Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67c67abb-1711-3993-b92a-58a5cadbf9e2.roa
File:                     67c67abb-1711-3993-b92a-58a5cadbf9e2.roa (raw, json)
Hash identifier:          3k4CkrxFRMS8JvRWwS8kl0dmicmatuZ7SV1SSI/k0rU=
Subject key identifier:   79:EF:D4:FD:84:6B:EB:83:07:00:6E:77:83:EC:DE:1B:DB:54:2A:93
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D0A77913BCA72FADAC6E66D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67c67abb-1711-3993-b92a-58a5cadbf9e2.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     15169
IP address blocks:        136.126.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:91:3b:ca:72:fa:da:c6:e6:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=5660cb3d-09fb-4b10-886f-4c6c04197b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:1e:41:85:be:11:b5:44:ad:5f:7c:a7:77:
                    3f:22:30:f9:88:d2:3e:3f:4e:68:7e:7c:b2:9f:87:
                    e7:32:03:59:71:55:af:07:7e:e4:61:33:36:38:4b:
                    82:75:98:31:0e:11:92:db:d7:3f:18:fe:b7:0e:94:
                    90:1d:51:3c:a7:36:59:94:73:d1:11:6b:d6:42:25:
                    0b:40:07:74:e8:89:31:12:f4:9d:c7:c1:a0:25:df:
                    98:97:98:88:82:78:f5:38:2d:a0:1b:9f:c4:a9:42:
                    a1:70:2f:ac:47:23:3c:af:89:1d:a1:49:03:5a:4f:
                    0b:93:f1:f3:c1:89:75:11:06:d0:66:f9:1f:e8:37:
                    c3:56:dc:9c:fa:d1:36:5c:52:ee:39:94:8a:06:16:
                    53:4c:0a:e4:de:b5:bc:27:af:80:81:e6:15:42:0e:
                    62:9f:da:df:4c:60:8d:ed:ae:92:89:d1:fe:27:40:
                    2f:13:95:69:8c:d9:8d:a5:73:16:fb:20:11:85:97:
                    ab:08:71:ee:c0:c2:ec:cb:62:64:ff:bd:33:b7:cc:
                    37:fd:c8:d6:11:0e:50:ba:53:c5:e2:1a:78:f5:a1:
                    0c:e6:53:12:6c:54:7b:d9:7f:72:15:2e:d5:8d:9f:
                    a6:fa:84:d0:15:6c:44:8a:11:a0:1b:68:08:99:aa:
                    ed:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EF:D4:FD:84:6B:EB:83:07:00:6E:77:83:EC:DE:1B:DB:54:2A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/67c67abb-1711-3993-b92a-58a5cadbf9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.126.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:59:d2:15:13:0a:5a:a1:30:43:eb:c8:63:b8:10:ff:9f:
         0f:74:b5:16:95:34:a9:9e:22:83:35:be:4b:3e:ab:58:f3:67:
         9f:85:ff:30:35:b4:37:a9:5b:85:a1:58:c1:30:22:dd:9c:21:
         bb:c5:94:75:a9:33:d4:26:a9:59:9c:f7:c9:32:bd:f4:9c:83:
         ff:d4:7e:78:c2:d3:6e:be:48:86:66:ec:fd:d8:7a:70:4a:d5:
         aa:25:9c:c6:bd:92:0c:6d:1c:f2:bd:0c:47:91:19:8f:b8:bd:
         f0:bf:f6:7c:d4:70:a9:06:bf:56:ac:b2:00:1b:4a:9a:53:e2:
         dc:bb:68:ca:1d:5b:fa:38:59:b0:f4:a1:04:b2:34:9e:ec:03:
         9e:64:d4:7c:59:70:3b:20:4d:b4:32:3c:1e:eb:8e:3e:3b:34:
         ec:cb:fd:46:5a:ae:10:9f:e7:f6:13:e5:f2:45:dc:00:0f:d7:
         fa:e1:3a:c8:aa:bd:2f:d1:b7:0c:e8:6a:3d:ac:fb:46:63:67:
         fd:e7:67:36:92:6f:f8:5e:6c:38:7c:fb:6b:c0:1a:6d:08:83:
         f7:cf:35:91:4f:2d:df:c0:26:a5:5a:54:fc:bf:e8:2b:17:32:
         09:7a:8f:cc:49:5a:4e:d8:58:7b:16:fa:c8:09:fa:e1:a7:e8:
         4e:84:ea:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 10:54:07 2026 by rpki-client