Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/5656a130-5360-34ae-8489-8390fee7852b.roa
File:                     5656a130-5360-34ae-8489-8390fee7852b.roa (raw, json)
Hash identifier:          7xLQWvH2FVQ4Op9sJM8WKwoaiaYhsGAZXzVs5OOQzws=
Subject key identifier:   26:20:5D:C1:A1:F4:E3:9F:ED:9A:84:F5:F7:9E:72:8F:CD:34:60:0D
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584DA8CAB001E21A95DC56CC03C0
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/5656a130-5360-34ae-8489-8390fee7852b.roa
Signing time:             Tue 28 Apr 2026 19:05:46 +0000
ROA not before:           Tue 28 Apr 2026 19:05:46 +0000
ROA not after:            Mon 27 Jul 2026 19:05:46 +0000
asID:                     7385
IP address blocks:        64.122.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:ca:b0:01:e2:1a:95:dc:56:cc:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Apr 28 19:05:46 2026 GMT
            Not After : Jul 27 19:05:46 2026 GMT
        Subject: CN=97920c00-ec45-4040-ba3a-9bac3adfea7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:15:8f:92:3e:b3:d1:23:34:2d:2e:68:23:
                    c7:89:07:1d:da:fb:12:d8:33:a3:87:2f:61:30:d5:
                    9f:5b:59:0a:b4:27:74:3d:c1:4d:05:2e:6a:3d:5e:
                    51:70:f1:8d:65:1d:13:20:58:ef:95:30:7e:6c:e0:
                    7e:55:a8:d8:a7:9d:2f:e5:5f:da:c3:aa:28:b0:a2:
                    61:fc:b0:4e:a9:66:b6:63:ea:81:34:da:48:2f:56:
                    c6:26:37:e8:07:12:51:fa:af:bf:72:8a:7d:50:a8:
                    c5:b1:2a:1d:46:0f:82:c3:de:80:06:aa:44:2d:fb:
                    59:d9:5e:0d:e6:5e:3e:8c:06:f0:7f:81:f2:d2:f1:
                    8c:03:4c:e3:a3:5a:24:9b:44:d4:37:1e:5f:25:97:
                    aa:c9:3d:57:00:08:6a:42:68:51:14:b4:e8:92:0f:
                    0d:33:45:a2:9d:54:d2:73:2e:75:b6:4a:91:ff:89:
                    5a:e2:d4:dd:0a:86:37:37:ed:42:1d:a2:92:80:4c:
                    76:d9:cb:fd:8a:20:af:1a:5c:4e:2c:f3:e8:77:69:
                    77:3b:cc:af:34:7d:b2:ad:fd:43:5b:6e:98:e8:73:
                    cf:ad:0c:f6:b5:aa:bd:c4:a9:03:18:42:7b:84:1c:
                    82:58:be:d5:e9:8b:45:17:13:98:b0:fd:ce:4c:59:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:20:5D:C1:A1:F4:E3:9F:ED:9A:84:F5:F7:9E:72:8F:CD:34:60:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/5656a130-5360-34ae-8489-8390fee7852b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.122.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fe:70:1a:fb:b4:ea:c7:78:b8:6d:c5:ac:9c:22:27:f6:a6:
         d0:57:a4:73:7b:b0:73:39:37:1c:3c:6d:e6:e8:e1:4c:e9:e3:
         bf:b1:c2:ac:39:51:92:28:d6:b6:3b:1f:b1:f2:48:6e:72:4e:
         25:0a:d3:01:74:8b:d7:dc:24:59:d8:67:b3:06:a3:f5:ca:a5:
         b8:26:ab:5e:58:d6:ec:e9:fc:44:af:d7:07:2e:d4:a8:78:25:
         ce:4d:67:53:36:00:6f:64:73:43:60:4e:2f:a6:60:9f:ca:68:
         8c:fb:d5:89:d8:22:57:e3:51:49:d1:19:b7:14:70:6b:22:ef:
         10:44:0c:b1:28:21:92:86:21:6e:4e:01:41:19:8e:a0:2d:76:
         90:3d:a1:d7:ef:ef:c3:d6:31:c4:dd:55:3d:95:8a:dd:dc:9f:
         1c:53:d1:0b:a3:cc:3a:ab:45:66:a6:47:b6:54:2d:6f:0c:66:
         5b:4a:9d:bf:40:6a:fd:08:08:b9:6d:0b:ee:08:17:f3:80:c9:
         6a:37:a5:07:9d:a6:16:dc:80:f8:bb:20:d6:ce:20:26:e8:7e:
         70:67:5a:e2:b4:ce:51:f9:3c:00:9f:b2:9e:d1:a7:4c:9a:f6:
         e0:28:c9:74:67:30:53:01:7c:01:98:d0:90:d8:27:78:e9:67:
         76:91:2d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 03:56:59 2026 by rpki-client