Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa
File:                     176ba803-b4f1-3a57-804d-e734d0c025da.roa (raw, json)
Hash identifier:          mDn93Y/x2bOHFHr/TjqvYUbmNf6B/vC73nbEgU17SX4=
Subject key identifier:   86:ED:AB:81:D4:EF:1F:E8:1D:15:9D:71:28:5B:C9:8A:B1:5C:34:14
Certificate issuer:       /CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
Certificate serial:       010D0C9F4328584E4129DF1137B2A158D05CD200
Authority key identifier: D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        136.175.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:df:11:37:b2:a1:58:d0:5c:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=515a4fb6-8cb7-40a0-8f86-4a9feb18ecb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:79:31:b0:c1:50:63:2d:05:9a:63:d6:67:94:
                    d8:d0:54:b5:1e:3a:c5:14:7c:ef:be:de:7c:a4:5e:
                    b2:cc:66:90:6d:3e:0d:18:fb:f0:b7:2a:c7:3f:24:
                    95:ec:30:4e:70:8d:bc:93:1c:6a:ba:e4:60:6f:7a:
                    5a:11:96:c3:52:27:9a:c4:48:b4:6c:5b:b2:14:f9:
                    1a:8d:7d:81:0a:ca:bd:8f:86:f7:19:4b:67:05:fc:
                    dd:09:0d:2b:fc:97:f2:ef:50:84:88:32:bc:b0:4e:
                    86:f6:9b:3a:b2:45:67:ac:22:cc:65:47:19:e1:98:
                    48:07:c1:2a:a1:0d:46:8a:a7:71:e3:4e:e6:2e:9c:
                    fe:73:49:ac:37:ff:e1:59:4e:7e:a6:f8:71:48:87:
                    e1:f6:f8:6e:c1:88:58:c8:17:c3:50:5c:ce:69:f8:
                    42:8c:4e:90:03:81:50:c8:0a:af:7b:21:52:5c:d5:
                    02:22:6d:df:96:7a:93:af:af:70:60:74:e5:b4:a6:
                    97:1a:a2:24:24:10:09:69:aa:51:52:b6:bb:a1:d6:
                    b7:3d:96:fe:3c:54:cc:86:2f:5a:db:e7:2f:bb:62:
                    59:76:fd:77:13:ed:32:f0:1b:18:f3:78:a9:3a:c6:
                    c2:39:86:d1:a0:1a:cb:5c:2e:9d:6d:59:87:8c:eb:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:ED:AB:81:D4:EF:1F:E8:1D:15:9D:71:28:5B:C9:8A:B1:5C:34:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl

            X509v3 Authority Key Identifier:
                keyid:D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2e:6e:d0:aa:8a:97:40:cb:af:36:6e:db:67:c5:7a:10:77:
         8d:fa:68:33:4a:9c:b6:6e:fe:59:38:3f:f5:74:66:42:3c:38:
         65:6e:c4:6b:14:72:4e:e8:58:55:c4:f0:c9:26:75:15:0a:25:
         3d:7e:8e:45:5e:b0:1a:b1:b5:a0:1d:f5:f6:d5:be:2b:c3:64:
         81:96:43:b2:8e:11:4a:01:bc:1e:f7:41:e7:cb:dd:86:e0:0d:
         d8:8c:77:6b:07:82:55:d9:7f:f6:14:76:67:fd:6d:0d:76:c8:
         3e:ae:11:07:fb:8c:4f:98:f4:a9:7e:59:f0:13:5a:ec:76:c8:
         97:54:11:4e:86:48:c0:82:44:24:40:ba:2f:b5:19:f6:ae:9d:
         83:43:55:ff:15:96:fd:f3:61:54:c1:a4:b6:9f:2f:f3:dd:ce:
         ba:8e:95:04:eb:d3:85:c9:0c:30:06:48:fb:07:a1:08:ee:62:
         ba:73:fe:34:2f:f5:da:bb:cd:04:58:98:94:49:ee:77:b7:43:
         66:ec:80:6b:25:50:92:fa:e2:15:44:49:5c:f3:6a:cb:05:b8:
         59:0e:4e:ef:72:27:e6:c8:03:80:ff:39:49:15:a0:6a:05:c0:
         e3:3e:21:81:4b:91:9e:eb:02:58:af:5f:81:3e:33:42:1e:0c:
         69:27:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 20:17:22 2026 by rpki-client