Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1f9ce0ab-bd8e-3867-bdbb-83f61bbcfe35.roa
File:                     1f9ce0ab-bd8e-3867-bdbb-83f61bbcfe35.roa (raw, json)
Hash identifier:          8JcNH5nAyBBJK8zL4LqsTzton1VHz8quk+iOAyQ7KWk=
Subject key identifier:   AD:9B:D4:2D:B2:5B:C5:7D:02:62:9C:70:34:F0:5D:4A:C4:7F:B4:A6
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E00061759175DA5B3C584E600
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1f9ce0ab-bd8e-3867-bdbb-83f61bbcfe35.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:17:59:17:5d:a5:b3:c5:84:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=12efd56b-a238-4ae7-b797-c292aaf6a79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:84:08:ac:70:0c:f3:e0:31:af:99:a9:28:
                    02:57:4b:98:8a:64:81:bc:ea:71:91:ca:07:01:52:
                    2e:da:41:91:6a:4e:48:10:8f:ac:b2:26:32:a7:01:
                    f0:6f:54:fc:48:e1:a5:44:d6:e6:c1:2f:76:72:82:
                    a0:fa:14:7a:81:ba:dd:c6:1b:cf:c7:d5:aa:96:91:
                    78:a1:32:d0:dc:d1:42:2e:e4:b3:af:6b:c1:1a:90:
                    bd:f9:7a:ba:c2:d6:00:41:1a:35:c3:f2:3d:84:d4:
                    a5:33:11:7c:cc:5b:bd:c2:b5:5b:8e:bb:d9:81:18:
                    ef:c6:4c:98:f4:6a:14:dd:cb:00:6c:4c:14:d9:6c:
                    c9:c5:66:cf:95:90:0a:7e:0c:cb:74:d2:45:c3:3f:
                    e2:4d:48:03:b4:a1:19:71:8f:4d:2b:25:cd:81:3d:
                    e7:82:76:e3:6c:f9:81:04:57:64:8a:5e:d4:a4:7b:
                    0f:4c:f8:7c:a7:c0:2c:e8:c6:4d:82:c1:b6:f1:8f:
                    2d:4b:d8:23:fc:64:e6:e3:94:af:45:93:ce:60:2c:
                    22:1f:c6:2c:f4:5e:ff:74:9c:ca:1f:e1:bf:af:39:
                    47:00:f6:e8:a1:b8:e5:7c:73:a2:10:d2:e9:54:ea:
                    eb:9a:3a:48:0e:8e:31:cc:d6:02:af:a7:49:0b:43:
                    79:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9B:D4:2D:B2:5B:C5:7D:02:62:9C:70:34:F0:5D:4A:C4:7F:B4:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/1f9ce0ab-bd8e-3867-bdbb-83f61bbcfe35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:54:6b:9f:89:26:10:9a:2f:98:db:cb:b0:58:d1:85:42:22:
         79:e9:54:70:97:9c:9b:06:5f:c6:e7:b9:02:36:0f:be:ae:ac:
         8c:6c:6d:a9:15:6f:fb:f3:8d:c0:73:1e:1f:7c:9c:58:e5:4c:
         64:9b:78:13:5c:94:53:fb:8b:2a:41:8c:cf:d8:f1:78:46:30:
         27:0c:31:05:29:e0:cb:3c:49:d4:49:60:e3:4d:c2:4a:1c:d1:
         5e:0e:05:94:04:fe:93:90:b9:af:77:3e:f6:d6:f1:2c:df:c3:
         a1:51:d5:19:65:9b:81:97:eb:aa:b6:85:52:a6:63:c3:59:e9:
         79:5d:d8:fb:7d:aa:7e:51:74:83:53:d4:f8:27:20:7d:4d:a9:
         87:ec:16:fc:1f:52:5d:79:2c:51:02:51:5c:e8:c9:8f:d7:50:
         97:f3:91:e5:ef:c3:a3:e7:a1:4a:64:8b:a4:03:09:4a:76:89:
         ce:23:2d:f4:71:02:35:64:2a:65:ee:e2:3a:f4:56:61:53:9b:
         e4:e8:9e:4a:47:70:af:bd:48:41:a6:b1:ce:95:5e:19:f5:5e:
         67:f6:35:6d:a0:03:7b:98:2d:34:38:1f:9f:1d:b6:20:3d:cb:
         5d:ab:9a:40:77:46:c7:8e:df:ce:40:2f:b7:6c:2f:b9:0e:e6:
         95:62:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:47 2026 by rpki-client