Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa
File:                     f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa (raw, json)
Hash identifier:          V8egbq2Xcq/7ZekwwdLOTHZz4xxU1yxc9qVfOHbq75E=
Subject key identifier:   B5:45:CA:18:96:3B:42:A6:89:BA:74:91:A5:7B:8A:46:8F:1B:D4:74
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584E0006149973D85DB5FCA59B00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        136.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:14:99:73:d8:5d:b5:fc:a5:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=09561e20-b9da-41a9-944f-852e7b7731b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:be:0b:86:e1:bb:86:c8:7c:83:63:5c:5c:3f:
                    6b:79:d4:8c:26:65:5c:86:bb:f8:0c:6e:f8:fd:4c:
                    c3:9c:5c:d0:6c:95:31:ea:d8:c8:1c:a0:13:5c:6e:
                    cb:1c:e7:3c:ba:47:ac:d2:d0:70:4e:c7:f7:33:ba:
                    13:59:e7:61:14:43:d7:45:c6:4e:3c:53:b1:cc:e0:
                    b3:10:cd:df:cb:60:b3:86:15:e7:c8:dc:e3:06:22:
                    b1:7b:c2:9e:58:c4:16:05:47:ae:d8:5c:19:d0:3b:
                    bd:63:df:d6:f9:a7:f8:f7:64:b9:78:0e:d2:bb:f5:
                    14:0f:06:32:d6:7e:a8:da:cb:09:72:e0:0c:ee:88:
                    ac:a5:b8:a5:63:52:a8:c1:bd:b8:0e:ff:00:20:85:
                    ca:38:76:c4:43:f0:bd:70:92:41:56:cd:e8:17:4d:
                    34:a7:14:78:e0:a4:5b:d9:a8:12:aa:a5:8c:4f:15:
                    91:72:04:ae:56:7d:c1:2a:49:47:b1:a0:e7:33:80:
                    8b:29:27:9f:ca:dd:e7:da:2e:18:0e:c0:74:00:70:
                    86:5c:84:b8:2f:93:cc:2a:9d:20:42:a2:50:42:9d:
                    0f:4f:f5:66:41:50:06:04:1d:5d:ac:a2:30:55:96:
                    53:8e:60:b4:ea:4f:e9:82:b2:94:2b:34:21:c2:d6:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:45:CA:18:96:3B:42:A6:89:BA:74:91:A5:7B:8A:46:8F:1B:D4:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f8f00d94-fff7-3852-9bfb-af96e4ab06f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6d:dc:6c:5b:74:c5:e5:d4:c3:0e:d1:2c:58:90:19:60:8a:
         42:f6:54:71:19:d4:ba:82:22:7b:c2:6d:98:1c:3a:ee:d7:90:
         54:fa:e4:93:ca:fe:a7:2e:aa:32:b1:7b:1d:2c:be:30:6e:43:
         26:12:69:66:7f:16:bc:14:42:f6:ea:db:bc:fb:53:89:e7:d0:
         9b:6b:6a:dc:98:2b:07:e6:25:08:d6:97:2e:a4:65:f4:bd:71:
         9f:4e:9f:a0:7e:01:0e:25:60:d1:cb:55:b1:a9:52:4b:d6:40:
         3c:15:b5:d0:cd:1e:8b:e9:0a:3c:43:c4:c5:5c:1a:09:4b:fc:
         49:5f:f9:8f:ad:d6:f4:99:6d:50:73:37:97:52:58:73:da:d8:
         a2:74:b2:02:ac:cc:bb:96:e9:3b:80:5b:f5:e7:8c:51:0a:e6:
         b7:cf:25:f7:01:a8:d8:37:7e:ba:87:63:82:a6:ff:19:b7:d6:
         a1:df:2d:ac:94:3b:aa:ca:b5:7b:1e:a3:ff:2c:76:36:fc:0f:
         86:3e:9a:8a:06:00:1a:92:7c:ed:c9:ab:4f:01:3a:69:89:0a:
         58:4d:f6:38:0d:b2:f2:84:20:11:0c:02:b9:b8:2e:80:86:4c:
         5c:e6:28:05:ed:f8:05:6e:65:db:da:08:45:e3:6e:df:41:8e:
         a1:11:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:56 2026 by rpki-client