Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa
File:                     67809917-6020-3043-ad7f-2c9b27b1d820.roa (raw, json)
Hash identifier:          ol08f2g3Lx0LPlUPgCr5QgxjKR9gHVN2JBNtouiaxIQ=
Subject key identifier:   A2:48:87:08:1D:EA:19:45:27:7E:AD:8F:45:12:63:07:71:72:65:B1
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E000619E2883A99E1F3511600
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:19:e2:88:3a:99:e1:f3:51:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=784009ac-7625-4da9-bbe1-7225aa990b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:54:86:21:b0:32:fd:66:2a:d7:a8:82:ad:57:
                    ec:e6:28:31:34:53:fd:32:0d:2b:4c:be:6f:84:1b:
                    90:08:f7:3b:81:d0:66:24:f4:f3:ba:79:09:a1:da:
                    5c:8f:38:64:38:85:ad:bc:33:8a:5f:10:a0:cf:fa:
                    90:cf:36:8b:09:d2:f3:fa:f3:6f:22:43:6a:f3:08:
                    f3:22:d7:5e:1f:e0:69:1f:fa:31:82:92:f6:a2:83:
                    cd:32:95:b3:64:0b:9e:f0:7c:76:fd:51:c9:91:51:
                    49:dd:42:0b:74:41:15:27:3d:93:fa:1c:f7:e8:74:
                    66:83:de:3b:62:99:6d:14:9a:6c:05:d8:45:9d:a7:
                    7c:f4:c5:f8:83:96:62:36:c9:ec:cc:cb:c9:87:96:
                    67:ae:63:09:fb:42:a3:43:e4:ef:40:59:e5:18:52:
                    13:a1:7c:fd:8a:60:8c:ea:27:75:81:a9:3b:97:e5:
                    b2:58:0f:7b:b4:5d:42:ad:40:5b:85:0b:fa:4a:a8:
                    73:e4:df:68:96:ea:9b:5a:58:81:24:f7:27:2b:d7:
                    fb:f8:80:2c:b1:8b:32:ba:68:01:86:3e:98:2f:8b:
                    b7:c7:13:a6:88:32:33:33:a6:96:26:df:0b:0b:0c:
                    6e:c2:ee:ff:ac:9c:90:20:14:9b:34:8c:a0:d8:b5:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:48:87:08:1D:EA:19:45:27:7E:AD:8F:45:12:63:07:71:72:65:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6c:d1:76:af:39:82:0d:c5:1e:2f:be:38:76:fb:5a:8b:6c:
         d7:19:f5:71:44:a6:ad:55:99:3d:4d:a2:a2:dc:5d:ff:d4:f0:
         58:d4:5f:8b:50:f0:aa:37:a7:a4:9d:3e:c4:bc:e9:dc:8c:64:
         67:ad:2a:b4:0d:25:e4:9d:08:f7:ab:3e:50:85:cc:42:26:5d:
         cf:90:61:1d:3f:15:20:f0:bb:47:69:32:dd:1a:33:42:1e:d8:
         2f:bc:53:35:07:01:b3:ed:b9:82:44:bd:f0:39:73:6b:ae:4a:
         22:b7:aa:0a:06:95:78:9f:bf:2b:93:5f:bb:dc:d8:4a:88:8b:
         b0:a3:4e:1c:a2:bd:5f:bd:89:d4:d8:88:7f:ee:51:80:01:16:
         0b:02:90:fe:ee:91:bb:f3:fd:8f:5b:22:d5:ed:c2:a3:a7:43:
         ea:bb:49:e2:d7:26:53:98:e5:c5:ab:fa:f3:93:0c:3f:d1:e9:
         e1:e5:fb:13:71:64:d9:cc:07:10:2e:5f:5d:7b:2e:51:8c:30:
         f5:06:46:4a:dd:15:27:01:22:cd:c1:4a:29:9f:55:b5:60:ca:
         49:7c:03:99:fb:b4:3b:0d:c0:15:3d:83:a4:af:51:a3:4b:db:
         90:11:25:4e:23:a3:22:a1:86:60:e9:c4:ed:30:07:bd:4c:c6:
         54:d0:c0:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhniiDqZ4fNRFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
Nzg0MDA5YWMtNzYyNS00ZGE5LWJiZTEtNzIyNWFhOTkwYjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlSGIbAy/WYq16iCrVfs5igxNFP9Mg0rTL5v
hBuQCPc7gdBmJPTzunkJodpcjzhkOIWtvDOKXxCgz/qQzzaLCdLz+vNvIkNq8wjz
ItdeH+BpH/oxgpL2ooPNMpWzZAue8Hx2/VHJkVFJ3UILdEEVJz2T+hz36HRmg947
YpltFJpsBdhFnad89MX4g5ZiNsnszMvJh5ZnrmMJ+0KjQ+TvQFnlGFIToXz9imCM
6id1gak7l+WyWA97tF1CrUBbhQv6Sqhz5N9oluqbWliBJPcnK9f7+IAssYsyumgB
hj6YL4u3xxOmiDIzM6aWJt8LCwxuwu7/rJyQIBSbNIyg2LVvrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJIhwgd6hlFJ36tj0USYwdxcmWxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjc4MDk5MTctNjAyMC0z
MDQzLWFkN2YtMmM5YjI3YjFkODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZs0XavOYINxR4vvjh2+1qLbNcZ9XFEpq1VmT1NoqLcXf/U8FjUX4tQ
8Ko3p6SdPsS86dyMZGetKrQNJeSdCPerPlCFzEImXc+QYR0/FSDwu0dpMt0aM0Ie
2C+8UzUHAbPtuYJEvfA5c2uuSiK3qgoGlXifvyuTX7vc2EqIi7CjThyivV+9idTY
iH/uUYABFgsCkP7ukbvz/Y9bItXtwqOnQ+q7SeLXJlOY5cWr+vOTDD/R6eHl+xNx
ZNnMBxAuX117LlGMMPUGRkrdFScBIs3BSimfVbVgykl8A5n7tDsNwBU9g6SvUaNL
25ARJU4joyKhhmDpxO0wB71MxlTQwM8=
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:14 2026 by rpki-client