Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa
File:                     c96f3789-8034-380c-9379-7cb735811c20.roa (raw, json)
Hash identifier:          42flnQqqSnZyqpQN2y7lf8tivPeNykrvoiX1Luglc0Y=
Subject key identifier:   9D:ED:D3:81:3C:89:ED:33:72:92:19:A0:AD:EA:78:B6:E9:5C:B9:F7
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584D1F4A532A089B4E824E65F680
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        136.22.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:53:2a:08:9b:4e:82:4e:65:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=505102c1-438b-41f2-b716-c40e24ee441b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:33:18:45:dd:66:71:86:d0:38:b7:2a:cc:
                    d7:8e:12:05:5c:c3:99:36:bf:72:ed:9d:b8:dc:09:
                    97:8a:a3:6f:85:3c:10:f0:90:4f:cf:5a:bc:56:2a:
                    0a:da:35:27:63:7c:b5:0e:f4:53:68:c6:41:3c:54:
                    90:4e:f3:4f:74:bc:60:2b:05:87:cf:f2:19:15:37:
                    60:8c:88:dc:35:01:4c:43:01:4d:8f:bc:2e:1a:55:
                    d4:30:0b:ed:39:0c:26:58:28:72:e8:a3:7d:58:6c:
                    89:c5:8b:20:b5:9c:06:e9:a9:74:a9:7e:82:e5:01:
                    60:ae:99:4e:2b:c6:6b:0e:d0:c2:19:21:37:43:9b:
                    97:13:0b:ff:81:21:ad:52:c9:e3:9b:f3:ef:a4:24:
                    e3:8d:2d:3a:1c:98:8a:a2:53:4b:48:0d:6f:7f:30:
                    e6:18:03:a1:7f:2c:20:e2:5b:50:fe:7f:b4:56:83:
                    43:b1:30:ec:86:08:ad:62:68:7d:9e:89:17:59:50:
                    45:2e:c8:ea:65:76:b9:a8:9a:e2:82:72:28:1d:7f:
                    59:54:dc:94:84:7e:dc:5c:c7:75:cb:5f:fd:6f:e1:
                    8c:82:b1:ce:d7:e1:3d:36:b2:6c:cf:7c:ed:d2:97:
                    ed:ad:46:09:68:8d:b3:6b:c0:bc:6c:2c:8d:db:5a:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:D3:81:3C:89:ED:33:72:92:19:A0:AD:EA:78:B6:E9:5C:B9:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:7b:0a:90:a2:76:4a:0f:26:44:63:c1:10:f1:d2:3e:64:
         db:47:f7:9e:4c:be:ff:68:ec:00:98:e8:0c:25:43:03:71:e4:
         89:1b:53:e6:1b:ed:75:1b:c0:60:2d:52:40:1f:1f:09:f1:1e:
         27:93:f2:0e:74:db:40:88:10:61:8c:ce:f2:86:70:b2:6d:dd:
         2f:d9:68:32:5f:ff:da:db:6c:d2:92:e8:2b:4b:49:4a:b2:d5:
         52:78:b5:ea:62:40:2d:fb:35:80:ca:de:78:9c:26:dc:d4:03:
         0a:cb:18:46:1e:28:81:a4:b6:3e:b4:f3:42:c0:42:a9:7a:51:
         51:33:fa:52:16:5f:e1:b1:80:fc:18:a0:26:66:a3:eb:f8:2f:
         81:23:c0:d9:0c:68:c8:73:38:f3:02:84:3d:00:c3:81:62:5e:
         4a:79:f9:ef:50:db:c8:08:97:8a:6f:77:5e:da:fc:64:d0:35:
         f8:e2:fe:cf:0a:e4:e6:c9:12:af:d3:e7:44:f5:ac:6b:94:8b:
         3b:b6:ac:e3:cf:01:35:fd:97:6f:40:fc:88:74:b1:8b:78:2e:
         ab:71:ce:48:64:fd:dd:ca:84:cd:5e:9c:8a:36:25:b6:77:33:
         2c:43:2e:15:01:9e:3d:17:7b:66:f0:7a:4b:3d:de:6d:4f:2e:
         cd:a3:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:33:39 2026 by rpki-client