Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30f2817a-cce1-3566-964b-50f338defbbf.roa
File:                     30f2817a-cce1-3566-964b-50f338defbbf.roa (raw, json)
Hash identifier:          Usr0A9k0UOmukcB4SDdBBdvWTnpoc/qsh4Yt925uDiE=
Subject key identifier:   B0:9A:04:E6:8C:90:26:AD:29:A2:A6:0B:A8:BD:03:D2:19:E4:EB:BE
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E00061E71A404036550C136C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30f2817a-cce1-3566-964b-50f338defbbf.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:1e:71:a4:04:03:65:50:c1:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=3eaed942-3f3e-4b58-a45d-51032e4d98da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:54:38:c9:a5:a6:93:cc:34:86:2c:d0:2a:
                    69:d9:fd:5a:9c:59:3e:33:63:bb:22:23:ac:e4:65:
                    61:b0:a3:1a:a3:58:da:27:9e:99:37:53:0c:25:b8:
                    c7:3f:b9:a3:c4:a5:55:06:74:e0:02:a7:f6:88:80:
                    27:55:0d:96:22:c1:38:c9:aa:34:81:51:ac:b8:9a:
                    44:b1:6d:99:9c:42:92:4a:f8:0a:82:37:ee:00:83:
                    b0:49:77:7c:17:75:59:9d:d3:1e:03:45:54:0b:70:
                    74:51:ef:f2:f2:57:3e:73:d1:0e:15:c1:06:08:cd:
                    40:e9:43:c4:12:89:23:07:4d:78:41:e4:67:b6:2d:
                    81:51:db:95:47:83:ff:fb:e8:0a:25:1a:63:38:ea:
                    69:e5:6a:44:e2:da:d9:31:1c:43:35:97:36:3a:c8:
                    f5:fb:a3:7e:68:a6:70:7a:34:62:ff:ea:de:f7:58:
                    44:11:a5:87:13:15:53:3f:6e:49:b7:ed:7f:ee:68:
                    e6:93:3d:2e:09:f8:ae:f1:0b:5d:59:d0:fd:29:43:
                    75:16:16:e5:15:85:de:9d:9d:eb:d4:56:c0:24:d4:
                    27:bf:e3:06:75:60:48:cc:f1:7b:2c:f5:db:30:ac:
                    a7:73:3b:bf:58:24:80:fc:de:80:fe:ce:43:01:a9:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9A:04:E6:8C:90:26:AD:29:A2:A6:0B:A8:BD:03:D2:19:E4:EB:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30f2817a-cce1-3566-964b-50f338defbbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:95:62:e6:50:14:df:4b:af:14:1f:df:2a:e1:cf:6e:a4:5a:
         31:47:47:e8:6b:7f:8a:24:48:24:5c:5e:16:aa:54:14:7f:07:
         22:dd:8b:a2:95:e2:5f:79:a1:f4:cd:f4:c0:df:4b:32:49:56:
         66:fb:44:07:eb:78:a1:b0:dd:a2:b4:af:48:62:70:e0:21:2e:
         b4:d7:6c:61:19:4d:13:bf:74:ee:85:08:ce:36:16:41:ca:05:
         6f:87:9e:0e:28:32:81:47:ed:e1:b7:e9:19:b3:a0:1c:69:13:
         91:81:a6:a3:26:57:15:29:79:82:4a:c8:da:5a:56:2b:52:13:
         48:21:ec:70:36:67:d8:c2:57:d3:12:ba:5c:f7:93:eb:47:af:
         f8:29:34:06:ac:de:d2:87:89:06:94:4a:fb:76:8d:48:e1:89:
         67:37:e9:d0:e1:d6:24:f2:54:3f:1d:54:85:1b:e8:3a:d3:fb:
         78:de:4f:02:e3:06:e8:26:61:ca:63:a6:a1:42:c0:8e:95:3d:
         83:b1:73:51:6a:f0:df:95:7e:2f:6a:eb:d3:72:96:79:c0:f1:
         f7:87:5b:bc:37:5a:c2:29:61:c2:84:77:a4:a8:1b:0d:b9:b1:
         a5:16:a4:db:00:66:9d:c2:df:1c:0a:3c:b7:b5:50:e9:e0:43:
         53:42:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:24 2026 by rpki-client