Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/36dc80f0-76b0-39a9-9aaa-4b95a5a758e7.roa
File:                     36dc80f0-76b0-39a9-9aaa-4b95a5a758e7.roa (raw, json)
Hash identifier:          m0LTgym+dOPVwXtct3xeUk1OejXi8CdFAIzxTODT3z0=
Subject key identifier:   CF:B3:18:AE:43:A5:3F:B5:6D:F8:5D:82:9B:52:14:EB:2B:4A:73:99
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E00061816CBD208734CD42B80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/36dc80f0-76b0-39a9-9aaa-4b95a5a758e7.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:18:16:cb:d2:08:73:4c:d4:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=b60ff92a-b0be-483d-972f-c2b8e53428f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:a1:52:34:0b:6e:34:ce:bb:a5:af:55:45:
                    00:ed:f7:51:99:cb:c3:b2:45:8b:ac:78:fb:9c:0f:
                    04:37:26:75:80:a4:d8:46:03:e2:78:8a:7e:0e:c7:
                    f2:e7:44:09:41:03:1a:db:3e:8d:35:2c:d1:96:20:
                    e2:59:a6:93:07:5c:a8:cc:bb:15:23:0e:a3:16:5f:
                    e4:51:db:68:39:c1:89:47:d6:6c:3d:65:72:0f:09:
                    b1:d1:ff:73:d6:b6:1b:c4:e3:14:56:cc:e9:be:f1:
                    54:1e:09:e1:83:cb:a6:f1:8a:4d:84:ef:ca:d1:23:
                    6d:2d:ba:fe:d2:c6:84:5d:52:2a:a7:d9:bb:d9:33:
                    00:b7:3b:90:0c:1c:40:d3:45:d9:5a:72:3e:99:27:
                    27:63:db:53:4c:da:56:3a:37:d6:e3:ca:57:2f:f2:
                    19:7f:da:8e:06:01:11:b8:c3:91:01:3e:56:b9:d9:
                    10:0c:03:72:bc:62:b6:f6:52:53:c0:47:5d:dc:8b:
                    76:88:cd:a8:dd:33:f5:b9:f7:11:3a:d3:27:bc:ee:
                    de:03:c1:34:c0:99:7d:e1:f9:9b:de:bd:33:07:50:
                    b3:f8:0e:bb:1b:5d:5e:6b:75:4e:49:f8:99:55:4e:
                    a5:d4:7e:a2:53:fd:55:77:5e:3c:df:fc:61:56:77:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B3:18:AE:43:A5:3F:B5:6D:F8:5D:82:9B:52:14:EB:2B:4A:73:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/36dc80f0-76b0-39a9-9aaa-4b95a5a758e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:10:23:94:4c:2c:9a:3e:02:b6:95:0e:f1:e1:b0:5f:18:3d:
         55:0f:8f:a5:1c:12:24:38:13:6e:34:7b:db:8a:4f:ad:8e:e1:
         c6:78:54:e2:12:57:61:95:c5:9b:5e:70:a2:9b:f0:9f:db:67:
         d9:6a:ec:aa:4b:03:d4:6c:4a:13:19:49:99:ae:b9:ed:01:0e:
         60:6d:28:2c:c2:e9:d7:00:4a:04:b0:98:75:64:e1:81:d3:7b:
         6f:97:2d:12:84:42:cf:77:d5:da:bc:3c:55:4f:21:7b:c6:ae:
         c1:60:e5:93:83:97:34:88:81:fc:50:7c:52:af:fd:a0:59:bc:
         f0:6d:0b:34:f4:3a:41:f3:58:d9:4d:f5:30:02:28:f6:40:e9:
         5d:9b:96:51:d6:71:12:cb:d8:6c:f2:ff:2f:ea:77:f8:2a:58:
         05:cb:85:71:ec:c3:df:f9:ba:bf:02:c2:19:43:5f:75:c5:34:
         b8:80:f9:ce:f8:8a:98:c8:50:6b:50:1d:59:15:01:01:27:da:
         04:2f:24:cf:72:ac:2b:3a:41:50:76:78:14:91:7e:92:ee:30:
         22:2b:3c:dd:e1:29:69:5b:22:a0:a9:69:59:93:06:d6:5b:01:
         00:a8:ea:49:d8:e3:45:f3:2a:8a:02:c0:d0:f9:0f:01:40:d7:
         f5:df:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:44 2026 by rpki-client