Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a972871e-bdf9-3fee-b459-a02f3b378f75.roa
File:                     a972871e-bdf9-3fee-b459-a02f3b378f75.roa (raw, json)
Hash identifier:          8/KRUxg5woJL2yxy7JJLEeAqaw0Xi8fKv2uazTiK0Vw=
Subject key identifier:   38:CB:19:4C:EB:0F:F2:E6:15:FB:B6:06:51:1D:4A:04:9A:96:4E:5B
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F78E834886C2F91BA53E31B80
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a972871e-bdf9-3fee-b459-a02f3b378f75.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     63023
IP address blocks:        136.176.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:34:88:6c:2f:91:ba:53:e3:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=6910e61e-8168-425a-83ab-ee5d41b810ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:82:54:89:70:5e:a3:b3:65:a8:f5:33:1d:
                    46:c5:ab:04:c3:2a:6f:e6:1c:f4:e7:f2:77:eb:05:
                    ef:b0:39:d9:19:37:4d:42:82:35:d0:3d:e8:ee:31:
                    9d:87:b1:fb:cf:cb:b2:10:f3:6e:4a:d7:87:0f:79:
                    10:a9:29:ff:d2:69:ef:f3:7a:f1:10:05:6c:a2:f0:
                    56:9a:32:af:f6:ea:4c:66:89:9a:f1:7d:b5:cd:a5:
                    9e:d3:30:ca:af:79:2f:f5:41:86:f4:95:a5:96:3f:
                    00:83:9d:dc:e5:f2:66:cb:3f:09:39:0b:c4:6a:4e:
                    a5:a7:14:23:90:3f:0c:b0:7c:09:36:af:7d:b0:ef:
                    f2:88:67:5b:26:53:3a:2f:45:11:81:0a:fb:74:a7:
                    f7:07:88:2f:ac:59:a7:b0:70:58:83:0a:a5:f7:0f:
                    ba:4d:3e:e5:8a:61:47:90:11:b2:3f:50:d1:9a:f3:
                    3c:4f:36:af:d4:c5:2f:52:a7:9c:ea:bf:7b:6b:16:
                    b0:12:67:0e:d5:1b:8b:30:73:24:d3:76:2b:75:de:
                    06:09:04:15:c8:6e:fe:6f:f7:dc:1e:87:3e:af:8b:
                    26:14:c4:e6:f3:fb:f5:2a:95:a6:93:5a:b1:13:66:
                    86:88:80:04:03:87:32:ed:78:95:46:6f:2c:80:c9:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:19:4C:EB:0F:F2:E6:15:FB:B6:06:51:1D:4A:04:9A:96:4E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a972871e-bdf9-3fee-b459-a02f3b378f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:21:b5:2b:90:7b:74:88:d7:83:ee:6a:28:f7:33:e4:7e:cb:
         19:31:db:02:fd:b0:55:60:c6:98:b6:6b:6b:5a:3a:6d:ed:50:
         63:cd:3c:ac:d1:97:7a:52:df:eb:05:43:5d:3b:7e:6e:f7:c8:
         be:02:fd:ad:07:df:64:35:b7:03:76:97:cd:5d:bd:64:b2:7c:
         2b:e4:ef:10:89:39:97:61:df:c8:df:47:3c:b3:d9:75:11:cf:
         37:ac:cb:9d:cf:95:a1:b4:9f:8f:33:a2:27:c5:aa:78:47:7d:
         8d:46:e3:5e:a5:66:d5:47:11:86:e8:65:98:d3:12:5e:ab:fa:
         a6:82:c9:85:57:9e:75:5d:27:cb:77:fc:cf:00:68:ed:23:19:
         d4:a1:ab:40:07:9a:a2:b5:e2:a2:13:f7:41:2d:db:7e:e0:6b:
         c9:32:06:60:89:ad:60:5a:44:51:29:ff:85:95:ea:0f:91:6e:
         17:f0:44:7d:d6:f2:ae:9b:5d:1b:07:ed:df:ab:f8:5a:9e:f0:
         f0:7a:e9:6a:cb:c0:09:66:e8:d2:8f:e8:ed:4a:98:48:b6:dc:
         00:d9:5f:ec:f2:0b:b5:05:1c:0d:87:0b:f9:fd:22:f0:e0:16:
         79:72:ea:4e:53:f3:5c:3c:44:6e:10:e4:62:f3:80:93:9b:76:
         29:06:aa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:35:42 2026 by rpki-client