Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa
File:                     7257db57-885c-3616-9770-9cdc08337427.roa (raw, json)
Hash identifier:          9kitgX/WVLaBJZ2vYdSz2QWQYIufvtTaQJLaCL0EZDE=
Subject key identifier:   2A:2D:AD:30:20:68:32:8E:FB:CD:29:58:BA:99:A9:E2:B7:7F:4B:80
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584D1F4A7364413D27D1606BCF00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        136.22.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:73:64:41:3d:27:d1:60:6b:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=a2e35aeb-2a5b-4dd6-b6de-6aaed9cab2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:7e:7c:02:95:1a:df:0d:d2:8a:5a:60:86:
                    32:44:8d:1c:1e:67:52:06:19:e7:fb:05:7e:3e:e3:
                    e7:73:24:64:b5:51:00:8d:df:34:8d:d3:18:d1:f2:
                    60:ee:91:7e:04:13:cf:fe:c3:9a:f7:64:93:49:00:
                    46:d9:df:ab:cf:ba:96:f9:d2:f5:48:9c:21:b0:14:
                    08:7b:72:81:10:0e:18:ae:6c:c0:4b:0c:eb:2e:cf:
                    f8:e5:47:52:2e:dd:ba:72:b6:99:67:82:40:f3:3b:
                    6b:0a:44:f9:b6:1c:dd:54:38:7e:78:e5:2b:ac:bb:
                    c8:03:b8:af:e5:8d:06:eb:08:54:8b:7c:ef:f1:f3:
                    2e:69:b3:e4:9d:21:c7:6d:ea:6c:41:1a:89:f3:59:
                    92:09:77:23:78:e7:8e:35:62:1f:67:2e:43:36:bf:
                    3a:57:7d:d5:b9:b9:a6:8d:78:46:14:61:2b:9a:8e:
                    2f:13:e8:25:0f:56:21:75:f9:46:08:ea:cb:2d:fe:
                    74:13:f3:4f:34:00:8b:65:42:bf:cd:28:27:33:2a:
                    a3:bf:75:82:4c:e9:00:0f:08:84:2e:76:7e:63:ab:
                    1b:3c:55:4c:f2:c3:a2:d2:05:d5:06:55:9c:e3:46:
                    29:fb:f6:15:da:d0:08:9d:9e:e2:7d:bf:07:c7:9f:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2D:AD:30:20:68:32:8E:FB:CD:29:58:BA:99:A9:E2:B7:7F:4B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:56:ef:81:74:23:17:ed:8b:32:d5:a4:03:d2:dd:0d:0e:
         85:4d:a6:0a:f9:1d:5c:d0:9f:e1:65:d0:59:40:42:22:5d:72:
         4f:63:1d:e5:c4:a4:6d:eb:34:92:af:04:80:6d:8c:a9:62:17:
         4e:8c:37:69:92:c0:66:72:2b:88:7b:d2:8b:cb:0f:b7:bc:b0:
         bb:d1:ab:d4:a9:09:7c:77:75:ab:fd:26:3f:0e:f4:0b:ab:db:
         54:df:9e:95:89:ab:38:c8:ad:a9:f7:cb:43:a5:ca:83:c5:b1:
         f3:c7:09:a6:07:e5:5b:24:e8:c1:52:a4:e6:50:23:be:bc:d0:
         68:a6:2f:e8:a3:43:d6:ad:4b:6c:03:f4:34:04:f8:f2:fa:0f:
         0c:ef:07:8a:da:67:d2:c4:c7:c1:fd:5e:36:d1:e3:24:15:73:
         c5:3f:4d:1e:94:43:e0:31:9e:ad:15:69:f1:8f:77:14:6b:7e:
         9c:3b:56:ea:bb:46:92:06:d2:f8:28:8b:79:43:3e:c7:3b:85:
         d2:fc:94:06:1f:d5:3c:ff:bf:ed:00:b2:d8:37:41:0f:60:67:
         31:37:7f:a5:b8:f0:35:cb:f2:cc:a7:c3:c5:05:50:9a:2a:83:
         6b:ad:83:e6:c1:eb:30:7a:99:e6:21:83:2f:f3:68:02:ce:11:
         51:63:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:34:53 2026 by rpki-client