Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa
File:                     36766eed-ee8a-3083-8823-23777bfe75b3.roa (raw, json)
Hash identifier:          x4W0pZ/9/ExIyw0d+dhR9lhMY6NMtcc1LImEGOVVjy0=
Subject key identifier:   1D:29:E2:6A:D8:D1:07:48:C5:78:45:58:61:9D:27:99:41:D2:90:50
Certificate issuer:       /CN=7f1c958a-c540-4699-8a42-ad625fc751f3
Certificate serial:       010D0C9F4328584E4559D5EC7D34A8BFB1C70200
Authority key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        209.160.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:d5:ec:7d:34:a8:bf:b1:c7:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1c958a-c540-4699-8a42-ad625fc751f3
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=075dfb37-ff9b-4519-8c0e-8bede66a9fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:a0:d1:17:56:d2:6b:ba:a8:a9:e8:4e:30:
                    d0:f2:35:b5:44:2e:40:f8:70:be:e7:83:f4:2e:d0:
                    c0:37:df:7b:9e:41:57:c4:e5:10:16:63:41:85:17:
                    ba:27:8a:6e:d7:15:e2:0e:1d:65:18:62:48:8c:80:
                    5b:47:d9:ae:99:a2:d9:f7:fa:94:e3:d2:e6:4e:fa:
                    c2:d3:53:78:69:b5:ae:94:7d:c9:9b:36:8e:14:6a:
                    17:8a:be:21:0b:dc:4e:63:93:84:db:a8:e9:28:bb:
                    8f:e7:98:38:a2:b6:85:f7:8c:2a:01:a9:82:fb:28:
                    19:fa:75:68:2f:16:9d:78:fa:77:32:4c:92:4f:38:
                    25:42:7b:c9:1f:01:14:64:86:4c:26:c5:a0:b1:ff:
                    aa:71:37:98:5b:80:b3:6f:94:ad:1f:e3:40:ee:e3:
                    d5:2d:36:0d:ef:0d:b0:09:bb:4e:2d:51:65:dd:82:
                    f5:c9:ae:21:07:13:de:d1:e3:1e:cd:ee:5d:42:a5:
                    e3:60:b1:a8:77:f3:db:d5:d2:05:97:a3:e9:25:c9:
                    10:2b:24:d5:2d:12:7b:c4:33:98:99:fb:dc:5b:d7:
                    b4:cb:26:c2:55:bf:2c:8c:73:41:e4:25:ca:af:c0:
                    d2:93:22:71:ca:40:d4:5d:0e:55:33:68:71:7f:1c:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:29:E2:6A:D8:D1:07:48:C5:78:45:58:61:9D:27:99:41:D2:90:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl

            X509v3 Authority Key Identifier:
                keyid:C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:8c:f4:72:fc:ca:b2:c6:6f:7a:a8:f4:ce:6e:90:ad:0a:83:
         17:37:5c:e5:74:13:76:12:cd:7f:46:87:60:8c:a6:a4:33:01:
         b6:db:8d:76:46:4e:13:5a:56:b4:99:5c:fe:ed:c0:bb:c4:2b:
         4e:78:42:a4:81:39:8b:a9:50:15:37:c2:ad:0e:85:b9:6d:61:
         a8:41:88:76:f6:cd:cc:3a:69:e3:0c:fe:2c:07:7e:1a:8e:38:
         e6:7d:fe:9b:70:b0:48:48:e1:58:5a:45:50:5b:ef:b8:8b:7f:
         9b:4a:f7:b0:d7:be:32:cb:9a:9d:ad:bd:c1:33:6a:02:df:4a:
         f6:9f:88:a0:03:7e:92:e8:47:53:4c:af:e3:63:18:c9:0b:14:
         3d:b5:e8:1c:8e:e3:b2:a1:fd:52:09:6c:66:3a:08:57:c3:0c:
         94:96:5b:85:e2:32:09:73:3b:54:8d:2b:be:09:18:23:52:7f:
         50:18:b6:ef:17:67:d8:6c:86:e1:8f:ea:0e:f0:d0:d4:45:5e:
         b3:c7:7f:39:04:02:95:6c:a1:f6:14:57:23:f5:f4:07:aa:c0:
         5c:25:c2:89:69:7e:c6:1c:4c:5a:f2:a0:c1:11:c4:3c:46:38:
         73:d2:4d:c0:31:46:1f:fa:3e:cf:ef:a2:46:af:aa:8a:7c:cb:
         5e:6d:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 11:07:21 2026 by rpki-client