Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/72258d42-73f6-3fa7-9bb0-fd534daa0a8d.roa
File:                     72258d42-73f6-3fa7-9bb0-fd534daa0a8d.roa (raw, json)
Hash identifier:          ZgKUOup/W/Tf5Rj4Tz1RUVb5d+4p84J4WnXSzyNbFVA=
Subject key identifier:   06:D9:08:CD:5B:4A:7A:86:A1:DA:9C:54:6D:57:DF:75:C7:F1:BA:DB
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F778365899A89B45B626E6100
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/72258d42-73f6-3fa7-9bb0-fd534daa0a8d.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     63023
IP address blocks:        136.176.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:65:89:9a:89:b4:5b:62:6e:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=b5ac7d5d-3f11-498d-94ae-ed8d9a4b2799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:cc:d0:dc:c3:c4:dd:dc:1e:85:1b:c5:0a:
                    01:a8:13:a2:f3:f3:43:1d:4c:fb:f5:79:b2:89:db:
                    93:ae:67:45:f2:52:98:f2:c0:30:ed:d0:77:bb:07:
                    01:21:42:54:0b:41:25:62:84:6a:f3:f0:c7:d1:99:
                    2d:52:b5:85:d6:e7:65:d2:9f:30:d5:b3:da:ed:11:
                    87:3f:0e:b2:ae:b5:ea:83:fb:c9:d7:4e:79:21:c3:
                    de:df:00:a8:af:6b:18:09:cd:ab:87:23:90:d4:f7:
                    75:93:8a:73:95:53:45:55:a7:da:5c:b1:99:25:ee:
                    b9:f2:02:f8:1b:f6:e3:a0:52:80:39:7a:25:1a:1e:
                    de:8d:7b:40:57:c4:9e:e0:5d:7d:ab:6d:5f:dc:7f:
                    b3:08:e7:54:d2:80:82:72:35:d2:03:2e:17:c4:56:
                    ba:6d:ec:9e:ae:82:2e:68:c5:31:a2:0b:aa:02:8b:
                    46:26:e5:f4:e5:ea:0c:95:a3:25:09:4e:5b:50:71:
                    94:72:5f:47:e6:19:ec:dc:cd:68:43:e0:e0:56:cb:
                    92:b3:62:d7:d1:64:b3:2e:75:54:4c:b2:c6:c8:a8:
                    d0:bc:3d:c5:61:ec:60:b0:c7:28:0e:91:e7:2c:d4:
                    bf:06:58:5e:c8:e4:e1:1c:ae:bb:86:47:fe:92:e2:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D9:08:CD:5B:4A:7A:86:A1:DA:9C:54:6D:57:DF:75:C7:F1:BA:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/72258d42-73f6-3fa7-9bb0-fd534daa0a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:b1:b1:ee:4a:cc:ef:24:80:d0:7f:c1:7a:49:b4:32:23:
         28:7e:9e:f6:d5:99:3b:bb:42:c9:f5:d0:a9:c6:e1:d7:0d:d6:
         8d:47:ea:5f:a0:98:d4:c8:a6:3b:59:27:ec:3a:6f:dd:29:15:
         ce:d4:ed:5d:84:36:7e:5c:cf:d5:8c:ee:3f:4a:9c:42:93:a9:
         49:c4:12:f9:58:9e:a6:29:53:40:30:e2:b8:65:31:96:ff:7b:
         dd:6f:91:09:7b:54:9a:ee:20:db:35:a7:ee:74:9d:6a:bd:ab:
         a3:7b:46:bc:2f:a3:04:aa:15:b9:d7:ce:7a:ff:29:9c:a0:77:
         87:dc:bb:3e:64:fb:db:50:d8:a2:15:30:c2:87:7a:c3:0a:ab:
         d9:c6:ed:24:d2:d7:47:5d:47:90:a5:67:07:68:b1:5f:64:f2:
         aa:99:49:84:20:4c:9c:aa:18:7d:fc:c3:d3:5e:1f:8e:4e:4e:
         30:dd:4c:3a:51:31:77:ab:e9:2b:1a:de:44:fb:bc:76:d0:e0:
         d3:bb:ac:97:ad:de:54:12:bc:d5:cb:69:c8:84:36:6d:ad:76:
         db:81:ee:91:01:a3:91:e0:bb:a1:95:06:f3:fb:7f:bb:44:13:
         6a:b0:01:a2:23:aa:51:e1:f4:cd:f0:c4:17:16:d1:0a:83:82:
         a6:1d:63:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:44:09 2026 by rpki-client