Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cb483578-a3ae-33bf-a9dc-07ade0168a80.roa
File:                     cb483578-a3ae-33bf-a9dc-07ade0168a80.roa (raw, json)
Hash identifier:          nIKVzyhEkTTp5A+TZj1jsMhORYvpNOuQb46R0oMi0f4=
Subject key identifier:   1B:D5:3A:E0:6E:61:9C:10:D1:54:8C:9F:2D:7A:12:FA:08:DF:7C:B3
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E30E20BB13BAE1852A007D970
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cb483578-a3ae-33bf-a9dc-07ade0168a80.roa
Signing time:             Tue 16 Jun 2026 13:02:46 +0000
ROA not before:           Tue 16 Jun 2026 13:02:46 +0000
ROA not after:            Mon 14 Sep 2026 13:02:46 +0000
asID:                     63023
IP address blocks:        136.176.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:e2:0b:b1:3b:ae:18:52:a0:07:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jun 16 13:02:46 2026 GMT
            Not After : Sep 14 13:02:46 2026 GMT
        Subject: CN=6455e032-198f-40fd-b691-e88e7195a4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:af:60:67:82:ef:c7:c0:b0:99:9a:e0:75:
                    11:23:98:b2:ad:2d:5c:d0:63:f0:b5:ab:0c:16:ab:
                    34:00:99:df:3b:96:ef:0d:0c:24:8a:9e:f0:d5:39:
                    d8:c5:ea:8b:9d:9c:06:e5:f7:28:50:bf:d8:00:72:
                    2f:a2:21:ab:eb:07:ec:8f:d5:42:b7:21:10:9c:3f:
                    20:ab:d7:2e:9a:ab:ef:07:7b:91:41:88:ac:6a:0c:
                    4f:9c:9a:e6:d4:ba:5b:2f:26:08:0b:65:1f:59:6d:
                    b9:75:e0:b9:09:94:fa:2a:a2:38:78:8c:36:cd:72:
                    af:84:5d:0d:49:3d:21:38:d0:d2:74:cb:bf:ac:be:
                    6b:e1:26:00:b6:18:c6:18:e7:af:2e:28:96:7d:5b:
                    d9:ba:94:21:07:13:66:cf:26:e4:0b:45:e3:61:13:
                    f8:61:d7:33:1d:fd:74:6b:00:26:1c:fc:94:72:81:
                    8b:1d:5c:27:38:98:ef:e9:04:91:ef:72:fb:cc:55:
                    7f:0b:6a:dc:74:1e:7e:4f:77:ff:97:2c:68:27:71:
                    68:e6:b0:07:1a:3f:d3:c7:08:35:5b:91:15:d2:75:
                    e2:7d:6e:c7:5e:5c:66:57:bb:63:ed:81:0c:66:ea:
                    57:f5:1f:9d:c3:d6:46:9c:f4:42:68:2f:8c:66:c9:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D5:3A:E0:6E:61:9C:10:D1:54:8C:9F:2D:7A:12:FA:08:DF:7C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cb483578-a3ae-33bf-a9dc-07ade0168a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ed:eb:42:39:7a:13:40:f8:ef:0c:15:28:90:e3:cb:27:79:
         11:64:9f:f4:47:54:d3:a7:10:0f:f7:bd:e6:5f:8f:b6:1d:2d:
         67:90:24:07:d0:dd:ef:53:39:1c:aa:a2:46:ed:d0:9f:a9:69:
         d4:0f:48:ea:9b:6d:7b:0b:3f:b0:3b:b9:b7:92:50:62:0f:4a:
         18:3e:28:f6:5a:38:61:49:8a:de:d5:6e:3f:bb:c8:31:8a:7c:
         d6:59:6b:f5:d7:56:62:4c:8b:a5:60:e8:c2:25:5a:09:9d:76:
         91:5f:50:82:60:f4:9a:50:96:4f:57:7a:1b:ef:90:0b:68:53:
         c1:f8:08:de:b2:a0:98:a5:58:cd:51:2a:5b:27:c7:6d:a7:e5:
         dd:a3:dd:4b:71:17:ce:eb:99:f7:6a:10:5d:11:a7:a7:c1:ec:
         64:b9:ea:84:b4:80:26:4e:83:06:78:10:88:b8:b8:65:df:d9:
         5b:db:6f:52:37:aa:f9:5e:db:67:31:52:82:a2:c8:33:25:61:
         26:1d:e1:b2:51:5a:ac:40:1e:64:4d:e4:79:68:bc:42:cd:f0:
         37:d2:30:4d:f6:ea:f3:6e:5c:07:78:ec:fd:66:a3:db:c1:d6:
         5d:74:88:8d:45:54:71:65:93:a5:3a:71:6e:95:f1:10:7d:b9:
         bb:f9:07:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:19:23 2026 by rpki-client