Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
File:                     1b223cca-1417-3066-b397-805664ddda0b.roa (raw, json)
Hash identifier:          3ufFkXGHARPalm2CxwaSX2flCO6uQNUAScOiWIsSZ+A=
Subject key identifier:   2D:86:36:8C:1F:18:F9:67:92:B5:DA:A5:98:BC:37:A0:BB:CD:29:78
Certificate issuer:       /CN=836bd820-5504-47bf-baac-f0d3a943c97c
Certificate serial:       010D0C9F4328584D0FB541FBAC31E7FC1D242B80
Authority key identifier: 45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     36419
IP address blocks:        64.239.0.0/22 maxlen: 24
                          204.10.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0f:b5:41:fb:ac:31:e7:fc:1d:24:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836bd820-5504-47bf-baac-f0d3a943c97c
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=4c6c4549-96cd-4aaf-b273-645b1e21af84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bf:52:24:be:44:4c:1f:2d:2a:3c:e5:83:2b:
                    d8:26:32:69:24:f0:68:19:4a:90:9d:e6:3c:8e:05:
                    71:de:ce:0d:eb:61:04:f9:63:5d:18:51:58:c6:b4:
                    00:b7:52:e5:9c:42:07:eb:98:ac:d8:5d:3d:2c:a3:
                    3c:19:f5:b3:18:86:58:14:48:be:fa:bb:9c:c0:36:
                    22:2e:fd:3f:cf:33:da:ed:7a:60:aa:a6:4a:38:d4:
                    88:6b:fc:46:e3:35:0c:6a:c3:3a:15:79:5b:be:ca:
                    a5:40:7a:12:4c:c3:ad:fa:f6:16:2c:39:5b:c0:b1:
                    f2:d0:ef:98:7c:ad:93:90:f2:80:e2:0d:cd:d7:03:
                    10:43:36:4c:2d:e1:ee:c9:ce:59:20:35:52:91:e2:
                    56:1c:fb:80:51:d8:2b:ea:00:fa:53:d6:c2:31:2b:
                    a5:c9:a9:62:d3:c5:7a:5e:fe:19:5b:ff:43:99:c1:
                    45:41:83:fb:68:46:96:64:06:b4:ef:c8:93:50:16:
                    43:27:35:ce:b9:0f:4b:c5:23:b4:60:66:14:ba:dc:
                    48:e0:f0:77:c6:a6:10:62:a4:71:1e:b1:14:91:f8:
                    bc:29:48:e1:c6:4e:9b:cd:4c:47:fe:5e:71:9f:38:
                    f1:87:12:67:8b:01:f5:f8:c9:94:ee:e5:ab:15:3c:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:86:36:8C:1F:18:F9:67:92:B5:DA:A5:98:BC:37:A0:BB:CD:29:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.crl

            X509v3 Authority Key Identifier:
                keyid:45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.0.0/22
                  204.10.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0e:33:02:6f:77:f6:66:e2:66:97:26:c9:aa:c9:f5:f8:1c:
         2b:bc:f7:0b:fa:19:88:f2:81:1e:3f:c2:4b:e4:33:83:58:49:
         d1:d3:73:b7:e4:b2:57:13:cf:b9:87:40:3c:40:c9:e8:7f:90:
         f2:45:48:04:bf:b4:41:14:6a:e9:1a:3c:0d:7c:52:de:e7:84:
         a6:a8:db:db:05:28:00:2d:0b:38:fb:01:95:43:6d:73:b6:5d:
         ec:b0:d5:56:8a:c2:d6:aa:46:82:1a:e0:8e:02:a3:62:9a:9f:
         ec:3c:48:7b:60:1b:6a:25:ec:9d:49:5e:b2:70:95:1a:41:4d:
         99:45:97:ec:21:39:04:fb:b5:8b:98:14:83:f7:5e:eb:8f:cd:
         2d:f5:c4:da:51:3a:e5:56:af:53:24:4e:fd:03:1c:f6:4c:4e:
         fb:b0:19:e6:26:a4:5c:25:54:8d:4f:dc:87:32:ff:ef:35:08:
         80:6f:90:76:a9:73:89:21:9c:02:98:47:25:df:22:f2:e3:da:
         d9:46:ce:a1:6d:e4:fa:2c:f8:98:85:40:eb:82:67:b0:e9:3c:
         24:92:59:f6:11:e7:ac:50:8e:3b:3d:cb:9a:97:57:3f:5a:cf:
         5a:b2:1e:78:e8:6b:5d:02:8a:37:b4:3f:f0:27:fb:02:8f:34:
         f9:de:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:23 2026 by rpki-client