Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4dc547a1-c47c-39a8-89ff-91a0c77b4228.roa
File:                     4dc547a1-c47c-39a8-89ff-91a0c77b4228.roa (raw, json)
Hash identifier:          fRaLR/UdPQlKu+ZLuAT8Tu0NxcU+1YkIa6EQdxOuKRY=
Subject key identifier:   58:BC:1F:36:49:B5:C3:3B:04:9E:3C:25:E6:4D:FD:8B:3A:75:83:E2
Certificate issuer:       /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial:       010D0C9F4328584FA2C8863ADBEA2B83E5FEEC60
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4dc547a1-c47c-39a8-89ff-91a0c77b4228.roa
Signing time:             Tue 27 Oct 2026 01:00:14 +0000
ROA not before:           Tue 27 Oct 2026 01:00:14 +0000
ROA not after:            Mon 25 Jan 2027 02:00:14 +0000
asID:                     61622
IP address blocks:        136.175.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c8:86:3a:db:ea:2b:83:e5:fe:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
        Validity
            Not Before: Oct 27 01:00:14 2026 GMT
            Not After : Jan 25 02:00:14 2027 GMT
        Subject: CN=3b6a9496-c3e7-4092-b1e8-03056cc6d98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:0a:42:73:8c:8b:f8:96:32:d1:41:63:6d:
                    8d:4a:20:fe:40:3b:74:81:30:5b:e3:3a:0e:f6:97:
                    04:a3:79:60:8e:e9:9f:7b:18:72:ee:22:86:92:a2:
                    b7:cb:b5:60:a4:1a:e6:ae:a5:6c:9a:48:d3:fc:b0:
                    67:52:b5:e8:0f:04:b6:53:3b:3a:e0:f1:83:6a:d3:
                    61:4d:75:3d:7f:a2:59:03:32:33:b5:c6:4a:81:1d:
                    a2:3c:42:d6:b0:78:09:f0:84:d6:30:6b:82:30:33:
                    71:b2:44:9a:ff:ac:60:73:ac:04:2c:78:59:8a:c4:
                    77:3c:2a:50:7a:7c:5b:92:8b:65:f2:08:cb:c2:f5:
                    37:8f:98:08:87:0b:7c:a1:03:ac:d0:1b:0b:19:d9:
                    c1:cd:28:b4:e8:c3:08:a1:4f:76:fc:b2:78:09:57:
                    03:d6:cc:b3:17:61:93:1a:8a:15:f0:82:ca:2f:75:
                    72:c7:f2:92:b6:80:c3:46:84:e7:c5:87:79:ac:1e:
                    88:08:7a:c0:8f:ad:e2:eb:ec:e4:fc:d7:34:ff:61:
                    ae:87:ba:75:ee:52:09:d6:8f:5d:28:07:d0:95:0b:
                    cc:a0:58:d0:8f:95:0b:a1:f2:a3:2d:2b:5f:41:8e:
                    9a:ab:48:30:e1:db:6f:9f:7e:94:3d:c2:e7:e8:8b:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:1F:36:49:B5:C3:3B:04:9E:3C:25:E6:4D:FD:8B:3A:75:83:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4dc547a1-c47c-39a8-89ff-91a0c77b4228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl

            X509v3 Authority Key Identifier:
                keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:ba:1c:e0:05:cf:1d:6b:e4:0f:40:86:58:f5:82:6d:6d:
         d8:34:52:b4:a0:4b:d5:9b:a6:72:27:ad:9f:31:b6:13:1f:de:
         a3:73:a7:69:9d:60:6e:7b:6c:18:45:f9:2f:27:b4:7b:bd:2d:
         6c:fc:b0:d2:0f:c7:42:00:6f:cb:8c:44:db:96:b0:9c:b0:89:
         62:37:e4:f7:42:0d:2d:a7:46:96:dd:86:e4:b1:23:b3:82:5b:
         34:52:eb:80:15:ea:00:32:73:bc:25:d3:5b:2d:93:e8:86:90:
         90:ff:9b:7c:25:8e:49:77:2e:3c:be:52:44:f4:8e:28:bd:83:
         1b:0f:11:ea:b4:7f:ef:df:58:88:f3:1c:27:30:b3:54:b5:52:
         dc:1a:33:cf:ef:a0:b0:0c:33:c8:79:96:c7:d3:c3:13:02:cb:
         cd:ce:97:32:f7:5d:68:d6:f4:8c:c1:7c:f2:1e:db:f3:28:c1:
         a1:11:01:91:77:e3:59:43:15:26:cc:12:15:94:e5:d5:b7:5b:
         52:c0:30:7c:67:f8:f0:e1:79:66:1d:27:49:59:62:f8:b6:1f:
         38:2f:b4:24:cd:4f:54:e4:cc:92:8a:5c:fa:bc:f1:56:40:ee:
         13:64:90:7f:9a:25:16:90:d4:56:15:6a:ca:32:e0:25:a5:f1:
         0b:43:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:18:03 2026 by rpki-client