Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa
File:                     ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa (raw, json)
Hash identifier:          nYBP/u2VStISSoD4rzF7Mqr0apH5OHADGbnEPcfS5Us=
Subject key identifier:   EF:EA:5A:AD:13:4C:6F:12:BB:6F:EA:D4:EB:3E:D7:D0:DF:E8:45:FE
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D1F4A7E8DA7FCBE4C4F60DF40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36492
IP address blocks:        136.22.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:7e:8d:a7:fc:be:4c:4f:60:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=7afe08b5-b013-45ad-afe3-f67107492fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:6d:7d:3c:71:05:8a:2d:e5:49:e2:fd:7a:
                    72:07:17:44:5f:79:bb:78:e3:78:e6:9c:2c:e8:e7:
                    f3:c1:f2:0b:1f:50:b3:6f:f4:84:ea:28:4b:c3:bd:
                    b7:28:30:bc:df:eb:15:4a:57:8e:f1:6d:57:35:d9:
                    92:5f:d9:97:f3:a6:41:94:9b:67:1c:83:f7:0a:8b:
                    9b:82:1d:2f:d4:f3:d6:32:51:f0:10:1c:e8:91:36:
                    2c:45:ba:a7:eb:05:d0:ca:e6:53:6f:c5:94:5b:82:
                    87:d2:d1:a0:a5:4f:21:db:b4:3e:6e:d1:62:5c:ba:
                    90:93:eb:7c:4d:f7:fa:c3:90:50:a3:a1:bb:2d:16:
                    0b:89:ad:ce:8e:51:6f:c9:20:4e:99:53:53:e1:71:
                    1b:47:7d:e7:ed:dc:8e:09:b9:cc:22:ad:69:71:2f:
                    05:3b:1f:67:a9:eb:05:37:22:60:2b:99:db:a5:3c:
                    44:a0:57:42:dc:a5:5f:47:05:2f:0c:dd:78:47:3b:
                    27:28:03:54:a2:8a:1a:1e:b5:14:83:84:a5:3c:3c:
                    97:1f:da:0b:a8:8e:5d:a2:52:4c:3b:c7:f3:50:5c:
                    d6:ae:0c:da:ae:3e:f2:3c:ad:89:9d:2d:c5:20:d0:
                    d9:ca:5e:98:e4:db:4b:21:d3:93:d8:b0:48:4f:2f:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EA:5A:AD:13:4C:6F:12:BB:6F:EA:D4:EB:3E:D7:D0:DF:E8:45:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:41:57:4e:f2:78:e9:f5:00:cd:7d:ee:c6:65:1c:30:1d:61:
         c6:9e:76:9e:e3:8f:6c:3e:fa:2a:61:c0:2c:af:6e:16:03:dd:
         36:8f:b8:c3:71:ef:81:92:17:46:8a:26:1a:7f:b7:42:5c:28:
         9b:70:32:6f:02:d9:15:e7:7d:b1:80:31:a4:58:75:31:4d:1b:
         70:ce:2d:2d:0b:b4:ea:63:0d:fd:e0:a5:e2:70:ef:db:09:4f:
         33:49:00:16:1f:dd:06:4b:fb:f1:eb:cf:88:e2:b2:c8:84:64:
         bb:d5:bc:bd:99:94:60:b7:e2:cd:25:bc:56:2d:1b:41:96:71:
         2b:9c:0d:b9:b9:0a:9b:45:16:72:d9:b0:0b:32:a5:10:29:1c:
         64:df:de:fc:fa:0a:b7:c0:77:0c:79:ef:03:a4:43:08:02:d4:
         56:fb:70:9e:45:63:1a:b0:6d:ca:b8:04:65:e0:c4:35:ec:d3:
         c6:50:58:2c:63:2f:20:59:a9:ad:af:76:79:39:08:6d:b5:e9:
         db:60:3c:60:a0:6d:d8:c8:c3:91:59:60:50:66:61:5e:90:da:
         e6:c8:ef:1f:ce:35:40:87:91:7c:9c:96:8f:10:ed:af:f9:3d:
         2b:18:79:b1:f4:34:6f:45:f1:2e:99:7c:4a:be:9c:8c:6a:6b:
         5e:aa:72:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSn6Np/y+TE9g30AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
N2FmZTA4YjUtYjAxMy00NWFkLWFmZTMtZjY3MTA3NDkyZmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2ptfTxxBYot5Uni/XpyBxdEX3m7eON45pws
6OfzwfILH1Czb/SE6ihLw723KDC83+sVSleO8W1XNdmSX9mX86ZBlJtnHIP3Coub
gh0v1PPWMlHwEBzokTYsRbqn6wXQyuZTb8WUW4KH0tGgpU8h27Q+btFiXLqQk+t8
Tff6w5BQo6G7LRYLia3OjlFvySBOmVNT4XEbR33n7dyOCbnMIq1pcS8FOx9nqesF
NyJgK5nbpTxEoFdC3KVfRwUvDN14RzsnKANUoooaHrUUg4SlPDyXH9oLqI5dolJM
O8fzUFzWrgzarj7yPK2JnS3FINDZyl6Y5NtLIdOT2LBITy+4aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/qWq0TTG8Su2/q1Os+19Df6EX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZmYyNTNjZjAtZWZmNS0z
OGJiLWJiMmUtY2ExMzUwYTM2ZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJBV07yeOn1AM197sZlHDAdYcaedp7jj2w++iphwCyvbhYD3TaPuMNx
74GSF0aKJhp/t0JcKJtwMm8C2RXnfbGAMaRYdTFNG3DOLS0LtOpjDf3gpeJw79sJ
TzNJABYf3QZL+/Hrz4jissiEZLvVvL2ZlGC34s0lvFYtG0GWcSucDbm5CptFFnLZ
sAsypRApHGTf3vz6CrfAdwx57wOkQwgC1Fb7cJ5FYxqwbcq4BGXgxDXs08ZQWCxj
LyBZqa2vdnk5CG216dtgPGCgbdjIw5FZYFBmYV6Q2ubI7x/ONUCHkXyclo8Q7a/5
PSsYebH0NG9F8S6ZfEq+nIxqa16qcss=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:12 2026 by rpki-client