Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa
File:                     619e354c-81d0-3a65-8f58-b153e3edfc38.roa (raw, json)
Hash identifier:          sNRdle2WDf24KCy6CzUE4jVwAUOwFCc+2AM6loQEpz0=
Subject key identifier:   9F:F9:8A:AB:8B:AD:E2:CD:71:69:2E:57:D0:7B:4C:0B:A4:9F:94:3F
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79B033E7D7661FAB1721340
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:03:3e:7d:76:61:fa:b1:72:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=51992103-3445-4a9b-b059-217ef90f2ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:8a:d3:4c:3d:0f:24:25:d0:4b:76:21:84:
                    96:95:f9:0a:33:8d:00:8d:6d:55:a7:ff:32:22:b4:
                    02:83:36:6c:0a:e9:08:fa:6c:0c:15:8d:fa:41:de:
                    97:9c:5a:c1:ed:3a:9b:01:52:05:d2:e5:27:40:ff:
                    a4:14:70:ac:e8:e9:19:62:ee:e0:ea:27:70:1a:e7:
                    39:d9:ba:f9:b6:5b:73:43:63:6c:af:08:b6:80:45:
                    bd:16:ee:fc:83:23:bb:ea:b3:63:89:dc:55:39:86:
                    cf:8c:9c:11:11:d6:e4:3d:1b:50:08:52:90:5f:cd:
                    f9:4f:01:7b:10:b3:b9:6c:b3:64:45:30:19:45:a1:
                    30:82:6b:51:40:e6:04:1c:98:d7:7e:fa:4e:f4:32:
                    66:9d:fb:af:05:8b:ef:25:f2:15:7b:82:19:00:ad:
                    0e:d3:67:a9:5c:9d:66:20:d8:4e:85:5c:ee:42:b8:
                    80:79:5a:69:3c:ac:ea:30:58:4e:56:14:e0:41:db:
                    91:53:f2:e6:b2:ed:0f:67:3d:20:00:23:27:03:e8:
                    d6:f9:ec:8a:bb:20:64:d5:19:75:6f:13:c3:d6:05:
                    c2:ab:01:4d:10:86:88:73:fb:f3:a6:7d:5c:21:54:
                    91:8b:cb:b2:54:ac:00:75:d6:ab:7f:78:6c:f5:f2:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F9:8A:AB:8B:AD:E2:CD:71:69:2E:57:D0:7B:4C:0B:A4:9F:94:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:99:2d:65:ee:5d:67:69:3f:9f:2b:d5:d3:ce:d5:55:b7:70:
         f3:5a:67:79:98:aa:76:15:df:fc:52:5f:e5:cd:8e:37:17:56:
         28:fc:8d:f7:0e:10:6b:49:da:c6:55:e9:f6:fb:3b:15:67:15:
         7e:19:7a:de:69:90:b9:2d:54:48:a5:5c:f3:7a:0b:40:88:c9:
         ae:33:21:10:f5:e9:41:e6:c9:0d:4b:24:90:13:e2:0a:23:ff:
         e1:c7:ff:9a:86:f6:ee:a0:57:bf:07:76:34:6b:33:55:97:a5:
         eb:aa:4c:3e:91:ab:79:8d:88:31:ab:00:7f:46:55:5f:82:3b:
         de:ff:ba:be:f0:28:ff:5e:98:e1:74:88:51:20:5a:46:d1:bb:
         d0:de:d1:c5:a7:a6:23:fa:3e:07:d8:0d:20:a1:cb:30:28:37:
         60:67:78:c9:3f:f3:5c:e4:50:7b:2a:48:86:0a:82:79:bc:15:
         85:d0:53:f2:79:23:58:c5:8f:6e:0f:49:24:95:34:2f:15:3e:
         ef:3a:82:f9:d3:2f:c7:8c:48:48:fc:e1:4b:92:d3:0a:48:63:
         9b:f9:6a:9d:e9:8d:51:cd:ae:b6:0c:51:cf:96:80:b2:a6:ec:
         fe:25:97:d4:54:ca:52:dc:12:af:f6:cc:85:d5:5c:20:b2:bc:
         46:c9:4a:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmwM+fXZh+rFyE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTE5OTIxMDMtMzQ0NS00YTliLWIwNTktMjE3ZWY5MGYyZWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEaK00w9DyQl0Et2IYSWlfkKM40AjW1Vp/8y
IrQCgzZsCukI+mwMFY36Qd6XnFrB7TqbAVIF0uUnQP+kFHCs6OkZYu7g6idwGuc5
2br5tltzQ2Nsrwi2gEW9Fu78gyO76rNjidxVOYbPjJwREdbkPRtQCFKQX835TwF7
ELO5bLNkRTAZRaEwgmtRQOYEHJjXfvpO9DJmnfuvBYvvJfIVe4IZAK0O02epXJ1m
INhOhVzuQriAeVppPKzqMFhOVhTgQduRU/Lmsu0PZz0gACMnA+jW+eyKuyBk1Rl1
bxPD1gXCqwFNEIaIc/vzpn1cIVSRi8uyVKwAddarf3hs9fJpuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/5iquLreLNcWkuV9B7TAukn5Q/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjE5ZTM1NGMtODFkMC0z
YTY1LThmNTgtYjE1M2UzZWRmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBadMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6ZLWXuXWdpP58r1dPO1VW3cPNaZ3mYqnYV3/xSX+XNjjcXVij8jfcO
EGtJ2sZV6fb7OxVnFX4Zet5pkLktVEilXPN6C0CIya4zIRD16UHmyQ1LJJAT4goj
/+HH/5qG9u6gV78HdjRrM1WXpeuqTD6Rq3mNiDGrAH9GVV+CO97/ur7wKP9emOF0
iFEgWkbRu9De0cWnpiP6PgfYDSChyzAoN2BneMk/81zkUHsqSIYKgnm8FYXQU/J5
I1jFj24PSSSVNC8VPu86gvnTL8eMSEj84UuS0wpIY5v5ap3pjVHNrrYMUc+WgLKm
7P4ll9RUylLcEq/2zIXVXCCyvEbJSuw=
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:07:42 2026 by rpki-client