Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/4147599a-28ad-3df7-9f66-6ada3446b036.roa
File:                     4147599a-28ad-3df7-9f66-6ada3446b036.roa (raw, json)
Hash identifier:          Hzk2vIFkTaks/4hkT8fji/q9Y6a4bIHRhoODGqWM23Q=
Subject key identifier:   81:22:7E:ED:2D:BA:1C:FF:D3:41:32:5A:9F:2B:2A:64:4D:6A:48:61
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584E3FC4723FA077F7102D72F600
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/4147599a-28ad-3df7-9f66-6ada3446b036.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     22480
IP address blocks:        137.118.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:72:3f:a0:77:f7:10:2d:72:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=bf119807-d124-4e00-b988-0919ada67654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:23:3e:c4:ad:d0:0d:8b:bd:7f:87:e4:45:66:
                    b7:c0:c5:a4:ad:96:d9:f9:8d:95:b9:4f:08:8e:05:
                    95:50:a4:cb:a2:c7:27:15:61:6a:d4:f4:fe:ec:ac:
                    a8:57:96:36:f3:8f:82:2f:6a:32:ec:30:d7:13:32:
                    2c:b4:14:1a:3e:a6:a8:55:f2:3a:d3:28:15:76:c4:
                    4c:b3:fa:a0:81:45:94:fe:d4:c2:42:c8:f4:05:9c:
                    6d:9c:4d:87:28:d3:aa:0a:af:69:fc:9a:da:3e:9b:
                    3c:15:53:8e:c5:07:a0:35:85:5c:a1:f5:74:96:0e:
                    b3:58:8b:db:75:ed:10:d5:df:76:56:84:18:bb:18:
                    b6:f9:f9:df:d7:94:24:61:29:db:2a:c7:e2:d0:20:
                    84:fc:da:ad:47:35:a3:5f:ce:97:b2:94:cb:95:a2:
                    90:e6:03:c9:0f:0c:7a:d8:01:48:1f:62:40:5d:ad:
                    20:4a:48:b0:2c:19:63:0d:a5:51:04:0e:51:ab:95:
                    31:28:2c:2c:5d:ae:02:15:07:7a:e9:b9:81:c7:9f:
                    ab:57:22:95:a6:d4:b7:83:1c:12:a2:2e:eb:b9:49:
                    7c:44:ed:0f:c4:ef:2a:ba:0f:4d:35:49:5a:38:8c:
                    44:d5:47:08:3a:b6:7d:db:04:aa:68:e7:49:26:6f:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:22:7E:ED:2D:BA:1C:FF:D3:41:32:5A:9F:2B:2A:64:4D:6A:48:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/4147599a-28ad-3df7-9f66-6ada3446b036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:4e:23:77:4a:44:ca:f3:c0:76:e7:81:e2:ba:bb:c6:93:
         23:e1:53:0f:b0:93:d6:9e:33:75:a0:b1:01:2e:0a:1a:30:ca:
         c9:1f:df:46:0b:bb:5f:21:37:78:4b:0a:1c:9a:1e:8f:9d:c3:
         2f:f2:2e:4b:1b:54:9a:a7:cd:e5:8e:4c:dd:7a:1a:96:b7:9b:
         8c:4c:6f:20:91:70:01:cc:4a:02:2f:71:27:8f:a3:58:ee:39:
         14:89:2b:36:43:7f:26:79:9c:2a:12:ef:d6:65:a8:db:3f:cc:
         22:b2:34:f4:ce:89:b5:ae:99:9e:42:b1:bb:bb:ee:0d:7b:ee:
         0e:6c:f3:11:8d:60:fb:ce:c6:3a:d5:1d:54:6c:98:91:3b:e5:
         f6:5c:54:20:eb:1b:ce:48:2e:06:80:2b:91:be:99:7e:9c:ef:
         af:68:28:0b:5d:c0:74:77:85:7e:c9:61:07:ff:d2:05:b4:48:
         2b:3e:0d:d8:b5:8b:be:f2:49:c8:65:74:b1:63:41:4f:af:50:
         60:41:f1:40:bd:56:d8:e7:de:b6:f0:56:a2:7c:88:38:b7:20:
         cf:10:1b:16:98:a1:b7:17:ee:c1:c1:fe:96:b2:1e:84:3b:1d:
         c0:1e:a3:7f:e2:06:71:95:18:fd:6e:b9:2f:d2:3e:4e:9d:66:
         03:dd:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:34:40 2026 by rpki-client