Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa
File:                     7c73910d-5c54-3833-9531-ce70a04da00f.roa (raw, json)
Hash identifier:          Anwtz3wQvyLpQMhQ6RudwAe3sd1I3/y8v9cXcchAiKU=
Subject key identifier:   6F:53:40:6F:EA:24:5D:D2:8C:73:9D:F3:7B:EC:C8:FA:71:5D:B3:71
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79A801BD021BEBCD9FACA80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:80:1b:d0:21:be:bc:d9:fa:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7c03454d-1f0f-4cc3-9035-38e41e75c875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:d6:3b:21:39:1e:3d:da:e6:23:b5:40:9f:
                    b1:7a:64:85:20:1f:9d:8e:e6:40:92:7f:47:0c:42:
                    5b:dc:94:29:f0:62:a3:0a:81:cc:b6:54:0f:27:3b:
                    50:f6:e4:5e:f1:96:34:f8:b2:68:5f:39:89:24:fe:
                    c1:a7:29:47:5a:45:c2:40:56:3a:bd:1a:24:0c:41:
                    b1:2c:a8:2f:e2:bb:22:64:30:4b:08:92:25:95:55:
                    b2:1d:a3:d9:d2:21:3c:d1:a2:53:e2:3d:ff:f9:de:
                    95:61:e3:3e:cb:b3:17:f4:82:8d:14:1f:b1:4f:ef:
                    67:c4:13:73:4a:6b:fa:38:59:29:8d:e6:91:f9:25:
                    56:45:4d:b2:d7:eb:e2:35:f2:69:83:e5:3a:7f:a9:
                    13:98:b5:94:82:d2:ea:af:bf:21:09:be:31:f9:86:
                    ac:8a:71:4f:c0:c8:1a:b7:10:d7:bb:6d:60:08:82:
                    68:50:9e:11:63:56:fb:1e:30:af:7f:ab:6a:71:ec:
                    94:05:4b:19:19:b1:af:be:88:8a:03:49:5a:9c:eb:
                    5c:e9:b0:73:8d:e2:b2:13:ea:f6:70:03:b1:30:f1:
                    27:06:3b:a4:f8:8f:e0:07:e2:4c:60:ca:3b:54:ac:
                    19:b0:85:59:2f:c9:7b:3a:87:28:ef:a7:a1:5d:b5:
                    7d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:53:40:6F:EA:24:5D:D2:8C:73:9D:F3:7B:EC:C8:FA:71:5D:B3:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:71:f4:2d:b1:a5:6a:aa:86:ae:17:94:3f:2f:35:c4:5d:
         08:04:84:19:8b:de:91:42:7b:fb:ad:3c:34:54:c5:4f:b3:c4:
         65:ef:9b:da:9b:51:1b:8f:93:f1:ae:b4:64:ab:b5:d3:a4:6d:
         9e:8f:aa:9d:bd:5d:04:29:bd:85:f3:a3:39:c4:76:fa:6b:01:
         83:6e:35:f6:b8:2d:90:65:9b:01:f9:af:a2:98:2c:cc:3f:62:
         87:a7:3a:32:48:f4:84:85:d4:6c:7b:00:73:ad:2e:4f:89:af:
         ae:45:7d:4a:13:df:ea:13:18:a2:a2:10:b8:49:4f:c3:a5:96:
         31:7c:6e:15:28:d2:60:42:fc:81:75:56:4e:d3:e3:5c:f7:eb:
         44:c9:cd:e3:79:c4:9d:96:3c:b0:0e:b0:b8:de:a2:e5:f3:a7:
         34:17:8f:d2:41:97:e8:19:98:ea:0e:7f:44:45:48:9e:7a:1b:
         6e:46:0c:2f:ce:2b:8a:ef:07:8a:3e:22:aa:ea:df:a3:8f:e0:
         85:09:22:03:70:2f:ff:c5:18:1e:8a:6a:f4:52:bf:34:89:1c:
         96:0c:0a:f8:6f:e1:67:18:3a:fb:71:df:dd:f5:b7:e7:b2:22:
         df:98:41:65:5f:f5:bb:d0:7a:b6:65:3b:fe:90:da:4d:2c:c3:
         4c:7c:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:50:57 2026 by rpki-client