Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa
File:                     e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa (raw, json)
Hash identifier:          h9P7FA37ANsiAvwzdlirDIa3SBVKn3TwMVd0umryxaI=
Subject key identifier:   3F:AF:2D:01:84:97:96:3E:67:FF:36:0A:1D:59:D5:00:50:1E:43:4F
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79A85CD8644BF22D2928180
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:85:cd:86:44:bf:22:d2:92:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=667cc805-504f-4c99-a537-0ab259608581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:c5:cb:1f:02:36:9a:20:b0:27:d2:4e:84:
                    37:3c:08:99:32:b1:ab:49:02:72:6d:a5:bb:49:20:
                    7f:4c:48:07:db:74:2b:d1:9c:f8:04:9c:1b:bf:a7:
                    97:6a:57:78:48:db:3f:f4:cd:6e:fc:5f:28:69:4d:
                    b7:a4:a1:5a:6a:85:c8:ad:39:c9:27:ce:92:78:d0:
                    24:cc:4d:e2:53:f7:dc:e6:47:67:00:59:cc:fd:42:
                    1c:88:b4:b6:34:c4:19:6d:88:cb:30:7e:26:69:38:
                    f0:0c:d3:0a:62:06:7e:ba:91:59:ea:d8:7c:b6:15:
                    05:46:52:85:c6:8b:21:91:f0:ce:05:08:1c:5b:10:
                    54:d0:27:d1:33:7f:19:86:4f:cd:28:f0:53:57:a4:
                    9a:4f:b0:5a:c8:d7:db:33:2a:24:45:7d:17:3e:6c:
                    48:ee:ed:27:7d:10:1d:3e:cc:9d:99:51:76:01:ee:
                    83:1c:72:fb:30:d9:f5:48:85:f1:48:be:36:20:f9:
                    c0:d9:53:b3:53:00:10:40:24:00:b8:46:0a:44:41:
                    f2:e8:0b:7c:bd:51:ae:d6:f6:d9:d0:54:be:29:c5:
                    71:93:79:16:c1:50:b9:9e:73:33:7b:42:21:f4:62:
                    e0:3c:81:ef:23:59:a6:b5:68:9a:92:5f:97:47:52:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AF:2D:01:84:97:96:3E:67:FF:36:0A:1D:59:D5:00:50:1E:43:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d0:6e:11:82:f1:01:e0:31:40:90:02:da:2c:48:ac:20:da:
         97:9d:2e:1c:6e:cc:59:80:e7:b3:1b:0e:50:97:df:19:38:fc:
         f3:c6:48:b5:9c:da:e1:62:e1:e1:04:65:5d:14:06:3f:e5:1c:
         7c:8f:bb:fc:ba:7a:5e:f6:52:3c:48:c4:93:57:f5:a0:ba:41:
         58:67:ab:6b:e7:c7:3c:8e:f2:7d:40:7c:61:07:91:5f:d7:db:
         b2:5b:cc:57:b3:f8:2d:9d:f3:cb:6c:c5:68:e1:9e:10:31:09:
         19:6d:90:e9:83:28:cb:1f:6d:9d:25:f9:47:4b:f4:9a:0c:0e:
         ed:d2:43:bd:5d:2c:ac:68:f5:2e:0f:0c:9b:07:21:1d:8b:ae:
         34:6f:8a:73:42:79:c2:9c:28:11:a3:04:8c:6b:85:01:5b:a1:
         f3:39:3a:58:90:9d:51:0f:08:b6:89:3d:f7:f9:07:e6:47:d5:
         df:d8:bb:29:12:60:b3:e7:b7:a6:b5:b9:98:ee:f6:cf:34:5c:
         2b:db:19:b1:3e:2b:d3:98:a1:44:10:1d:bd:f8:a0:11:01:3e:
         ff:66:5a:58:e5:b9:16:11:4c:2a:ab:7f:1f:54:f5:e4:c4:0b:
         62:26:89:7c:3c:b5:a2:3e:c8:75:d0:94:ac:d3:14:45:1f:12:
         cd:78:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:50:03 2026 by rpki-client