Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36fa5113-02a9-33ad-840a-2d125a54f6e4.roa
File:                     36fa5113-02a9-33ad-840a-2d125a54f6e4.roa (raw, json)
Hash identifier:          SMYb3wZH9KopKXpJEKyXacTQGdCXuaujQ5pCebpLbZA=
Subject key identifier:   E7:56:C1:69:9F:AF:26:50:44:DB:C8:53:B2:06:49:0F:B4:7C:B4:F9
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584EAD1C4E46CEF9BF1E3BFD2300
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36fa5113-02a9-33ad-840a-2d125a54f6e4.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     30037
IP address blocks:        204.194.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:4e:46:ce:f9:bf:1e:3b:fd:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=5ec8957d-d25d-4451-ad18-e20c6c986fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:73:b1:0c:a8:28:bf:26:8d:ef:ec:5f:e3:
                    d5:d3:be:71:70:d7:72:18:7b:de:58:33:6e:88:00:
                    12:82:15:95:c3:49:8f:be:a6:18:21:8a:f9:20:c5:
                    ee:19:89:16:48:75:05:cf:57:de:94:0f:7f:97:d5:
                    69:7c:8b:52:1f:57:5c:a9:7f:f4:99:13:59:d5:b7:
                    a9:e4:0a:05:92:25:ef:50:7a:33:71:8b:94:90:b6:
                    ec:f5:9b:e1:8c:b5:20:a2:83:e6:24:37:75:78:c4:
                    8e:7b:43:e1:c1:76:42:3b:64:d8:c6:21:90:cb:3b:
                    7c:71:27:c1:bb:18:51:2a:ec:1e:66:59:3f:05:ab:
                    90:91:d1:5b:89:a2:6e:d0:b1:ab:4e:82:68:11:8d:
                    94:ca:c4:50:c9:67:9f:55:af:7d:52:ce:0a:7c:7d:
                    8d:5f:6b:c5:3e:f2:34:77:90:fa:a5:5f:a1:0e:59:
                    d2:af:e7:8b:8a:d4:1d:43:63:05:bd:c1:68:27:7d:
                    b8:98:d3:0b:9a:7d:eb:d5:64:d8:19:20:13:1a:ea:
                    bd:c0:1b:8e:be:12:da:e2:cf:d0:50:c6:4d:3a:af:
                    f3:c9:7b:0c:f4:0b:54:5d:08:56:63:9b:53:ca:4c:
                    65:ce:b5:89:96:07:e2:82:25:9e:04:e0:76:d5:b9:
                    72:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:56:C1:69:9F:AF:26:50:44:DB:C8:53:B2:06:49:0F:B4:7C:B4:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/36fa5113-02a9-33ad-840a-2d125a54f6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:34:ef:f6:75:c5:4e:14:08:28:b6:01:61:d2:3e:1d:06:f5:
         bf:b4:54:bb:81:61:b6:72:cb:49:ad:24:9a:27:16:b4:9b:86:
         d4:c9:e3:d3:38:95:cc:cf:8a:28:ed:3c:0e:57:87:1a:c4:18:
         68:2d:5d:c7:a4:ee:cd:1c:52:fa:d7:62:34:81:4e:ae:f3:cb:
         d4:bd:af:4b:3c:93:06:88:6c:12:c0:02:11:54:63:00:29:8d:
         d8:44:9f:ec:93:6d:06:96:20:b3:5c:69:df:55:cd:13:85:70:
         9b:a9:61:3d:9d:96:21:f8:ae:68:fa:54:97:5d:4b:0e:1e:f5:
         3c:7c:a6:68:3b:b6:63:92:83:34:8f:d9:58:6f:01:d8:9b:45:
         fb:c5:26:00:86:38:64:f6:83:56:ce:4e:cf:f8:59:d4:f5:b2:
         a4:4b:fd:66:ab:e4:a5:56:17:4f:b0:26:f0:cb:d4:98:e7:33:
         53:3a:c5:56:bd:0c:2a:39:67:01:cc:ce:38:65:a2:56:c3:b6:
         8f:47:b3:82:f4:bb:0a:67:6f:bf:bc:3b:43:b5:c4:e0:a3:53:
         06:82:f9:1e:f4:0e:c6:6a:55:ef:0e:1a:3f:34:14:e0:21:e4:
         b8:91:ac:c0:9b:75:13:5c:74:89:98:46:fb:a3:ee:b0:a0:7a:
         95:ed:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:49:26 2026 by rpki-client