Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa
File:                     a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa (raw, json)
Hash identifier:          /rE9zaWiepjhsd86o3NVUEiEL8NV7eWiUy6AyPxFABc=
Subject key identifier:   98:E2:4A:90:8E:A1:6B:86:1C:A7:DF:A2:BD:C4:47:61:BD:ED:20:CF
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79B072033F6FCC38D9BA400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:07:20:33:f6:fc:c3:8d:9b:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e4478aaa-bb9f-414b-964c-aef7d5775d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:e7:df:5e:ed:64:74:50:f7:92:97:a9:23:
                    ef:90:18:b9:5b:93:f1:60:2a:13:9f:53:3d:ca:1d:
                    6f:dc:72:ee:aa:a9:cd:48:51:80:67:3e:ae:7f:ee:
                    83:9e:d8:16:6f:8a:07:1e:a9:e4:d7:6e:56:ec:99:
                    1d:73:f2:5b:c8:ca:1e:3b:cb:dc:b2:03:61:8b:ce:
                    59:ff:99:f3:c8:e4:35:7e:a2:5e:bf:dc:74:57:fc:
                    37:a6:65:8b:13:61:bb:6e:18:f0:b0:ef:19:f8:c5:
                    15:ed:5c:c8:9d:09:d6:c6:f3:da:c7:3c:a5:f2:cc:
                    ab:ff:92:19:b5:3c:76:3a:0c:75:a4:00:20:d9:2e:
                    8c:59:c2:89:8d:4f:4b:bb:48:87:4f:c2:e5:e9:5e:
                    9f:75:c3:95:9f:f1:b4:68:ed:79:57:6b:5b:d1:6a:
                    47:35:58:a1:c2:70:14:b3:29:f9:da:2e:34:81:50:
                    87:ae:80:15:54:4e:cc:b9:44:58:93:ab:74:f9:7c:
                    43:6f:48:97:da:bc:c8:c4:4b:25:62:c9:b0:cf:45:
                    ad:e3:db:e8:2e:86:63:93:20:8c:42:12:1e:af:3e:
                    61:1a:e3:91:72:34:9b:ba:82:b7:1f:92:aa:fa:e0:
                    4b:e8:a4:0c:5a:89:4a:d9:20:0d:03:d8:f5:d9:ab:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E2:4A:90:8E:A1:6B:86:1C:A7:DF:A2:BD:C4:47:61:BD:ED:20:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a17f9178-2181-3c31-b39b-7aa6b91f0dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:af:5e:c3:3b:40:10:a2:be:f6:ac:9b:05:6a:fd:b1:e8:6d:
         c2:2f:3a:15:3f:fc:55:5d:4b:1b:e9:2f:e8:92:c7:ef:c6:05:
         5d:fe:44:d9:4e:79:73:08:07:ff:e5:f8:80:4e:ad:3d:a7:f1:
         d5:f1:36:c4:17:ed:a2:ca:f0:78:96:f1:4f:96:d5:ad:24:8e:
         6d:04:4a:ce:5b:e2:4b:05:ca:ec:2a:a9:ee:38:87:88:07:52:
         c9:1e:fb:c4:fd:73:b7:75:ba:2b:2b:e9:d1:23:91:08:9e:d5:
         85:81:67:e1:72:df:73:a3:fb:03:ed:7c:38:26:9e:c4:0e:ff:
         ac:04:b2:06:fd:0b:ac:c9:d8:a4:17:81:49:38:0a:05:7b:ae:
         23:08:89:ea:29:13:30:98:fa:9e:29:04:b2:a2:fd:0b:ec:5a:
         e1:e4:df:ce:1c:82:6f:dd:46:7e:e5:47:f4:61:93:01:52:82:
         1f:a5:6d:d2:78:09:67:03:5b:c1:a7:9f:29:21:60:7d:78:95:
         19:d1:d9:00:24:35:1a:3e:e1:8a:bf:50:8b:19:de:22:a4:10:
         9a:60:7a:1a:26:95:e2:cf:1e:28:76:f8:b7:04:3d:18:7d:c1:
         de:1b:f3:07:8a:66:97:17:0d:86:75:31:10:f2:5c:4d:c3:da:
         8f:35:00:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmwcgM/b8w42bpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTQ0NzhhYWEtYmI5Zi00MTRiLTk2NGMtYWVmN2Q1Nzc1ZDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiADn317tZHRQ95KXqSPvkBi5W5PxYCoTn1M9
yh1v3HLuqqnNSFGAZz6uf+6DntgWb4oHHqnk125W7Jkdc/JbyMoeO8vcsgNhi85Z
/5nzyOQ1fqJev9x0V/w3pmWLE2G7bhjwsO8Z+MUV7VzInQnWxvPaxzyl8syr/5IZ
tTx2Ogx1pAAg2S6MWcKJjU9Lu0iHT8Ll6V6fdcOVn/G0aO15V2tb0WpHNVihwnAU
syn52i40gVCHroAVVE7MuURYk6t0+XxDb0iX2rzIxEslYsmwz0Wt49voLoZjkyCM
QhIerz5hGuORcjSbuoK3H5Kq+uBL6KQMWolK2SANA9j12au6RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJjiSpCOoWuGHKffor3ER2G97SDPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYTE3ZjkxNzgtMjE4MS0z
YzMxLWIzOWItN2FhNmI5MWYwZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWvXsM7QBCivvasmwVq/bHobcIvOhU//FVdSxvpL+iSx+/GBV3+RNlO
eXMIB//l+IBOrT2n8dXxNsQX7aLK8HiW8U+W1a0kjm0ESs5b4ksFyuwqqe44h4gH
Uske+8T9c7d1uisr6dEjkQie1YWBZ+Fy33Oj+wPtfDgmnsQO/6wEsgb9C6zJ2KQX
gUk4CgV7riMIieopEzCY+p4pBLKi/QvsWuHk384cgm/dRn7lR/RhkwFSgh+lbdJ4
CWcDW8GnnykhYH14lRnR2QAkNRo+4Yq/UIsZ3iKkEJpgehomleLPHih2+LcEPRh9
wd4b8weKZpcXDYZ1MRDyXE3D2o81AJU=
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:05:40 2026 by rpki-client