Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/305d5804-7648-315f-9b20-30d795b457ca.roa
File:                     305d5804-7648-315f-9b20-30d795b457ca.roa (raw, json)
Hash identifier:          rcyd62QpqX6zZ9XqV82DUONQQmNKMbYL06dNuM4pNZg=
Subject key identifier:   B5:77:9D:3F:08:EB:67:1E:A3:09:91:E5:51:4F:3D:E1:A6:05:07:D0
Certificate issuer:       /CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Certificate serial:       010D0C9F4328584F093CF2CEF874F19F25EECA80
Authority key identifier: D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/305d5804-7648-315f-9b20-30d795b457ca.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     46887
IP address blocks:        204.13.136.0/22 maxlen: 22
                          204.13.136.0/24 maxlen: 24
                          204.13.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f2:ce:f8:74:f1:9f:25:ee:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=4aa14fde-db2f-467f-9212-800361042105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:78:8b:5f:17:39:b8:0f:da:12:5a:e5:0b:86:
                    c1:3c:21:ac:16:5c:68:61:3e:90:73:95:61:57:93:
                    95:31:12:18:02:21:47:70:8c:14:d1:60:8d:36:d3:
                    86:33:7c:0b:b9:35:b4:9a:dc:54:41:eb:48:a3:6d:
                    1f:83:55:9b:f1:58:b1:9a:03:ca:47:91:1c:6e:11:
                    51:e9:56:f3:9b:75:35:72:ab:49:7f:df:ca:41:b5:
                    e7:7d:6d:3d:06:5f:8a:a2:91:03:87:f6:68:4a:71:
                    ba:5a:20:8f:90:3b:64:b2:96:28:9b:4f:e8:5c:26:
                    fa:e1:da:42:fc:08:66:56:67:a3:0d:ac:63:bd:d3:
                    27:66:74:90:4d:0e:82:eb:61:d1:bf:a1:04:a2:74:
                    a8:5a:81:64:81:ad:74:68:dc:b2:a6:3e:99:99:2e:
                    54:43:53:b4:6a:92:7c:23:70:3f:9f:8d:98:9d:79:
                    f3:ba:fe:5e:db:43:3e:bc:4b:79:2b:b7:38:ed:ba:
                    5a:8a:68:86:eb:6d:8e:09:d3:81:0c:ab:8b:3c:4c:
                    7b:d8:d1:9b:e3:ff:63:33:51:5d:04:45:be:59:3b:
                    3a:71:f8:82:78:94:7d:8e:ef:97:bd:cc:28:7d:d2:
                    14:85:0f:5e:3b:bf:fd:69:6e:c4:42:1a:a3:fa:a1:
                    a6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:77:9D:3F:08:EB:67:1E:A3:09:91:E5:51:4F:3D:E1:A6:05:07:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/305d5804-7648-315f-9b20-30d795b457ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl

            X509v3 Authority Key Identifier:
                keyid:D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4b:2f:3c:d0:3e:48:86:73:57:31:87:7a:31:42:c1:54:23:
         e5:7a:c3:4d:1c:0d:a5:d5:89:45:81:2a:f7:f2:e6:06:c5:7b:
         b6:f9:30:32:3b:8b:09:71:fc:8c:ba:d6:6e:04:3a:0b:da:37:
         41:ae:de:9e:f1:e7:e4:46:19:4d:05:b9:cc:04:12:a6:ca:9d:
         da:9f:21:b1:ae:e3:22:40:a9:83:0b:9e:47:eb:a4:fd:23:e7:
         d6:8a:e0:0e:23:44:42:d8:55:25:48:4d:60:36:05:78:d1:7d:
         53:61:b1:99:e6:26:48:43:b8:b4:28:1b:49:00:b5:7e:36:c6:
         31:51:c3:dc:03:27:07:c5:03:bb:11:99:3b:d8:2e:3a:dd:55:
         27:13:81:78:4f:23:85:78:71:f8:eb:4e:91:95:84:44:d1:25:
         ee:75:ae:41:11:01:13:40:36:06:ea:b6:90:e0:3a:5a:aa:4b:
         81:98:27:f0:5b:61:7c:c9:a0:4d:93:76:ee:e1:40:08:d7:95:
         9d:53:63:84:db:1f:f9:40:fd:98:25:29:48:0d:42:52:63:af:
         e0:ed:ed:7e:22:b3:8d:73:42:17:6c:19:52:0d:87:a1:b3:aa:
         26:5e:89:f0:b6:25:4e:c9:95:37:bf:f5:33:7d:1a:6c:52:45:
         d8:82:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:24:19 2026 by rpki-client