Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa
File:                     619e354c-81d0-3a65-8f58-b153e3edfc38.roa (raw, json)
Hash identifier:          gST+guIqthD+d/XW0odPjbN8BpIkyz0TDdQVI9uK55w=
Subject key identifier:   2F:CE:BD:8F:2E:CE:01:BE:B0:FC:6C:66:5F:79:BE:C1:45:5F:B9:02
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E00061C7E5D2FBB87F065CC40
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:1c:7e:5d:2f:bb:87:f0:65:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=395418ba-ef9e-4bdd-a8d0-4f6f969dc113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:36:3e:a0:92:6a:01:63:99:91:71:d0:a8:
                    eb:7e:6a:f4:bb:7b:66:2a:28:13:ac:ab:7a:e9:ef:
                    03:d6:8f:92:f6:b6:67:9e:bc:79:9f:f1:bf:47:ea:
                    06:81:11:0f:f0:b3:bc:5f:3a:ad:32:55:8f:ac:e3:
                    57:b1:01:ed:eb:5f:4f:2e:9a:0c:9b:d0:ad:15:f7:
                    25:06:5a:90:a8:0f:2e:57:e8:f4:61:b0:cd:ad:5e:
                    d2:9f:b2:39:4e:f5:fe:40:25:6d:9c:e1:cd:f1:47:
                    20:3a:f1:58:cf:52:ef:b0:03:8f:3b:37:9a:37:b3:
                    6e:96:7d:d1:84:ea:31:1b:18:fe:c0:84:8e:97:98:
                    f8:fc:59:71:4e:32:50:49:a4:96:99:7d:98:e0:4e:
                    dc:19:91:cd:08:56:f3:32:5d:7f:51:05:e2:39:11:
                    45:62:a8:9e:0f:7a:4a:96:51:2c:94:61:91:f0:54:
                    d4:81:a6:aa:24:53:ee:15:9d:85:ab:d3:20:06:4c:
                    d1:b2:08:5c:75:a7:0c:8e:42:be:31:9d:46:f6:57:
                    cd:04:7c:28:c9:68:84:5b:7a:e6:ce:41:aa:b4:bb:
                    c6:11:9c:cc:b2:9a:df:b8:8b:9b:af:a7:56:e6:95:
                    48:57:62:10:bc:a0:c9:f1:48:14:99:f3:eb:52:fa:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CE:BD:8F:2E:CE:01:BE:B0:FC:6C:66:5F:79:BE:C1:45:5F:B9:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:83:3c:91:ea:e0:06:eb:29:de:a3:d0:68:75:90:48:b0:dd:
         92:1e:63:df:2d:34:5c:d3:cb:cc:a3:87:bb:75:fe:4c:2f:a0:
         30:db:5a:5c:8f:80:a7:60:40:a0:c7:11:f4:93:d2:24:d5:d8:
         91:4b:65:bb:a2:a5:01:6a:b1:fe:c7:fb:d4:b0:07:c8:0e:7f:
         d1:30:2b:cc:e5:f1:e6:24:99:78:c9:10:bd:05:73:9e:a7:1a:
         39:04:13:de:4c:62:f4:ff:ae:17:3a:7f:d3:0f:dd:50:ec:76:
         29:53:e6:fd:6b:e2:d9:2c:64:65:3b:ed:b2:11:d8:7b:83:f4:
         4f:ed:62:7a:83:35:1d:68:9f:eb:e3:9c:3b:45:68:11:c7:91:
         46:b5:ff:d4:57:2a:73:6e:06:30:40:4f:9a:50:71:0c:34:25:
         29:bf:d2:9c:5c:d1:69:31:39:aa:df:4a:ae:83:4a:df:6a:a4:
         53:16:7d:58:db:79:71:33:0d:44:ad:6a:47:ef:ca:0f:3f:06:
         51:73:5b:cd:61:71:e2:63:f4:3f:0f:e4:5f:ac:4b:ec:fa:31:
         e4:da:f5:39:57:b5:5e:d8:1d:ef:5d:26:76:0f:d7:32:7c:36:
         ca:11:ca:6c:7a:c2:b8:27:d1:b4:e2:d5:8a:43:84:69:84:70:
         87:3f:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:19 2026 by rpki-client