Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
File:                     b9976d2c-e93d-3060-b104-42102b50cd67.roa (raw, json)
Hash identifier:          1wCjESuTK22c4mL1mtiQiX6Vs94HT2+hFu81774rh1k=
Subject key identifier:   EF:CE:0B:9A:69:67:B0:79:C2:50:3C:46:49:DB:6C:BB:A8:8B:02:97
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79A985C7FAE690D22E6A880
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:98:5c:7f:ae:69:0d:22:e6:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e503bcca-efbb-4637-94f3-cd9bd853ded5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:32:26:29:1b:b8:66:53:b4:78:d4:68:65:
                    f4:7b:7c:2b:e8:85:ff:45:85:86:0e:48:01:32:2c:
                    82:bf:cc:60:c7:40:bb:3e:48:13:09:48:a1:79:ae:
                    52:95:66:4e:bd:9c:8b:c5:69:f0:cf:13:45:84:96:
                    76:dc:a2:7c:d1:d5:58:27:c8:76:0f:76:4e:57:73:
                    0f:c2:3d:38:61:00:0e:0e:07:c1:27:e7:9d:47:31:
                    9b:17:ad:e7:b5:09:54:71:b4:3d:e4:36:16:57:ce:
                    b4:a5:62:ac:7a:65:fc:28:2a:68:24:0d:c9:1b:d0:
                    59:72:bb:0b:d6:28:15:8a:50:88:d2:3f:db:07:94:
                    73:4b:c8:44:a1:d9:7e:fd:8f:55:7f:0b:f7:e2:71:
                    9d:37:dd:78:6e:70:12:d2:ab:e8:c7:ef:1b:34:ce:
                    39:33:fb:52:20:3f:ef:69:1c:f3:49:65:5a:46:6e:
                    3c:f2:5f:3c:87:f5:fa:89:90:f1:8e:1b:dd:14:ff:
                    80:74:ef:c2:85:02:3d:ae:1f:90:bd:f8:d9:c3:b5:
                    e9:c8:a7:6b:90:81:31:05:9a:ca:ed:56:1e:d6:07:
                    d1:74:91:53:5c:c4:4d:bd:42:d4:9e:17:ab:85:ea:
                    5b:3c:e4:61:62:0c:8d:93:20:86:57:31:69:4e:60:
                    87:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:0B:9A:69:67:B0:79:C2:50:3C:46:49:DB:6C:BB:A8:8B:02:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:34:8c:e9:55:f6:5d:b8:34:d2:0f:7c:55:f0:22:8a:71:c1:
         23:63:23:c5:5f:1f:e5:33:a1:b2:db:8b:7d:37:f3:24:b1:36:
         68:a5:41:6e:46:a4:27:96:6f:c3:d5:3a:27:d8:9b:2f:bd:19:
         99:34:7f:6f:44:cd:9a:d3:2c:b7:53:93:1b:3a:1d:54:61:9c:
         6d:21:6f:e7:c1:d8:04:b5:97:e6:fc:60:7e:c2:90:c6:cb:c6:
         5c:0a:58:10:a8:1c:b5:e8:99:30:61:6d:cc:46:fe:22:50:e2:
         b7:00:b9:9c:0a:6e:2e:a0:99:c4:21:d9:c7:bf:c6:b5:e4:33:
         e6:e1:b2:f5:4d:9f:d8:c2:c8:e2:93:3d:f3:42:85:79:34:39:
         83:9d:25:ef:41:24:1b:21:8f:2c:88:ca:08:9f:ff:c8:15:66:
         66:ec:e3:53:6f:bb:cc:0f:12:55:a7:ee:b2:d6:61:5e:1a:9b:
         f6:a8:fa:0c:83:5a:ab:39:28:f9:e0:66:53:8c:0b:bc:38:cd:
         0e:b4:05:c2:e3:0b:6b:d5:1c:ab:fb:07:3a:fc:ea:ea:01:b0:
         2c:37:0c:1f:e6:2e:bf:90:16:59:2e:91:32:5e:cf:35:3e:5a:
         74:ca:33:2c:90:8b:f7:5e:af:83:c6:67:e2:1d:54:e4:c2:f3:
         9c:24:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:06:03 2026 by rpki-client