Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/ac5b5310-a143-3561-bfdb-2c3c06f1423c.roa
File:                     ac5b5310-a143-3561-bfdb-2c3c06f1423c.roa (raw, json)
Hash identifier:          sodAO9m54pb0sp3APA+spUqyi6Bu37gpzmI5Kc7TNw0=
Subject key identifier:   79:5D:13:A7:F1:E7:C7:2E:12:23:C0:28:42:6C:4A:96:83:15:87:CC
Certificate issuer:       /CN=8309265c-1311-43ce-adf7-732012b108fd
Certificate serial:       010D0C9F4328584E3E5F260605E59E0FD160F680
Authority key identifier: 65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/ac5b5310-a143-3561-bfdb-2c3c06f1423c.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     397720
IP address blocks:        136.175.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:26:06:05:e5:9e:0f:d1:60:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8309265c-1311-43ce-adf7-732012b108fd
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=3729abee-1929-45f2-8680-8bc9df3f2e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:90:94:a9:41:67:00:7d:61:a3:a4:99:20:
                    eb:73:c7:39:11:52:d0:7c:43:26:b8:30:5b:b8:76:
                    9c:7f:23:ec:dc:f6:87:c9:3c:bf:05:57:cb:9c:59:
                    33:5d:a2:51:2c:b4:2c:73:48:48:1f:64:b9:07:25:
                    d0:86:a2:de:76:d6:1e:77:6c:b8:95:a4:f4:57:d3:
                    1c:d7:95:49:10:6e:db:8d:ed:87:af:d7:f2:f6:8e:
                    72:69:80:51:02:ab:5b:39:05:44:fb:ab:10:00:2a:
                    c2:2f:a2:c4:17:d9:56:bd:46:e7:e6:e0:93:fe:e8:
                    41:2b:dd:c5:2c:74:63:d5:73:9b:33:f1:db:e5:e4:
                    1c:29:18:d9:1c:8a:e3:48:ea:eb:cf:1c:3a:bc:99:
                    55:cc:55:0f:53:c7:4a:c1:9e:2d:56:9b:db:76:6c:
                    3e:bf:ff:04:99:52:d1:2b:0f:47:cb:62:ae:c7:c0:
                    8f:d7:9c:da:5e:92:07:66:83:dd:a2:d7:e0:a4:94:
                    be:63:70:da:6e:73:c9:4a:00:e8:0b:55:1f:93:42:
                    1b:63:0e:4b:ca:d7:7b:92:41:c8:3a:a0:75:db:57:
                    93:d2:2f:52:e6:b8:a3:da:ba:c1:fd:cb:39:56:f3:
                    6a:af:76:a4:e7:a3:70:7a:3a:10:0a:7a:7f:ba:ac:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5D:13:A7:F1:E7:C7:2E:12:23:C0:28:42:6C:4A:96:83:15:87:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/ac5b5310-a143-3561-bfdb-2c3c06f1423c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl

            X509v3 Authority Key Identifier:
                keyid:65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:40:a6:d4:c1:42:9d:a5:e5:1f:f8:f0:c6:ea:c3:82:26:e3:
         79:e0:be:f0:d8:7a:9f:42:16:7a:4e:9f:e9:c5:a3:f4:14:d6:
         02:0a:41:4d:d2:2b:96:28:90:ea:9f:f9:2f:ce:89:89:97:48:
         fe:e3:a1:15:a8:10:92:14:e9:ce:c9:d9:f1:7a:6e:3e:16:de:
         35:f5:60:fa:83:2b:87:9e:45:fb:3f:9c:3b:5b:cc:e9:d4:e4:
         65:61:3c:71:ce:1a:4a:b7:1d:a4:83:f6:0f:14:aa:da:57:59:
         ba:7a:fe:72:46:bd:3c:c6:9c:a8:2a:52:74:9d:fd:51:c1:3d:
         21:e0:62:6f:d5:c7:cf:11:57:7e:9e:4f:93:6f:4b:9f:16:5a:
         f7:01:7f:32:f9:e7:59:11:75:1a:b1:2d:64:8d:22:41:38:29:
         98:b9:6a:e1:f2:9a:23:83:63:f8:59:86:27:d4:ad:f7:36:87:
         6a:6a:0f:f9:9c:8c:5b:de:fb:3b:5d:07:90:75:92:e0:0e:12:
         ed:5e:d5:30:25:ad:e4:81:42:a6:ce:ae:32:89:1e:3d:f8:2e:
         40:65:67:35:b4:26:e1:ed:ff:86:4f:5d:81:6d:e5:8b:cc:15:
         ab:a4:90:f0:d6:eb:36:1e:dc:66:31:61:04:14:51:aa:0d:dd:
         db:8b:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 22:58:38 2026 by rpki-client