Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/8983653f-7534-3c16-93d0-78e539d747fd.roa
File:                     8983653f-7534-3c16-93d0-78e539d747fd.roa (raw, json)
Hash identifier:          6ZI3PkNJdIGs4B9TUH7bm5g3BGOfibGqmRSCTLfniyM=
Subject key identifier:   6E:29:66:D5:B7:AB:AD:FA:7E:E8:85:03:CB:B8:CC:95:15:E2:A3:85
Certificate issuer:       /CN=bcc3c2b1-4073-40d5-bff6-495413d86664
Certificate serial:       010D0C9F4328584ED9C7470BA75169D17E90EC40
Authority key identifier: 3F:0C:46:74:7A:1F:18:39:17:85:08:8E:FA:90:37:20:35:1F:07:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/8983653f-7534-3c16-93d0-78e539d747fd.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     54746
IP address blocks:        136.175.128.0/22 maxlen: 22
                          136.175.128.0/24 maxlen: 24
                          136.175.129.0/24 maxlen: 24
                          136.175.130.0/24 maxlen: 24
                          136.175.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/bcc3c2b1-4073-40d5-bff6-495413d86664.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/bcc3c2b1-4073-40d5-bff6-495413d86664.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:47:0b:a7:51:69:d1:7e:90:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc3c2b1-4073-40d5-bff6-495413d86664
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=425733b4-3629-40c4-91f7-70b7f940271a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:3b:fc:e6:30:32:b5:4b:62:7e:b2:2d:20:
                    0d:6d:ab:44:45:30:fb:68:eb:f7:4a:5f:a2:00:0e:
                    fd:23:16:ec:01:7e:e0:9c:ad:fe:3f:33:91:50:0c:
                    f3:52:0f:7e:e5:94:c6:b9:bc:82:00:91:e0:de:ec:
                    68:9e:40:b2:ae:0f:13:db:e2:25:49:ca:b3:7d:96:
                    78:81:b0:9b:c0:40:82:18:e9:e9:91:6f:cf:63:e3:
                    d3:81:eb:aa:25:22:b2:80:84:28:18:6b:76:1c:94:
                    b9:95:5c:d9:23:64:a2:64:cd:c5:07:1e:e5:84:24:
                    01:cf:0a:10:09:34:0e:59:f9:40:e3:ea:79:07:b0:
                    68:62:c3:f1:8a:6b:70:82:ed:ac:d3:0d:5f:9d:19:
                    f6:4b:da:e5:83:af:b9:62:b7:9b:64:af:39:e8:a5:
                    56:62:f5:92:77:e9:27:a8:ff:c2:8e:25:24:af:dd:
                    cd:63:ba:63:26:6b:9b:fa:68:3b:ce:de:3b:fa:56:
                    4a:ff:6a:7e:4d:4d:da:bb:86:b6:3e:0c:79:73:df:
                    16:0e:e8:06:92:18:e1:94:23:1a:81:6d:d7:13:28:
                    bc:d8:c4:a7:98:61:eb:0a:7c:b1:54:25:3d:6a:76:
                    30:3b:8c:12:5e:d9:46:26:3c:ef:53:bb:de:cf:bd:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:29:66:D5:B7:AB:AD:FA:7E:E8:85:03:CB:B8:CC:95:15:E2:A3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/8983653f-7534-3c16-93d0-78e539d747fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664/bcc3c2b1-4073-40d5-bff6-495413d86664.crl

            X509v3 Authority Key Identifier:
                keyid:3F:0C:46:74:7A:1F:18:39:17:85:08:8E:FA:90:37:20:35:1F:07:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bcc3c2b1-4073-40d5-bff6-495413d86664.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:d0:89:29:b7:23:c5:f1:bb:61:35:88:48:46:c7:c9:f2:
         87:17:6a:66:01:1b:ef:a4:45:f2:c7:3d:03:19:83:5a:54:78:
         30:0d:ba:bd:78:18:76:49:fc:ec:60:50:c3:b8:5a:95:7e:cd:
         58:62:e5:33:b9:4c:56:82:49:a5:57:b8:3d:78:f2:51:31:f9:
         e9:5e:fa:66:63:f1:1c:8d:09:e4:8a:65:69:ad:5f:d6:78:4a:
         8c:df:39:17:f7:de:52:6b:e3:8a:60:7e:9d:80:40:69:80:c4:
         de:05:2f:c6:0c:9b:49:0b:c5:25:43:fe:69:9d:a4:c2:63:83:
         23:92:fc:fd:62:84:9e:d1:66:b9:f3:31:66:a1:c6:5e:79:9f:
         3b:9c:6c:f6:44:80:1d:f1:99:6a:d6:71:e5:52:60:4a:89:fe:
         ab:78:5d:15:f4:44:84:7e:c9:b6:c3:10:6b:52:f0:d4:12:da:
         4f:8a:ca:77:3b:d3:ca:a3:df:2d:89:33:a3:85:e1:2a:d6:f7:
         14:9f:ae:2f:fd:51:a6:3a:f5:d5:e2:a6:ad:d6:b1:0c:0e:56:
         66:d6:f7:4a:f4:a3:d1:58:c2:38:27:fb:44:e1:ad:bc:b8:de:
         1c:0a:62:04:4c:ba:e1:84:ba:26:01:0a:ea:0a:f4:7a:b9:e8:
         0e:19:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:04:32 2026 by rpki-client