Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f9f2127-91aa-38bb-a6c5-49d675ba9a83.roa
File:                     3f9f2127-91aa-38bb-a6c5-49d675ba9a83.roa (raw, json)
Hash identifier:          lepoFsr10Lo6JiuX22hpB205IEFMeWGbu0kyysjkZpc=
Subject key identifier:   ED:87:57:18:F1:18:9C:F0:DA:A8:7A:E4:13:1D:AB:62:79:1B:13:DB
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584F89A84BBA56B2A34C85B9F040
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f9f2127-91aa-38bb-a6c5-49d675ba9a83.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     36040
IP address blocks:        136.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:4b:ba:56:b2:a3:4c:85:b9:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=a550ecb0-fadd-4dad-b4ca-5f912f0f6dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:f5:7f:28:00:0b:86:a4:4a:e9:5a:90:fc:
                    46:01:1e:67:52:49:18:18:18:8a:cd:b8:82:0a:85:
                    1f:2b:32:1e:43:80:9d:65:e8:8b:35:62:af:c5:00:
                    eb:20:3e:b9:19:f8:a8:23:76:ab:74:00:04:2c:f5:
                    0a:13:d8:e4:6f:ee:19:1f:d4:3d:d7:39:28:d6:17:
                    a6:99:1a:1a:a7:54:eb:c7:3f:eb:7c:a7:a0:15:b4:
                    82:98:71:7b:7b:0a:6e:99:13:1f:bf:bf:47:f2:9e:
                    80:12:07:a1:bd:6f:48:6e:4f:1c:7d:95:78:8d:06:
                    f5:d7:55:5e:80:fd:49:68:d3:43:ac:35:2a:48:3d:
                    b5:02:fa:6e:0c:69:34:03:c0:d7:6c:af:c1:ff:0f:
                    c4:5a:42:43:5e:80:e5:8b:66:80:49:58:e9:c1:b7:
                    2c:48:ec:ed:39:cf:b3:14:ce:46:7a:e0:88:7d:6f:
                    fc:51:36:77:e0:2c:d9:8a:b4:c4:40:aa:e2:be:80:
                    e9:ea:0f:56:6f:e5:b1:3f:47:4e:9f:13:0f:aa:75:
                    9d:08:75:62:19:da:11:6d:cb:ac:d9:2f:c2:0d:ed:
                    8b:3d:a9:ab:31:b9:90:77:7b:22:f2:e1:b3:df:a6:
                    19:5a:63:c1:30:76:c3:10:96:aa:4e:46:7b:b8:8a:
                    7b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:87:57:18:F1:18:9C:F0:DA:A8:7A:E4:13:1D:AB:62:79:1B:13:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f9f2127-91aa-38bb-a6c5-49d675ba9a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:7c:40:dc:bc:50:82:a1:6d:9a:57:30:5a:3c:94:65:ce:
         97:d3:57:aa:7e:f7:b3:ee:90:d8:a5:66:81:83:82:c4:57:75:
         33:04:c4:db:b5:fd:68:4b:94:c7:46:52:92:36:26:8a:7a:f0:
         7c:e1:a3:70:94:e5:86:cf:69:40:57:c9:62:d6:80:b3:46:b6:
         64:41:3b:83:32:43:37:2b:87:92:bf:2c:d1:59:9e:85:b7:d8:
         be:9e:b0:35:80:20:af:a6:63:2e:b6:c2:3f:ba:2f:bf:3b:f1:
         00:de:6b:6e:e4:fc:b1:d3:fd:70:08:0f:4c:30:d3:e5:1a:fc:
         be:0e:48:91:72:91:ff:2b:e9:11:8c:c3:72:5c:42:74:a6:2b:
         56:1b:5c:05:28:d5:9a:c0:fe:91:46:9d:83:81:9d:7b:99:e2:
         fd:fb:81:1a:e8:ef:1b:d8:dd:ed:47:3e:11:ae:15:34:bd:ae:
         52:bd:a9:59:8a:0a:91:1f:2b:a4:19:41:44:8a:5f:99:5e:db:
         e9:86:08:82:b9:19:37:5e:6c:63:51:61:15:b7:68:9f:60:f2:
         b8:9f:6e:98:76:96:e0:ca:e0:b2:33:e3:68:a2:eb:de:57:d5:
         5e:cf:20:0b:dc:b9:96:54:4e:e8:44:4c:b9:60:a6:20:ba:36:
         c9:fd:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:39:56 2026 by rpki-client