2niPoNgUc6B5Fv4W6vRQ7hFmyWfXRNcaJzKZqdgeNXSGeKm2g/A0
LswP4chj6J902iKcVNooXYLm92w5gW/2xO618Tqd+zHHwP1kD8CsDoct57PckcR2
Uk4JTfR3AHZ+heJnQg1kbpbLdjBbq3lbJDl6JZlV026kykPqMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1tt+IQvEDfRMNNvS01AIbOjcHlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvODc5Mzk5ZjgtMTgzOC0z
ZTdmLTgxOTEtOGRjMjIxZGQ4OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADa1r7885nspL1JA24nf3/pFl8OF5zIPPKQoCN4KDlZ1LJyvCNtWtf/n
Ws2PHwplidgJlS4EmRoE2YAbkQK1PwN6X859bMNo0mS6kbFzN+U5zbfpAiuYELHN
OgbzAKT9LaWH+sXM18SIj7a85oPlSi8rPqzMalGTQKFbSyCsU219mt6fW0sRB/HZ
xROzpLcjiExR3E9L/LeyF5ySHyUd0cKotr6BbuT3V/v1Yt+x4kS9Y0sttL9eWKRZ
V6aGHqcXArwTNVhbs5e57M55oXAPsQmac+C5TZ6nJqF48vT+yU4z+rh3Ufzy96V3
HPLY8lLccyl4L7hWhvlx21+EdwVVp3E=
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:29:28 2026 by rpki-client