Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3231f6a3-6929-3a86-be5e-2a18553b532d.roa
File:                     3231f6a3-6929-3a86-be5e-2a18553b532d.roa (raw, json)
Hash identifier:          6ThmWRlDRxWGZQBl6wnuOhDYbyENtK+dWt+t9wEqzjA=
Subject key identifier:   8C:BC:EB:B6:D6:69:04:D9:4C:03:1B:98:03:AD:E3:6B:AD:68:5C:BF
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584F920886DCB0CB0B3A1DAB1A00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3231f6a3-6929-3a86-be5e-2a18553b532d.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     6830
IP address blocks:        136.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:86:dc:b0:cb:0b:3a:1d:ab:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=f296ddee-b859-49a9-94f0-366105624e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:77:61:e3:16:9b:35:3c:fb:18:ed:b0:b3:
                    a9:c8:6e:40:fa:70:3f:77:67:97:85:91:03:69:28:
                    a3:d9:8a:bd:11:d4:d5:e9:39:71:e3:e0:be:9b:42:
                    0b:6a:86:00:16:e0:7b:52:07:09:34:01:60:46:97:
                    af:d6:b9:c7:f8:9e:86:c4:6f:e3:35:f0:04:61:3c:
                    0d:b2:88:fc:64:6f:1c:a2:78:53:42:a6:47:6e:c0:
                    dd:e1:5f:16:d7:61:12:5d:6b:2d:bd:61:87:32:4e:
                    bd:8f:60:c2:12:4f:df:89:3a:d2:fc:e0:6d:ac:99:
                    b5:9b:93:87:da:43:77:c6:0e:c6:d3:fe:1e:c0:3e:
                    13:8c:56:e3:ac:48:44:53:26:82:da:35:e2:b6:6d:
                    31:3c:c2:b9:4f:70:49:3e:82:ba:af:38:d5:e7:97:
                    4d:b0:a1:6f:37:56:4e:0c:22:80:97:3c:e9:03:ff:
                    c0:16:aa:82:ae:ef:0a:22:c6:a6:8a:33:ba:ce:a0:
                    4a:ae:94:f0:a9:be:dc:17:05:b5:f0:c3:48:ef:1d:
                    f7:ff:b0:33:fb:71:65:d8:c6:4a:8a:b4:68:24:d8:
                    77:46:67:5e:5a:d0:d7:68:60:0b:61:60:e8:10:71:
                    9b:9e:58:03:82:51:9f:5a:9d:ed:e1:f9:c1:f1:fc:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BC:EB:B6:D6:69:04:D9:4C:03:1B:98:03:AD:E3:6B:AD:68:5C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3231f6a3-6929-3a86-be5e-2a18553b532d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:49:e2:f6:2c:34:cd:12:02:c9:bb:10:e1:73:fb:cb:6c:10:
         33:fc:57:d6:f6:74:ef:60:f5:35:14:18:19:a5:97:68:35:77:
         cd:24:8b:12:72:19:2a:2f:bb:6c:79:cb:de:8b:8d:6b:75:c6:
         8a:2a:9c:1d:ef:97:37:26:f6:19:ae:bb:d4:4f:4b:ba:b0:71:
         3d:55:ad:7c:3e:2c:e8:35:6d:b5:67:21:5c:60:c5:12:f1:41:
         55:aa:51:d8:33:2c:a6:ed:b8:7a:af:45:3c:7c:90:74:e9:a7:
         5b:08:3a:9d:1d:1d:bb:57:63:ba:12:7d:83:47:15:21:e8:3b:
         3c:c2:d6:c1:6f:af:67:f9:e0:db:80:c0:c5:ea:2a:55:3c:78:
         ce:f2:e0:6d:3c:6e:d0:e1:3d:dd:49:1a:da:ed:51:9b:4c:2e:
         5d:d1:fb:12:e3:cf:9f:19:02:20:4d:6d:82:72:fa:ea:98:70:
         8e:d6:80:42:33:5a:cc:59:0b:61:8c:d5:f0:3d:5b:9b:a6:ac:
         a8:3e:71:ef:95:86:4c:2d:43:00:3e:f3:5e:43:fc:e5:aa:c5:
         2e:c8:4b:8c:e5:9a:fd:8a:64:5c:60:4f:66:84:d4:9e:84:6a:
         15:e0:a5:15:db:5f:fd:81:ed:55:58:24:d8:d8:2e:a6:0a:2c:
         fa:97:26:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:21 2026 by rpki-client