Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa
File:                     c96f3789-8034-380c-9379-7cb735811c20.roa (raw, json)
Hash identifier:          065U+I4GfIWa+BMaYE9b46UzlM9VjgMEDfjHGUtwsxo=
Subject key identifier:   3A:14:E4:A6:D4:5A:97:56:06:67:A2:66:FF:96:27:BE:62:99:28:81
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E0005F2D85CEB9B4348790E00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:f2:d8:5c:eb:9b:43:48:79:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=38867b96-b2d7-4800-9949-32e6e0baf29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:ca:e8:f8:15:f5:1e:13:f0:a5:de:68:50:
                    f8:e5:9c:7e:27:4e:75:78:67:0e:ab:e7:40:2b:f1:
                    60:ff:f4:98:5f:81:d4:b4:a0:bf:b0:99:f9:67:2b:
                    2c:c7:f5:09:b6:47:a6:2a:c5:50:22:2f:db:bc:85:
                    f0:77:3e:74:09:5d:c3:af:2c:86:aa:3f:fb:8d:07:
                    35:98:5f:c4:4f:93:32:07:a3:1f:94:8d:60:7c:72:
                    56:c4:36:69:46:69:46:3d:90:34:99:0b:46:09:9a:
                    83:60:d2:64:84:ce:fd:7b:d3:27:6f:1c:75:cd:2e:
                    1f:b1:a6:79:92:53:3f:18:68:b5:4e:83:d3:20:a8:
                    f6:63:52:d3:d1:5b:54:24:8c:ea:0c:d1:95:df:bc:
                    65:2e:01:b3:86:fa:36:10:3c:2e:ee:d9:76:09:77:
                    37:67:78:b5:26:87:b7:f2:b2:68:07:45:75:5f:91:
                    75:b4:a7:42:ad:ae:1e:d0:89:ff:47:57:7f:ed:b5:
                    12:19:f4:da:9f:01:2e:44:73:78:f4:e1:f1:fb:34:
                    ef:d8:3f:bf:a2:3c:c7:fe:49:7c:0c:12:e1:64:d6:
                    c1:40:97:51:be:a4:69:f9:76:e1:3a:a3:70:11:a4:
                    f8:e8:76:7d:44:9d:11:c9:20:5e:6f:c7:33:1c:ad:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:14:E4:A6:D4:5A:97:56:06:67:A2:66:FF:96:27:BE:62:99:28:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:5d:45:f6:ff:b2:22:5d:79:af:fd:d0:0c:8f:74:2a:2e:fb:
         95:e6:39:d6:95:be:b9:6b:06:ee:3c:92:08:99:fe:4d:57:7b:
         a3:ad:79:b1:a3:c8:ca:3f:e9:d4:6b:72:3a:f3:a1:6f:8b:69:
         17:8b:bc:14:ac:6f:d6:ac:6b:8b:e3:b2:11:57:1a:c2:64:5f:
         3d:62:ff:a7:3d:ed:41:fc:60:b7:bf:aa:d1:f4:a6:b3:5a:21:
         cf:73:e3:b5:88:71:2d:35:33:25:d8:03:01:f3:91:4c:4e:4b:
         04:e3:72:82:16:cf:ec:b1:23:53:7c:32:3e:69:d7:6c:9d:af:
         04:49:ce:6d:10:96:a2:5c:f2:45:37:97:80:5d:02:ce:26:90:
         11:61:a4:3d:e1:0c:58:4d:c1:c9:af:fc:71:78:17:a3:18:e2:
         c5:5a:6d:46:47:8c:e9:7f:bf:3b:5c:06:f4:79:98:c1:d8:08:
         fb:a9:58:96:37:9e:0a:97:d1:08:5a:f6:43:ba:dd:39:c8:33:
         b3:3b:fc:b1:20:9c:d2:47:59:66:9a:dc:77:8b:2e:94:38:53:
         f9:47:de:45:0e:64:a0:11:a1:55:5f:00:c5:c0:5d:de:8c:bd:
         c8:a4:6a:8b:1e:47:e5:6b:a4:48:e1:65:32:b9:aa:56:ff:09:
         76:ff:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:13 2026 by rpki-client