Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/93fa23a0-0443-3255-8aec-c58e4592c0f7.roa
File:                     93fa23a0-0443-3255-8aec-c58e4592c0f7.roa (raw, json)
Hash identifier:          uz81kjvy15caXvtCYtFZlr/DZFbAZRuSAzz81HKSuUE=
Subject key identifier:   98:BA:8B:C5:7D:82:37:C9:E2:E1:A0:A1:35:EA:C2:21:03:28:7D:20
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D1F4A7A94B25EB29F394C7640
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/93fa23a0-0443-3255-8aec-c58e4592c0f7.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36492
IP address blocks:        136.22.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:7a:94:b2:5e:b2:9f:39:4c:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=f69ab400-d65a-4f8a-ab09-1bddf8f30b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:65:0b:0c:7c:3c:ce:16:dd:0d:77:fd:cd:
                    a7:fe:74:6c:f2:55:ae:21:e5:0a:33:bb:2a:11:5e:
                    34:ec:0c:a0:1b:28:c1:8e:91:d5:cc:1b:d0:4e:05:
                    b9:23:09:c9:dc:b6:d2:30:eb:fb:96:df:53:a6:15:
                    10:7b:96:b4:47:10:7b:7f:66:3b:de:12:5e:b1:a5:
                    01:43:a8:cf:9f:a5:c2:63:dd:91:0b:1e:d1:53:3f:
                    20:87:e0:e8:55:63:45:e0:91:3f:3e:75:7c:2b:b0:
                    6c:ee:c2:bc:92:54:45:49:42:75:2b:fd:cd:51:0d:
                    ca:e2:a5:4a:a9:28:65:22:0a:f5:a2:07:51:d5:ea:
                    8b:ec:e4:11:7a:02:01:38:80:92:3d:b1:30:9b:60:
                    71:b8:42:2e:27:51:25:5a:00:55:22:11:1a:df:f7:
                    f2:51:ed:57:c9:1f:e7:5f:02:3e:5d:6f:8b:19:62:
                    51:ff:4a:c2:6c:39:1d:dc:7a:6c:6c:73:9c:2e:10:
                    b5:4e:c0:a6:22:9b:6f:92:12:fd:57:75:88:2f:2f:
                    73:82:1b:15:32:5e:20:ee:5f:26:96:b6:6e:0f:97:
                    e1:91:14:b3:41:54:fb:74:7d:65:fc:0f:76:22:b3:
                    08:ed:1b:1a:03:6c:cb:54:54:a6:f8:b7:64:b4:bc:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BA:8B:C5:7D:82:37:C9:E2:E1:A0:A1:35:EA:C2:21:03:28:7D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/93fa23a0-0443-3255-8aec-c58e4592c0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:7b:c8:9c:38:9e:75:a7:18:a6:a4:cd:53:c6:f2:2f:fb:83:
         98:fd:85:ee:8e:d6:ef:5e:72:88:05:79:53:37:54:77:2c:2f:
         80:a7:af:df:bc:de:72:b6:ab:93:22:f3:81:45:2e:e7:5d:6c:
         c7:f3:c5:50:9f:56:d9:39:65:05:e8:ea:9d:92:f7:7d:a6:04:
         66:8f:6c:45:f3:5b:9c:cd:24:20:8e:6c:28:de:42:83:da:1c:
         1c:3f:7b:71:92:52:b8:1e:44:69:4d:3a:b1:4f:1d:ad:c8:49:
         0b:eb:8c:7e:0a:0c:82:3c:d8:9e:d7:c0:0f:c4:1d:d6:68:d1:
         75:3f:24:6e:52:be:8f:e5:76:0f:ba:bd:fe:7a:c0:80:c7:0b:
         7f:96:20:0c:41:cc:68:b0:ce:ee:6b:42:bc:ed:07:ce:8d:18:
         6a:e9:cb:3a:14:af:2e:42:14:29:5b:de:f8:e8:89:59:93:c3:
         87:a8:79:be:2a:c2:49:05:fa:e1:c0:56:cf:85:6a:58:19:fd:
         f5:4a:6a:08:f8:0b:62:99:86:55:e4:20:74:5a:29:70:b5:bc:
         cd:16:0f:b3:ba:2d:24:5f:31:b9:4a:da:ae:53:7e:3d:5f:57:
         41:c6:04:42:f3:6d:4e:b8:34:cd:b2:da:16:04:7f:2e:17:db:
         c9:9f:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:55 2026 by rpki-client