Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/96e976b9-f104-3e7a-bd13-45a0df4c3ace.roa
File:                     96e976b9-f104-3e7a-bd13-45a0df4c3ace.roa (raw, json)
Hash identifier:          mpEFmzmgB9fsaRm2Gn4SKgFw6UJA7/hVbGzprZo3chA=
Subject key identifier:   46:29:11:E3:09:B5:13:62:1C:97:9C:D2:E7:8D:27:74:83:91:E5:38
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F4328584EA17A7432C44A295557CC8DE0
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/96e976b9-f104-3e7a-bd13-45a0df4c3ace.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     10111
IP address blocks:        174.136.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:74:32:c4:4a:29:55:57:cc:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=7f3afa10-99e3-4848-aafe-a92febe96e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:62:90:e2:94:b7:79:8f:1b:c2:18:14:55:
                    51:42:88:39:1f:a1:94:03:bf:37:8b:75:43:05:65:
                    67:db:68:9e:e1:3f:3a:e2:3f:85:5a:66:cc:b0:37:
                    a0:0e:15:2d:6c:94:4a:48:b3:ef:cf:47:da:ef:4d:
                    28:bb:56:35:5c:9d:61:ff:a5:9a:78:83:78:b8:42:
                    1a:53:cc:2f:76:48:ee:ea:c1:01:49:d9:cd:f2:e0:
                    d1:08:81:8c:d0:d5:a8:54:78:3f:3e:e2:82:43:d3:
                    d6:90:1b:bd:5a:7f:2d:7b:62:e0:56:4b:cc:64:3b:
                    98:14:7c:d7:53:32:fd:75:33:ec:c2:a1:45:f7:6f:
                    3b:67:da:65:6e:a6:f3:30:37:3b:8b:11:d1:39:1f:
                    f8:a8:32:e3:03:1d:24:49:9e:13:27:d8:c8:33:94:
                    22:6d:00:d9:c2:59:26:dd:29:ef:ce:80:2a:b7:5b:
                    3e:18:6e:4e:37:f1:72:31:df:2c:00:46:72:f6:a7:
                    58:61:70:ac:c7:99:4b:2f:20:f0:3c:3f:c9:54:74:
                    a9:62:e3:1a:0a:01:64:de:ee:10:39:36:bd:6e:26:
                    7a:da:79:44:bb:83:65:d2:ae:29:82:78:02:c9:a8:
                    64:93:bc:a5:6c:d6:14:86:e6:b2:c9:f8:4e:83:a9:
                    a5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:29:11:E3:09:B5:13:62:1C:97:9C:D2:E7:8D:27:74:83:91:E5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/96e976b9-f104-3e7a-bd13-45a0df4c3ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:14:c0:35:f2:8a:46:70:f4:70:0f:c9:2c:79:6d:df:b6:d3:
         36:af:bc:ac:d5:25:25:1b:64:20:e1:e9:21:19:bb:7b:22:f6:
         ed:b1:14:55:cb:ba:14:76:03:01:41:e3:86:46:a0:bd:bc:a2:
         94:7a:9c:a2:8d:dd:be:0a:2e:c1:a2:35:e4:0d:78:d3:2f:67:
         55:4e:37:b8:d6:6c:0e:8b:7b:dd:7f:54:46:cc:cc:d3:91:fc:
         b2:22:c8:2c:25:fc:fd:59:c5:a6:37:ff:91:9b:db:3f:1d:e2:
         42:00:e5:6c:ee:62:63:6b:f4:99:47:52:59:ef:53:c0:a3:5e:
         b8:c2:03:3d:42:10:e7:e0:30:17:77:0b:47:d9:be:4d:e4:32:
         c6:df:3a:b5:19:08:f1:fc:a6:92:79:03:e3:b8:18:49:ef:22:
         af:88:46:a8:c5:e6:2c:c5:71:e2:81:7f:60:fe:43:65:5a:4a:
         53:1a:bd:12:81:ba:d3:36:b7:38:97:5f:a4:55:c3:0a:e0:ff:
         53:c3:8f:c1:53:af:c1:0c:ee:59:f9:e1:39:ab:a2:49:94:74:
         8b:52:c9:d4:0e:c0:2a:8e:e1:b1:23:89:d8:86:37:b6:ff:1d:
         26:2a:3e:e0:dd:8a:12:86:0d:27:b9:1f:cb:2c:c5:41:62:cf:
         dd:ad:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:46:18 2026 by rpki-client