Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
File:                     b9976d2c-e93d-3060-b104-42102b50cd67.roa (raw, json)
Hash identifier:          gprTsRzIHsBTdu07beVltBZuA9RdpS65i5AKypwU82k=
Subject key identifier:   EE:26:2C:06:90:FB:EC:73:1C:4D:59:B5:DA:01:D7:98:A0:5C:C0:75
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584D1F4A5CCA69A16D3D86EC6E80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        136.22.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:5c:ca:69:a1:6d:3d:86:ec:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=7f98914d-ea74-469e-b9b7-e657bb415383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:0b:26:e4:53:f9:46:4d:11:d2:0e:71:21:
                    8c:38:89:3b:b7:74:9e:b4:7c:b7:12:24:21:fe:e8:
                    f9:ac:ce:f8:7f:8c:c4:8c:d2:74:df:9a:ab:e1:30:
                    f5:15:b7:fc:cb:ec:ec:ab:e9:ba:08:2b:7e:68:c0:
                    6f:a0:66:65:55:ce:4a:50:1a:32:e7:04:e3:fd:fc:
                    1b:39:e8:36:83:97:58:8d:b9:0e:d5:6d:41:93:b6:
                    c5:50:e4:17:9e:be:e6:a0:87:ba:91:51:30:99:a5:
                    ae:59:fb:ce:bf:bf:87:d8:58:69:99:26:0b:34:0b:
                    ac:01:3a:7f:b9:76:61:9b:7c:f4:f9:13:6d:41:c1:
                    15:20:97:95:5d:5b:7d:43:e7:2a:6c:cd:9e:81:19:
                    83:69:53:10:50:d5:ed:b4:2b:44:a1:6b:4b:9d:c6:
                    f2:9b:1d:14:22:dd:8e:f8:87:18:c1:6b:0a:d3:af:
                    1d:c2:35:17:8f:6d:74:d1:85:22:e1:6e:95:55:57:
                    d5:5c:37:9f:fa:75:0d:2e:b5:3c:44:31:fa:b6:92:
                    d2:a0:21:4c:4d:71:e3:86:25:c3:f2:20:a1:a2:20:
                    86:5d:e5:99:2c:ce:6b:82:c3:9b:a4:35:ef:98:a7:
                    dc:28:ef:3e:18:80:2a:d8:ed:54:8d:57:e7:8c:9a:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:26:2C:06:90:FB:EC:73:1C:4D:59:B5:DA:01:D7:98:A0:5C:C0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:fa:68:36:5a:66:5b:69:3c:b9:02:61:43:69:90:85:23:
         04:5b:c3:7b:17:c6:2b:6b:97:75:80:a6:d5:c6:09:f6:01:b4:
         bd:d0:7b:26:62:ab:bb:f9:8b:fd:a2:88:ce:3d:4a:bc:06:04:
         43:4b:3c:27:05:83:b6:ac:70:da:77:83:59:d0:a7:ae:ca:48:
         40:66:cf:fa:77:a9:df:c8:b6:4c:67:f5:21:95:3b:aa:76:b6:
         f0:e7:a9:00:c4:b2:15:82:31:c0:61:e8:d8:f8:5c:b9:6e:ff:
         12:30:c6:ff:59:70:21:fb:4d:ab:49:d6:96:8a:e4:f2:9d:c2:
         92:b5:96:9c:e9:7d:9f:b1:44:1b:87:50:12:14:91:6d:44:e5:
         55:e2:de:68:3d:dc:c1:18:19:f2:82:0f:6f:89:3b:82:a6:59:
         3d:22:88:09:bb:c7:82:d0:3b:4c:3a:8a:ac:16:34:d3:6f:96:
         39:0e:6d:53:a1:f1:bf:1f:5a:96:64:5a:ac:dc:c6:89:13:e8:
         8b:73:f0:19:e4:d3:5d:ff:46:3b:4d:84:17:0d:c4:a2:a0:98:
         e9:89:dd:da:9e:46:d4:eb:1a:f6:34:51:6b:fa:c2:a7:f1:b3:
         d3:e6:8c:9f:b0:00:1e:ad:0c:d4:b9:b7:70:aa:e0:f6:66:5d:
         1d:dc:6b:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlzKaaFtPYbsboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
N2Y5ODkxNGQtZWE3NC00NjllLWI5YjctZTY1N2JiNDE1MzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A4LJuRT+UZNEdIOcSGMOIk7t3SetHy3EiQh
/uj5rM74f4zEjNJ035qr4TD1Fbf8y+zsq+m6CCt+aMBvoGZlVc5KUBoy5wTj/fwb
Oeg2g5dYjbkO1W1Bk7bFUOQXnr7moIe6kVEwmaWuWfvOv7+H2FhpmSYLNAusATp/
uXZhm3z0+RNtQcEVIJeVXVt9Q+cqbM2egRmDaVMQUNXttCtEoWtLncbymx0UIt2O
+IcYwWsK068dwjUXj2100YUi4W6VVVfVXDef+nUNLrU8RDH6tpLSoCFMTXHjhiXD
8iChoiCGXeWZLM5rgsObpDXvmKfcKO8+GIAq2O1UjVfnjJpdsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4mLAaQ++xzHE1ZtdoB15igXMB1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjk5NzZkMmMtZTkzZC0z
MDYwLWIxMDQtNDIxMDJiNTBjZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpR+mg2WmZbaTy5AmFDaZCFIwRbw3sXxitrl3WAptXGCfYBtL3QeyZi
q7v5i/2iiM49SrwGBENLPCcFg7ascNp3g1nQp67KSEBmz/p3qd/Itkxn9SGVO6p2
tvDnqQDEshWCMcBh6Nj4XLlu/xIwxv9ZcCH7TatJ1paK5PKdwpK1lpzpfZ+xRBuH
UBIUkW1E5VXi3mg93MEYGfKCD2+JO4KmWT0iiAm7x4LQO0w6iqwWNNNvljkObVOh
8b8fWpZkWqzcxokT6Itz8Bnk013/RjtNhBcNxKKgmOmJ3dqeRtTrGvY0UWv6wqfx
s9PmjJ+wAB6tDNS5t3Cq4PZmXR3ca1o=
-----END CERTIFICATE-----
Generated at Fri Mar 13 06:35:16 2026 by rpki-client