Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6777a298-71af-3ad7-b3d3-490488b7f2d5.roa
File:                     6777a298-71af-3ad7-b3d3-490488b7f2d5.roa (raw, json)
Hash identifier:          QR677X1yI9TNE933DNGonLe6nfzRrc22/0cNG0JZ6Iw=
Subject key identifier:   BE:DA:03:30:21:E7:D7:EB:68:B8:88:A3:60:3A:E7:73:E5:FC:35:E2
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584ECD3731B0E761E61BAF982800
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6777a298-71af-3ad7-b3d3-490488b7f2d5.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     62240
IP address blocks:        216.169.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:31:b0:e7:61:e6:1b:af:98:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=2f6584d0-249f-4496-90c1-28257e30b70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:c3:50:2f:7f:b0:4d:df:02:83:8e:76:92:
                    05:bc:9a:b7:2f:a9:59:f9:84:6c:1e:ae:be:78:fb:
                    3b:f5:28:47:91:61:b8:ae:e8:13:35:40:3d:75:46:
                    e4:39:2d:d8:cf:f3:98:9d:69:7f:c2:bb:87:b6:18:
                    59:c9:b3:19:cb:6f:88:1f:e8:b6:76:96:1f:c0:24:
                    46:07:a5:33:38:78:9a:72:a3:47:8c:e3:ac:aa:b1:
                    1f:0f:71:35:d3:e9:92:09:cd:5e:eb:28:2e:d6:12:
                    99:cb:20:8f:b0:2d:a7:a5:92:c0:4b:93:d5:2f:9c:
                    ce:c5:16:5c:a7:05:d0:66:6f:10:c0:c9:8e:74:ac:
                    f2:0c:f8:47:5e:ef:8c:e1:04:e4:a3:ce:93:8f:88:
                    cd:20:c6:74:1d:ba:12:4f:54:dd:d7:bc:76:93:92:
                    25:64:d0:33:0b:ed:f3:67:3f:2c:f8:aa:1c:2f:e6:
                    2d:80:dd:df:76:a0:bb:cf:bf:38:0e:ed:bb:e5:db:
                    11:aa:33:c8:53:04:62:a8:75:36:f0:b2:dc:7b:ab:
                    74:99:76:73:88:d4:bb:1b:90:d7:a8:9a:a8:87:48:
                    eb:d4:c4:fd:d0:0f:6b:dc:40:09:04:03:8d:5a:a9:
                    9c:4a:71:8b:49:1b:3b:12:6f:b9:1a:61:90:dd:18:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DA:03:30:21:E7:D7:EB:68:B8:88:A3:60:3A:E7:73:E5:FC:35:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/6777a298-71af-3ad7-b3d3-490488b7f2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.169.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:41:82:0e:da:82:37:5d:c8:88:ae:5c:8f:e7:52:b5:60:45:
         df:7e:e2:7f:c6:f0:a0:68:63:e8:6a:2a:fc:a8:94:77:87:6b:
         62:05:9c:51:6d:bb:c4:c2:57:68:eb:5b:07:a7:b6:58:36:87:
         a6:58:b3:1b:19:d7:dc:32:6c:49:77:62:26:51:7d:c6:10:b2:
         b6:31:3b:b6:83:f3:df:1d:bc:4b:cf:df:e0:07:26:fd:56:ba:
         f6:7e:5a:0b:d9:42:99:93:2c:2a:db:48:b2:38:ea:c5:65:84:
         b7:ba:76:62:60:fd:3e:0c:48:cc:1a:fb:4b:d2:a2:8a:3b:a4:
         13:83:6e:4b:12:e4:9a:14:55:ee:5c:96:0f:85:88:2a:11:da:
         73:36:ca:ac:02:11:d1:f1:86:5c:f0:f8:4f:d7:04:00:ee:98:
         6c:c4:15:1d:be:82:85:78:37:be:3c:69:10:a9:21:92:3c:9e:
         00:4d:47:1d:93:31:09:82:ec:39:7a:38:e6:df:ac:24:1a:e3:
         11:33:d7:cb:a0:70:74:46:3d:05:35:e9:14:13:1a:9d:72:c1:
         19:dc:a5:f2:f1:23:fe:37:99:75:92:56:39:c7:8c:dd:04:2d:
         a1:10:cc:47:5d:df:13:7f:88:ff:dd:5e:bb:20:fe:1f:43:da:
         c7:f7:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:05:15 2026 by rpki-client