Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa
File:                     f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa (raw, json)
Hash identifier:          nir0JgEZKyulaX12zvUxpTHNcbHzg325r6WrfaiZe6M=
Subject key identifier:   C5:A0:84:A7:32:41:89:5E:A4:43:03:68:C7:C4:59:1A:2E:EF:40:B4
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584EA79A8886222B81402744F380
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        136.22.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:88:86:22:2b:81:40:27:44:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f1755994-859a-4050-8fa9-d3b70b47f24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:26:05:b6:e1:e2:96:fa:99:ea:f1:e3:46:
                    f0:eb:67:e8:a0:d5:b6:1f:ba:4e:a6:07:f4:5e:2d:
                    29:20:fb:f1:63:b9:76:55:28:39:a3:39:fe:00:f8:
                    b2:5a:9e:a5:0e:fd:29:b8:f6:5a:8c:78:11:e5:b7:
                    8d:eb:4c:59:4c:fc:d4:9a:8d:0a:95:44:c2:18:84:
                    ce:cf:4d:2c:09:1f:b8:bc:90:60:57:16:26:69:a5:
                    d9:ce:2d:3a:3e:e8:20:fb:69:a2:91:ab:17:70:c3:
                    30:6e:4d:a6:58:3d:91:44:c3:e6:6d:27:ba:da:01:
                    ba:c6:13:b4:53:07:6a:fa:b9:d0:84:76:82:88:cb:
                    24:36:44:97:fd:5b:3c:e8:a8:bc:e3:96:1d:3f:a9:
                    dc:f5:e3:4c:41:38:76:7b:ba:4a:e9:da:70:1d:1c:
                    c5:f2:d4:9a:b9:8d:98:b5:6f:c0:0a:b6:09:23:5e:
                    92:70:8d:2b:2f:ef:ec:d8:ec:00:7b:49:e6:a1:9c:
                    70:5c:4b:40:75:8f:3f:c8:83:b2:e3:28:2c:99:6a:
                    2b:8e:c4:ac:64:f7:9e:13:56:38:6e:7b:72:6e:0c:
                    b7:b8:72:ee:fc:f5:32:99:fd:bf:f8:58:86:0e:89:
                    b0:18:7b:5f:eb:df:59:0e:63:8c:4b:2b:7f:99:8a:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A0:84:A7:32:41:89:5E:A4:43:03:68:C7:C4:59:1A:2E:EF:40:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b8:ec:d6:fa:25:cf:b8:a3:42:c4:8b:c0:3a:73:22:3d:4a:
         80:bb:0f:ab:6f:8d:64:a3:6f:4f:a8:d5:26:9d:d6:4c:98:6f:
         d8:76:4c:f9:ec:79:39:3c:85:38:7f:ab:32:a6:0b:b7:5d:a4:
         8d:6e:d6:5c:64:29:87:2e:79:99:eb:d4:15:2a:d0:fa:ab:43:
         28:c6:dd:ed:ef:c8:ec:af:5e:55:96:4e:dc:19:35:bd:0e:eb:
         5f:fc:7f:56:20:56:2e:9f:e6:4b:85:57:87:aa:7b:91:b5:63:
         6f:f1:c8:00:54:4e:3e:aa:8a:38:48:6c:9e:a1:e5:25:b4:a4:
         1c:e4:c1:97:c7:07:0e:02:01:88:e8:1b:a7:fa:e3:87:15:e4:
         9e:98:6d:5d:98:bc:cb:af:70:e0:31:0a:13:35:02:f9:8e:3d:
         f3:38:0e:93:09:03:18:70:38:25:33:d2:11:9b:92:64:28:7e:
         19:62:09:51:1d:43:ae:57:77:25:c8:9b:ad:9e:96:89:66:63:
         f1:f5:9a:61:02:87:21:85:92:0a:8a:0b:db:cb:b9:5c:b1:aa:
         02:1a:8a:4c:5a:bd:78:97:53:56:c4:99:7e:bc:fa:dc:98:17:
         81:8b:88:b2:0b:80:8e:80:0a:2f:49:2d:33:a0:3c:5f:8e:c8:
         42:68:7d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:50:03 2026 by rpki-client