Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/92a0ae58-4ad5-38af-b828-5fc2e7d5f90f.roa
File:                     92a0ae58-4ad5-38af-b828-5fc2e7d5f90f.roa (raw, json)
Hash identifier:          XcRSWfq77UQ1jR5HIgjmjoljbvgTnreKRED1hhFEuf4=
Subject key identifier:   CC:08:2F:87:16:1E:82:DA:B6:B7:56:E5:2E:C9:25:3E:51:D9:4C:47
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0380A20B4A5476D7856A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/92a0ae58-4ad5-38af-b828-5fc2e7d5f90f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:38:0a:20:b4:a5:47:6d:78:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=e8d076f8-6c3f-4844-82ab-fed3b58af4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9e:47:7b:2d:1d:ac:4e:db:dc:f4:9b:7a:ed:
                    26:34:a4:16:0e:58:68:8d:78:de:8c:8b:e6:03:5e:
                    73:a8:df:50:3d:b9:b5:6c:67:e3:01:2f:74:6d:5d:
                    24:a1:af:42:6b:a6:17:f0:cc:f9:a6:e5:91:7a:2a:
                    54:ea:80:ef:e1:6f:33:6d:17:e7:0e:cf:01:47:b3:
                    71:f7:91:b6:3e:b1:1a:d7:01:3b:65:98:2f:82:19:
                    7b:9d:d6:6f:c6:53:c9:25:38:fc:9c:2e:02:4d:4c:
                    6c:2c:80:21:c7:24:3c:7c:77:6e:5c:84:a1:e5:4f:
                    38:6e:06:87:19:7b:06:02:19:7b:a2:69:d3:d3:a6:
                    ba:b7:fb:b7:a1:01:44:ea:69:c9:69:1c:73:14:1d:
                    6a:14:b3:5c:16:da:18:d9:db:15:18:47:0a:c9:5e:
                    81:be:8c:cc:1d:7d:e0:ba:de:ab:8d:5a:84:89:79:
                    9d:86:fd:7c:ca:5d:e0:e0:d0:3d:d1:01:d5:37:5f:
                    33:e7:e3:57:01:a9:cd:54:1d:39:da:a5:1a:22:07:
                    1b:b8:6e:cd:34:0b:04:22:af:53:99:3a:94:a8:a4:
                    3b:0d:90:97:a4:60:4f:1a:1f:5b:73:b0:9c:bb:2b:
                    5d:24:a3:0d:fb:f8:bf:07:cc:0f:4d:91:9b:fc:13:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:08:2F:87:16:1E:82:DA:B6:B7:56:E5:2E:C9:25:3E:51:D9:4C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/92a0ae58-4ad5-38af-b828-5fc2e7d5f90f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bd:14:9c:fa:6c:b6:3b:c1:0e:f0:13:22:9f:13:dc:9c:1d:
         ca:30:9b:7a:43:25:11:c3:5f:7f:db:1f:03:55:d5:d2:f6:2f:
         48:7d:cc:3d:d3:21:2e:f9:29:3e:f1:13:78:9e:a5:dc:a8:ca:
         35:d4:71:da:34:15:0e:a4:e1:66:2d:29:48:c8:07:07:0e:3f:
         12:24:7c:d4:e7:20:95:1d:7d:1e:f9:89:b9:79:62:ed:95:c6:
         7b:47:ba:bc:1e:68:39:0e:10:00:1d:51:c6:20:36:b6:bb:47:
         ef:0d:83:3d:a6:45:af:58:37:52:e0:18:69:e2:c2:27:72:f7:
         58:a3:46:6d:f4:4f:75:a8:75:ad:1f:f0:fb:93:52:1e:46:58:
         74:ee:58:c5:70:68:c3:2c:8f:61:5c:be:c4:39:fa:af:60:c3:
         26:ab:c3:33:e6:05:99:42:22:5e:ad:03:8e:55:bb:bc:f2:22:
         a8:7f:5a:34:06:77:08:e2:57:41:f7:61:d2:83:2a:63:a7:69:
         c7:48:e2:a0:00:40:b8:ea:20:19:36:6d:61:a2:df:0e:dd:7c:
         77:cb:a0:73:57:cf:24:2d:a0:f2:91:ae:a8:36:24:1b:78:c1:
         04:16:5c:42:5d:d0:1c:4d:e8:d7:bb:22:78:bf:e8:7e:36:27:
         73:5f:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:35 2026 by rpki-client