Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11c27f40-c421-42c1-873c-3202d5b31a2f/cc778a46-4e26-325e-899f-0da5461c421e.roa
File:                     cc778a46-4e26-325e-899f-0da5461c421e.roa (raw, json)
Hash identifier:          cDrPFTR9LlPQv/23Gk3Wz5zy9Mr4sU67X9N03yInSz8=
Subject key identifier:   CA:8E:AD:DC:76:CB:A6:CD:F4:57:0F:D2:5C:4C:32:E6:B4:19:47:B7
Certificate issuer:       /CN=11c27f40-c421-42c1-873c-3202d5b31a2f
Certificate serial:       010D0C9F4328584D571F9BB327544D5067E2FE00
Authority key identifier: 65:54:F6:3A:CA:3B:84:DF:DE:5C:3C:D2:3B:B6:DD:FA:78:11:21:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11c27f40-c421-42c1-873c-3202d5b31a2f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11c27f40-c421-42c1-873c-3202d5b31a2f/cc778a46-4e26-325e-899f-0da5461c421e.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     64209
IP address blocks:        136.175.88.0/24 maxlen: 24
                          136.175.89.0/24 maxlen: 24
                          136.175.90.0/24 maxlen: 24
                          136.175.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11c27f40-c421-42c1-873c-3202d5b31a2f/11c27f40-c421-42c1-873c-3202d5b31a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11c27f40-c421-42c1-873c-3202d5b31a2f/11c27f40-c421-42c1-873c-3202d5b31a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11c27f40-c421-42c1-873c-3202d5b31a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:9b:b3:27:54:4d:50:67:e2:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c27f40-c421-42c1-873c-3202d5b31a2f
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=44d96670-ba5a-4ec7-9c8c-a6673a76bb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2b:23:10:e2:13:bc:ce:88:83:d1:22:0d:5a:
                    82:bf:c6:ea:56:a6:f6:50:3a:c6:8e:2a:c0:b4:a1:
                    df:e5:c6:fe:22:f6:df:f4:af:c1:92:0f:c2:53:4f:
                    3b:90:8e:a5:28:d3:cd:86:29:d9:8a:ea:94:59:80:
                    b6:9b:3e:8a:98:7a:f1:a9:06:a8:53:2d:af:8b:06:
                    5d:22:80:66:fd:ca:fe:9e:d0:9e:9e:27:63:4c:8e:
                    d6:30:df:00:3e:1d:03:d2:d8:05:fe:7c:e6:27:0b:
                    27:fe:58:bd:f5:65:a9:8d:6e:af:96:34:be:d3:ab:
                    83:61:ea:39:f9:75:f9:e1:3e:bf:63:80:87:95:48:
                    67:ff:7e:d8:a9:ce:cc:28:92:db:28:b7:6d:a6:82:
                    ba:7d:d3:32:db:ba:6e:44:f3:63:46:4e:e9:53:ad:
                    bc:e1:e6:3d:cf:84:6e:53:5a:f7:a7:f0:48:c8:c9:
                    a7:fb:eb:5f:5c:7e:71:ad:b2:6e:fc:c0:b6:d8:74:
                    ca:83:42:c7:c0:16:47:e0:ed:27:21:65:6d:93:c2:
                    0f:bc:fb:de:74:1e:00:dd:87:10:84:5e:54:cb:b4:
                    92:b2:15:06:29:96:da:2b:22:b6:16:aa:70:a7:ab:
                    9e:35:b3:d9:34:15:56:ab:5e:a4:f4:d9:a2:0b:67:
                    a4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8E:AD:DC:76:CB:A6:CD:F4:57:0F:D2:5C:4C:32:E6:B4:19:47:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11c27f40-c421-42c1-873c-3202d5b31a2f/cc778a46-4e26-325e-899f-0da5461c421e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11c27f40-c421-42c1-873c-3202d5b31a2f/11c27f40-c421-42c1-873c-3202d5b31a2f.crl

            X509v3 Authority Key Identifier:
                keyid:65:54:F6:3A:CA:3B:84:DF:DE:5C:3C:D2:3B:B6:DD:FA:78:11:21:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11c27f40-c421-42c1-873c-3202d5b31a2f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a8:64:f0:f9:60:c7:b8:cb:c4:3d:00:bd:a6:35:c7:c2:2f:
         15:7b:5e:0d:88:de:19:74:5f:d1:70:3c:68:0f:51:b3:c6:e2:
         84:4a:8e:a4:46:01:25:02:35:f8:82:75:6a:99:80:de:ee:1e:
         93:64:9a:2a:58:c3:b7:b6:27:2c:e1:1b:58:3f:d4:78:fa:d6:
         34:97:2b:19:dc:9f:cf:13:fc:a8:6f:0e:e9:a7:31:ac:d3:a4:
         51:f5:76:f0:de:0f:96:6f:98:84:3a:06:e2:e1:3e:58:e0:4a:
         3d:8d:33:49:d8:dc:e4:1c:dd:5c:db:18:37:c4:d1:ff:05:f9:
         cc:d2:04:93:f0:73:1f:dc:13:31:7e:fd:68:20:37:31:2a:5e:
         cd:b6:78:1a:f7:0e:60:d6:8c:38:6d:0f:2e:19:7a:2b:2d:e1:
         04:77:46:ea:67:c9:d9:dd:f8:c3:40:10:19:bf:e3:53:60:cd:
         41:e2:e5:75:32:94:62:2b:f0:64:5e:eb:e3:b7:ec:cc:9c:8a:
         9b:7f:ad:5b:a5:9e:b0:fa:c2:86:20:b6:c8:f2:14:e7:cd:70:
         93:24:12:28:7c:1a:ac:96:e6:07:93:91:b7:31:5b:d4:fb:06:
         46:2f:79:78:ed:8c:62:ae:50:7c:85:0c:91:17:54:b4:12:55:
         9c:d2:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:25:28 2026 by rpki-client