Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa
File:                     7257db57-885c-3616-9770-9cdc08337427.roa (raw, json)
Hash identifier:          yaVRwAaL0OSnqmYWtFYRSahcIHRLLnWdgVhZN1FVJe8=
Subject key identifier:   84:C7:0F:15:2D:07:A7:68:37:1F:7C:53:6C:5D:93:24:22:50:D4:D3
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E00060FD1565582718B6E46D0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:0f:d1:56:55:82:71:8b:6e:46:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=a0db544e-df94-4039-9667-339b9b0af645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:2e:e2:97:fc:67:52:9b:34:c2:ff:0d:e1:
                    42:3d:b3:98:78:0a:65:b2:c5:43:12:3b:d7:b8:21:
                    da:71:aa:1c:f3:14:59:a1:be:99:d0:3f:5a:cc:51:
                    a7:7f:fa:c6:34:ef:f9:c1:d7:c8:af:bb:9e:3c:89:
                    d4:f2:93:a5:81:b6:f9:de:dc:f7:5a:c9:b9:08:60:
                    fa:93:fb:87:c5:c9:96:75:a1:f6:17:fb:a8:26:e9:
                    35:8e:03:47:0f:88:08:ca:5a:c1:88:b8:7c:ce:4a:
                    02:f0:51:7f:3e:6d:d6:fe:23:d6:a0:36:b3:b5:e2:
                    18:a9:e1:79:b2:06:62:3b:b7:2b:26:ea:77:61:00:
                    5e:db:8e:5f:9c:81:18:ce:64:dc:6d:32:c1:fa:80:
                    d3:23:31:28:e8:91:36:4b:f8:3e:88:23:5f:97:92:
                    f8:f5:03:4c:80:2f:f2:63:2e:a9:f9:6a:5a:11:36:
                    79:aa:29:3f:5a:0c:b6:cc:c8:e2:f9:f8:8f:46:1b:
                    95:81:b0:46:3d:35:07:27:0d:6c:6a:03:67:cd:fe:
                    9e:58:80:39:ff:d1:e8:ae:db:39:68:04:f3:75:74:
                    b3:f5:1c:ee:77:1e:1d:82:e4:fe:ce:b8:18:2d:a1:
                    17:bb:f4:2e:7b:00:64:3b:9c:00:dd:12:74:c3:89:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C7:0F:15:2D:07:A7:68:37:1F:7C:53:6C:5D:93:24:22:50:D4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:74:ef:22:4a:9a:aa:4a:0a:97:3f:f8:5f:76:c9:67:b2:82:
         15:16:08:24:a1:3b:78:98:0c:ff:39:c6:59:a5:4f:b4:ae:a8:
         07:c5:b2:19:1f:37:46:5f:59:8b:0a:07:e7:81:c6:58:4a:13:
         87:31:cf:a1:d4:72:37:e3:ca:ff:ab:fc:76:5e:4f:5a:a1:8b:
         f5:0e:12:05:89:53:3c:e2:b3:ec:da:77:49:3c:a3:37:40:bf:
         d0:db:2f:2f:c5:a0:d7:62:7d:70:bc:b5:01:07:62:c8:86:8f:
         49:7b:36:0d:96:48:75:c6:97:44:46:98:80:19:7e:eb:1a:80:
         75:b0:11:27:01:d4:74:9d:ad:19:3e:7d:3d:44:09:70:55:c1:
         08:5f:d1:06:52:d5:9a:60:08:51:d6:c5:6d:57:87:79:d0:99:
         a0:01:3e:2e:a4:07:36:84:8f:3a:4f:b0:0e:1f:e6:ed:84:69:
         e7:ad:91:3e:82:1d:22:fd:77:92:15:7d:bc:f5:a4:b1:c1:c5:
         2f:86:17:ad:d5:82:9f:2c:39:16:c6:b7:e1:96:eb:90:41:6e:
         43:19:dd:c0:5c:ce:74:64:84:a8:19:b9:0a:f6:42:1f:32:f2:
         fb:25:19:59:3d:13:17:4e:b6:60:01:ee:c6:28:c1:a5:30:14:
         a3:d5:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:16 2026 by rpki-client