Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/75de8076-7beb-3d94-b992-bc3ad90ce0ab.roa
File:                     75de8076-7beb-3d94-b992-bc3ad90ce0ab.roa (raw, json)
Hash identifier:          QFSNy+Tk65Epz5cSxiOo2nJVoEs2tkMDna7TfUlVKCc=
Subject key identifier:   49:22:E3:7A:24:A2:01:E3:31:0D:37:8D:35:46:DA:BE:6D:76:41:3C
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E329C63DA6FD5B374E863F980
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/75de8076-7beb-3d94-b992-bc3ad90ce0ab.roa
Signing time:             Wed 17 Jun 2026 03:54:02 +0000
ROA not before:           Wed 17 Jun 2026 03:54:02 +0000
ROA not after:            Tue 15 Sep 2026 03:54:02 +0000
asID:                     63023
IP address blocks:        136.176.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:32:9c:63:da:6f:d5:b3:74:e8:63:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jun 17 03:54:02 2026 GMT
            Not After : Sep 15 03:54:02 2026 GMT
        Subject: CN=644e0e40-edfa-4c83-aa26-a87a27f0e1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:ca:c7:cb:0d:01:66:e3:26:61:17:08:de:
                    4e:ab:62:b1:f0:0c:4d:22:8d:66:fc:e3:7b:b9:da:
                    fd:ff:8a:b3:91:e8:7a:fe:76:10:be:67:99:af:4f:
                    69:34:e5:33:d7:64:1a:0c:a9:fe:bb:fe:14:1b:2c:
                    cc:bf:6c:9c:ca:43:03:d2:e1:dd:bd:9a:eb:3e:80:
                    41:b7:43:a9:90:72:e2:bc:cf:64:21:71:97:03:9f:
                    03:d0:e1:c5:53:11:5a:7e:4b:ef:7c:90:04:a7:5b:
                    4c:fe:63:19:76:12:63:a4:81:13:38:40:f7:77:e8:
                    7a:bc:87:3f:39:62:7a:23:22:24:f7:a2:02:8f:cd:
                    88:b5:97:e4:be:80:0a:2e:75:b8:52:d0:9b:76:9b:
                    e9:06:e3:46:91:a1:e4:6b:81:e7:fc:c2:99:e4:12:
                    45:59:5c:13:a4:f5:ce:ee:96:35:a8:8d:c3:23:58:
                    ab:22:05:07:92:6e:8f:31:88:cc:13:73:ae:7f:75:
                    db:ad:15:7a:1e:63:05:42:c3:f9:f8:03:3a:d6:82:
                    89:1f:e9:ab:77:00:af:1a:7b:c6:df:38:13:fc:75:
                    38:01:48:b5:8e:fe:fe:af:1a:92:fa:6d:c5:fe:63:
                    ec:f8:c7:d7:45:49:92:84:95:41:6f:f0:6e:bc:7a:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:22:E3:7A:24:A2:01:E3:31:0D:37:8D:35:46:DA:BE:6D:76:41:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/75de8076-7beb-3d94-b992-bc3ad90ce0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6b:5c:bc:5e:16:1f:2f:31:fe:c2:e3:7f:f0:e0:be:c2:3b:
         ce:f7:1e:dc:88:c4:95:43:a5:b1:f3:99:8b:be:af:f3:7a:17:
         0d:4f:e7:14:dd:89:0c:e5:dd:63:e3:a2:d1:fa:bb:73:e2:da:
         5f:67:cf:fb:00:1c:fd:01:d2:e7:9e:2d:40:8a:9f:31:2b:a1:
         4b:91:11:97:fc:2c:25:86:44:32:e8:0f:bf:fa:95:ce:2f:30:
         6d:e8:fd:2a:6d:13:a1:e5:2b:7c:d9:ab:f5:46:95:6d:c0:6e:
         1f:02:2b:66:a6:0e:f2:b4:2f:66:81:68:49:27:82:64:94:38:
         1c:ab:16:f6:26:c3:55:fb:27:07:c4:58:e4:c9:80:62:17:e3:
         59:12:01:f2:1b:3e:ef:62:04:7f:aa:2d:9c:4c:20:32:d2:5f:
         0d:91:40:9f:09:19:95:e0:23:a8:3f:c1:f3:18:9f:ed:89:8e:
         04:86:13:de:8d:c2:f4:79:90:10:59:5d:54:2f:b6:03:b1:38:
         a2:2c:0c:33:f3:62:9b:35:bb:29:ef:ad:38:65:a6:04:23:c3:
         f8:9a:86:99:52:ca:91:08:35:44:5b:2f:52:ce:d0:df:a8:6a:
         aa:c1:0b:68:ea:07:62:e2:d8:ac:26:13:33:f4:2f:84:90:17:
         ed:15:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:17:56 2026 by rpki-client