Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa
File:                     9afd2348-7f86-323b-8d7a-9a4032518ea1.roa (raw, json)
Hash identifier:          bKfLWhKiliErx/6plbxJJ8MNtOxXVkVONVfQDfzZOug=
Subject key identifier:   43:32:C0:36:51:85:3E:E0:ED:04:FC:A7:64:24:9C:D2:B3:2E:D1:D2
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79AECC30320E0FA9E30CF40
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:ec:c3:03:20:e0:fa:9e:30:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=18d32f1c-d803-4485-8414-90766a44da3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:bd:32:a4:61:c5:e7:56:73:52:32:f8:18:
                    13:fa:68:af:61:b3:9e:fd:59:c9:5f:f9:ad:e3:09:
                    ff:7c:72:fa:29:d8:72:7b:cf:26:fc:01:6e:1b:10:
                    11:4d:7e:22:72:f8:83:dd:c7:7b:4b:71:50:7f:03:
                    b4:78:cf:b7:fb:31:61:1a:06:8b:89:12:ba:c9:5c:
                    73:fc:a5:4a:68:e6:94:34:ad:d0:8d:d4:0c:d8:ab:
                    10:13:bb:15:17:18:67:0c:6f:8e:d7:d5:80:87:e1:
                    f0:5a:aa:f3:46:03:36:1d:79:f1:b0:c1:65:22:b8:
                    aa:c6:2e:c2:4b:b3:af:76:7a:9c:2e:f5:c2:c1:91:
                    09:87:7f:ad:f0:6e:d5:08:8b:22:d1:bb:88:4b:fd:
                    06:96:64:b7:0c:2b:60:60:4e:88:78:cd:a9:3e:04:
                    e1:9d:bf:95:4d:ee:98:51:f2:6e:f5:e3:99:0a:65:
                    9c:10:5a:9b:8a:84:94:94:c7:23:a3:88:77:98:c2:
                    b4:07:ec:d0:ed:9e:26:be:9b:e6:c0:e2:27:39:bf:
                    d9:37:49:42:7b:c5:64:cb:b3:70:1a:52:34:7f:45:
                    7f:a0:97:2b:7c:7a:81:c8:c8:11:a6:25:bb:e7:4c:
                    cc:4c:03:a2:49:3c:9b:26:85:1d:3b:e7:1b:30:01:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:32:C0:36:51:85:3E:E0:ED:04:FC:A7:64:24:9C:D2:B3:2E:D1:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:bd:bc:a8:64:16:86:b7:9d:fa:a2:31:1a:78:2f:d6:17:13:
         56:66:dc:70:c5:fa:6e:7c:69:46:0b:ec:84:00:a2:5c:ea:ea:
         98:97:d8:b8:6e:17:0a:76:12:3a:1a:30:5c:ad:f3:71:14:e2:
         70:12:63:cb:d6:eb:19:c5:e1:71:0e:b2:a9:66:eb:20:c7:ab:
         4a:86:ce:34:c3:2b:60:ca:a4:a6:19:e0:e3:56:9d:5c:d8:42:
         55:eb:31:b4:48:c6:d8:8c:bc:d6:17:87:d1:2e:1e:53:77:52:
         8e:b9:37:49:38:b3:30:0d:03:f8:73:2f:b2:8d:2a:8e:c1:51:
         89:3c:f8:43:f8:e6:73:df:1e:80:7f:19:ea:9c:9a:52:13:a6:
         d5:52:99:70:f3:34:8a:75:02:ff:3f:bc:75:03:f2:c9:81:20:
         e5:a6:55:0a:5a:0f:d5:33:b6:ee:d0:0c:fd:ff:c9:24:4f:c0:
         b6:11:02:b2:5f:cd:51:2d:75:8a:77:05:13:f4:d6:2f:88:02:
         d0:90:06:ad:e2:15:e9:61:55:f2:b0:1f:58:ac:fd:79:21:59:
         96:27:cd:a2:41:af:75:cd:12:01:a6:36:7a:f0:45:ba:ab:71:
         46:23:40:28:f1:d8:fe:2e:0c:bd:b5:20:19:a0:91:df:34:c3:
         2a:e5:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:07:10 2026 by rpki-client