Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa
File:                     ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa (raw, json)
Hash identifier:          /6MykC5YXsDgztwbGf/qS+exBID0buXc0IlJ8TPi2eU=
Subject key identifier:   D8:51:29:3A:B4:13:8F:F0:EF:29:B8:B7:05:21:34:A0:83:4E:18:D0
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E00061AE031FA0175DC464DA0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:1a:e0:31:fa:01:75:dc:46:4d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=97cf55ab-2d2a-4c06-8a8b-56aa16a9d3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:6d:d4:d0:5c:4e:97:21:47:52:6e:05:95:
                    e3:4b:a9:32:fd:77:bb:53:d0:bf:b4:e2:db:54:58:
                    44:53:6b:2c:68:07:95:60:ad:58:3e:13:77:6d:0d:
                    9f:5c:5c:ed:65:5a:70:a0:69:98:b0:7b:f8:42:38:
                    9a:93:9b:23:ad:6d:5b:9c:45:79:28:77:ea:ab:f8:
                    04:06:d1:c5:f8:dd:cb:c6:4a:18:a7:32:48:63:0c:
                    e7:fa:92:b7:72:ef:d1:d0:2c:19:15:99:3e:a9:1c:
                    22:7c:e8:82:36:97:d3:51:52:31:d8:d2:a9:06:61:
                    88:8d:37:e2:2b:39:cd:50:d8:a1:09:dd:fe:6d:bd:
                    10:1e:22:08:a3:01:6c:2f:59:86:48:7c:80:6b:76:
                    d9:26:62:ba:fa:53:6a:5a:1c:9a:76:f8:c5:99:8f:
                    7f:c1:fa:79:f2:61:82:d8:5e:e1:96:05:40:84:12:
                    dd:01:9b:a5:47:4c:4f:85:d0:1c:c2:9c:14:24:30:
                    eb:d2:74:19:4a:e5:68:51:b4:97:a6:29:30:df:e5:
                    ea:70:85:59:52:e4:63:c9:25:6c:91:c3:ff:77:95:
                    e4:8f:b4:41:ad:4c:19:9d:71:d8:5f:cc:1b:72:55:
                    be:20:f0:f3:66:5b:15:a8:01:de:98:87:07:5b:cc:
                    2b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:51:29:3A:B4:13:8F:F0:EF:29:B8:B7:05:21:34:A0:83:4E:18:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c3:ae:e0:99:02:3f:6d:61:7c:04:b1:ba:dd:bd:80:bc:c8:
         5e:ba:54:ad:a4:da:d7:83:2d:d2:af:15:a2:c0:05:12:7f:a2:
         f0:f1:d3:4e:cb:ce:c9:d5:03:25:3d:63:3d:94:f4:b6:8c:50:
         6a:b6:4a:97:5f:63:08:93:51:95:56:9c:bf:07:8c:3a:e9:77:
         cd:aa:a2:85:2e:41:c2:84:73:3a:5d:24:f4:70:e0:ce:d8:6a:
         d4:3e:8a:f7:8b:36:b7:01:20:4b:6b:43:a1:8a:99:2b:c8:2a:
         1e:57:9a:ad:2f:fd:b7:bc:61:07:0f:a3:38:ab:10:24:08:4f:
         d2:08:8d:20:b2:15:6e:63:b7:42:bf:75:f9:aa:a9:60:90:c2:
         d1:e0:87:cd:8c:95:3c:07:e7:37:3a:08:ec:7a:81:a9:57:55:
         95:0e:68:3a:f1:58:e0:57:5c:d5:71:60:8c:7b:3b:b7:56:2c:
         79:dd:af:90:81:d4:5f:84:26:29:05:2c:57:ec:e5:f8:ed:88:
         0e:16:bc:f2:17:77:d9:4d:95:49:8e:8e:6d:7b:99:a8:22:83:
         da:86:78:30:75:31:cb:ee:45:2c:96:75:5e:de:6c:46:32:b3:
         34:b7:71:78:11:a3:6b:af:0b:ff:db:4f:f5:08:6a:db:a7:0f:
         76:62:65:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABhrgMfoBddxGTaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
OTdjZjU1YWItMmQyYS00YzA2LThhOGItNTZhYTE2YTlkM2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon1t1NBcTpchR1JuBZXjS6ky/Xe7U9C/tOLb
VFhEU2ssaAeVYK1YPhN3bQ2fXFztZVpwoGmYsHv4Qjiak5sjrW1bnEV5KHfqq/gE
BtHF+N3LxkoYpzJIYwzn+pK3cu/R0CwZFZk+qRwifOiCNpfTUVIx2NKpBmGIjTfi
KznNUNihCd3+bb0QHiIIowFsL1mGSHyAa3bZJmK6+lNqWhyadvjFmY9/wfp58mGC
2F7hlgVAhBLdAZulR0xPhdAcwpwUJDDr0nQZSuVoUbSXpikw3+XqcIVZUuRjySVs
kcP/d5Xkj7RBrUwZnXHYX8wbclW+IPDzZlsVqAHemIcHW8wr4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNhRKTq0E4/w7ym4twUhNKCDThjQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNkMzhlODItOTJiMi0z
NDg5LTlkMmQtZTMzZjE4ZjI5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/DruCZAj9tYXwEsbrdvYC8yF66VK2k2teDLdKvFaLABRJ/ovDx007L
zsnVAyU9Yz2U9LaMUGq2SpdfYwiTUZVWnL8HjDrpd82qooUuQcKEczpdJPRw4M7Y
atQ+iveLNrcBIEtrQ6GKmSvIKh5Xmq0v/be8YQcPozirECQIT9IIjSCyFW5jt0K/
dfmqqWCQwtHgh82MlTwH5zc6COx6galXVZUOaDrxWOBXXNVxYIx7O7dWLHndr5CB
1F+EJikFLFfs5fjtiA4WvPIXd9lNlUmOjm17magig9qGeDB1McvuRSyWdV7ebEYy
szS3cXgRo2uvC//bT/UIatunD3ZiZQY=
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:41:04 2026 by rpki-client