Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa
File:                     7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa (raw, json)
Hash identifier:          6TEkO47jTh9mLZArvuiCLmRyke9wZURJyf4e/8AKrJ4=
Subject key identifier:   F9:F0:D4:07:F4:0A:48:E8:0E:8A:4E:92:47:D2:16:83:66:6F:E1:AA
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E000618C5E44C8DC50DED5E20
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:18:c5:e4:4c:8d:c5:0d:ed:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=ee3d1c3b-32e1-4069-8157-c692f6389a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:f7:3e:c1:67:15:a2:03:3f:ff:87:44:98:
                    8d:bc:b7:b4:f8:5f:8e:2d:ef:d6:03:bb:c6:0f:19:
                    4b:e1:de:b5:a9:ef:70:fc:d5:10:4d:b3:54:30:01:
                    bf:a4:42:a2:08:0b:2d:40:16:86:bb:1f:a7:63:06:
                    8d:7b:e7:7e:04:c6:38:90:fe:a7:89:11:cb:4a:18:
                    1b:b9:d3:83:69:a8:ee:88:b0:b2:ca:b9:2a:69:f3:
                    c8:7e:15:4f:20:d8:d6:ba:26:c2:d8:bc:1d:73:60:
                    da:f9:df:6b:d7:25:b8:2a:75:43:d6:f3:c7:4d:94:
                    a2:27:38:0b:bd:46:a8:87:cc:1e:e1:0c:85:4c:56:
                    01:40:c8:77:bb:2f:7d:bc:35:7c:f6:4c:e8:29:5a:
                    46:e2:de:04:6e:c0:c2:d1:c7:87:31:90:3d:b5:09:
                    8e:f8:6c:01:cf:c1:7d:73:4a:94:72:32:4c:24:d8:
                    a6:7b:0c:7e:d7:01:40:c8:26:5e:15:f2:5b:85:c7:
                    53:67:0b:21:d2:f0:47:ee:d6:d1:97:86:92:1c:4a:
                    0c:70:a6:07:ef:e6:10:cc:76:38:86:48:28:2f:96:
                    c5:8d:9f:b5:3e:a3:20:98:3b:3d:53:3e:e0:b5:f0:
                    b2:09:f7:b4:82:e3:e5:b8:35:25:73:6d:5a:18:f6:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F0:D4:07:F4:0A:48:E8:0E:8A:4E:92:47:D2:16:83:66:6F:E1:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a4:09:42:77:45:26:4b:88:12:c6:f7:ed:ee:4c:ba:50:35:
         66:ca:83:79:6c:36:80:11:e8:15:1f:bb:55:20:f1:87:0f:f4:
         5a:98:d6:f9:af:86:ed:68:72:66:12:90:e5:97:ec:1c:f7:4a:
         f8:ca:73:df:51:bb:21:9b:51:ed:d4:04:63:f2:10:d0:48:21:
         ff:b7:2c:58:11:9d:c0:59:77:36:2b:94:74:59:cf:01:d9:53:
         19:fc:0b:d9:50:ee:a0:ac:de:6d:ec:0f:4b:51:9d:1e:33:64:
         9f:ac:4c:d8:95:ce:71:bb:e8:94:ac:27:9e:25:a5:17:c9:05:
         19:04:49:e1:81:7b:02:eb:46:9f:25:d5:6e:46:a6:cb:2b:bc:
         e5:8f:33:e6:35:8f:1f:0a:77:6a:d1:f8:5e:35:46:cb:c5:b2:
         78:5e:17:3c:37:a4:65:2a:c8:fe:71:90:65:6f:35:aa:81:b7:
         2e:71:2e:b6:65:ce:33:21:46:cd:62:91:b5:cb:97:df:45:ea:
         9c:0b:d8:ae:29:d8:ae:4b:f8:50:56:62:12:93:68:e7:23:45:
         46:27:32:de:79:1f:f7:a8:4b:71:20:3d:a1:c5:d2:17:52:44:
         a8:b5:8e:1d:9c:28:89:c7:b2:9c:4b:fe:4c:5d:40:bb:3b:4c:
         7c:b7:ff:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:26 2026 by rpki-client