Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b20c18e0-f1c3-3bc3-84d1-94afec9727dd.roa
File:                     b20c18e0-f1c3-3bc3-84d1-94afec9727dd.roa (raw, json)
Hash identifier:          Lowl8v2oLjvQt0BW0h96CGweCQtLFawOyjujyv08qEs=
Subject key identifier:   E0:14:73:CA:5D:EB:7E:7D:97:3D:27:A9:AE:74:A3:AB:B3:7E:2E:80
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D24E0F0387CE756067BD86180
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b20c18e0-f1c3-3bc3-84d1-94afec9727dd.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        136.22.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:f0:38:7c:e7:56:06:7b:d8:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=36f316c7-d1cc-4e4e-80b5-c12332d97758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:33:f3:8c:e9:cc:28:96:ce:3f:4d:19:74:
                    63:6a:45:5c:15:87:f5:77:4d:dc:2a:e7:56:66:8e:
                    f9:87:b4:46:d2:6d:60:5d:30:ed:36:83:a8:28:11:
                    9c:fc:3d:44:4c:c4:fe:e1:20:21:37:de:99:5e:81:
                    3c:38:6b:57:e4:a2:4d:25:fa:3d:63:14:86:cc:a3:
                    7d:85:d3:4c:24:47:a9:01:53:f2:80:af:44:59:7f:
                    53:ad:cb:f1:0a:7e:32:96:5a:a5:35:99:5a:e0:7f:
                    82:67:8f:de:20:cd:c1:1b:99:8f:be:c0:c8:a2:46:
                    00:f2:20:ed:10:8c:c7:62:52:22:67:0e:b4:88:42:
                    d8:0d:8e:28:71:1c:72:32:ab:b2:42:51:e9:5d:19:
                    3f:f1:9d:d1:7a:10:c5:ec:03:92:9b:ff:26:e1:84:
                    1b:91:45:7d:1c:60:c1:5e:b3:23:08:08:f4:06:05:
                    05:15:26:21:fe:bb:14:1e:6e:db:d4:66:76:90:c1:
                    75:3e:eb:a8:4b:ec:e1:a2:8d:0e:f8:d0:0f:7e:48:
                    72:4d:a8:b4:c1:3f:b9:7f:fb:09:fa:b6:0b:36:29:
                    c5:85:82:bb:59:3e:6a:7e:5f:77:f3:08:ab:9c:1f:
                    6c:ec:9a:d2:8a:95:0e:71:80:6a:33:32:c2:90:f6:
                    00:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:14:73:CA:5D:EB:7E:7D:97:3D:27:A9:AE:74:A3:AB:B3:7E:2E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b20c18e0-f1c3-3bc3-84d1-94afec9727dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:dc:13:88:65:fe:5d:f9:04:39:bd:ba:d7:43:75:b8:3d:
         bd:0a:da:3d:a8:d7:eb:cb:c5:4d:e9:15:c0:a6:1f:43:60:91:
         fd:1e:08:3b:e0:3d:99:5a:ed:27:8d:bd:93:95:9d:b4:66:d4:
         51:6e:64:15:72:b5:1d:6c:16:c2:53:ce:4a:55:ef:e4:e6:5f:
         60:45:c4:f4:02:a0:9a:f4:c5:51:1a:b8:74:74:ff:3a:b8:4b:
         b8:00:16:49:17:23:b0:29:03:88:5f:01:d6:af:6b:ac:5b:75:
         a6:d4:08:9a:b7:98:c9:f4:30:79:18:a7:d6:f1:6e:7d:cb:93:
         59:3d:23:6d:3d:e8:c2:53:dc:81:fe:9c:0f:bf:d3:e1:65:f3:
         4f:ff:49:bd:92:f0:95:b7:16:65:e1:45:14:ec:2f:46:f1:79:
         be:72:dd:f5:c1:a8:f1:24:70:ca:8a:4a:82:c4:5d:56:5f:4e:
         d7:b3:cd:b0:11:4d:38:eb:db:bc:77:af:8e:6c:dd:60:33:62:
         cd:d7:4d:6a:8c:a3:ae:ca:3a:f6:6e:79:db:ac:8c:36:e7:02:
         88:9e:ea:84:08:cb:91:0c:cf:43:df:52:ce:21:58:46:9d:16:
         d7:91:34:b5:e7:d2:be:a1:f0:05:1e:46:37:c1:48:79:b1:4a:
         44:18:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:21 2026 by rpki-client