Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/90a65a4c-2884-330c-88c4-d27330dc7d75.roa
File:                     90a65a4c-2884-330c-88c4-d27330dc7d75.roa (raw, json)
Hash identifier:          CX6IN1ZYdi34hmTJ5a8KhrNH0S4PcQ8GImmSGn7alhA=
Subject key identifier:   6C:FB:63:E5:A0:01:31:2F:9B:36:49:AA:9C:4F:83:68:5F:B3:0A:2A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584F4984DEBC01E0B9D4387D3000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/90a65a4c-2884-330c-88c4-d27330dc7d75.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36492
IP address blocks:        136.22.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:de:bc:01:e0:b9:d4:38:7d:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7642dc3e-1aa3-419c-ba6b-e997bb5e0db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:70:97:6a:d6:3c:8f:76:d0:1d:a9:84:f9:71:
                    9a:6e:ab:7c:f1:d0:3c:69:d3:22:e7:f1:c5:7e:85:
                    11:6b:0f:cc:41:f3:62:e2:90:ab:b5:fa:60:e7:46:
                    c7:76:4f:fc:3d:5c:cc:e2:7a:a1:69:a6:76:c9:ea:
                    2e:0b:02:3b:9d:7d:d5:7e:7a:43:3b:e2:6a:0f:cd:
                    05:f1:94:fa:01:c2:af:48:46:4b:3d:f7:40:f9:6a:
                    89:37:64:be:45:be:39:a3:96:e5:86:80:de:be:42:
                    e5:93:67:9d:f7:ce:8e:be:98:0e:e1:f4:1e:33:4d:
                    6e:9b:6a:ed:89:74:46:3a:8d:60:ba:0f:c6:1a:15:
                    fd:01:37:c7:37:cb:76:b4:42:54:d4:f9:be:21:66:
                    e0:55:8e:84:8a:2b:3a:23:8a:a5:b4:5e:2a:05:2d:
                    c3:8a:e0:83:01:9d:3d:74:30:df:81:9e:55:6d:08:
                    b3:14:a7:45:56:98:f1:8a:21:50:4c:43:b8:7d:c9:
                    32:15:c1:5f:5a:fc:21:6b:0a:35:d9:02:b6:f7:71:
                    97:23:08:a4:6d:76:0e:87:57:e4:2d:65:21:bf:44:
                    cd:5e:b5:36:11:07:d2:ae:70:33:59:04:bc:87:43:
                    4b:31:37:48:f7:40:2f:8f:41:98:a8:91:f1:b6:51:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FB:63:E5:A0:01:31:2F:9B:36:49:AA:9C:4F:83:68:5F:B3:0A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/90a65a4c-2884-330c-88c4-d27330dc7d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:20:8c:59:0a:fd:1f:a7:a9:4d:43:a0:3a:7f:9b:c9:9f:
         fe:f9:97:31:7f:42:61:c7:4a:0d:91:a1:49:34:58:37:69:eb:
         0a:79:56:68:1f:d5:a9:ff:c7:43:82:60:a2:f1:ee:b7:1c:83:
         1e:dc:b6:dd:60:e6:ac:20:0c:fa:78:5d:a3:e8:cc:46:d1:e1:
         76:fb:c4:57:9c:d9:d1:aa:41:47:56:f4:eb:51:d7:44:50:d8:
         54:e1:7f:2f:f9:25:89:7f:9a:e0:8d:59:ef:cc:6e:65:8a:41:
         32:58:62:f3:31:31:c3:8d:3b:6b:19:6b:eb:e9:fe:56:f1:8a:
         a2:b6:17:7b:86:94:12:95:72:98:9c:63:72:87:8d:04:5a:e1:
         b8:b3:fe:0c:9f:af:32:7f:54:9e:2d:39:fc:1b:54:d6:c7:0d:
         d1:23:09:36:8a:ce:ce:ef:93:63:5a:35:07:49:5a:c9:a3:ca:
         c9:09:20:03:b7:73:6b:18:96:85:0b:1f:d0:a7:0f:50:8e:78:
         f1:f7:24:da:34:30:13:89:48:24:0c:06:26:9a:9e:55:ee:31:
         a8:b6:59:a3:1c:1c:7f:c7:92:ac:31:00:f3:16:38:a8:7c:77:
         f0:55:38:ee:f6:f7:d9:4c:8a:aa:0e:c8:72:4b:1b:74:bb:74:
         d8:aa:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:32:54 2026 by rpki-client