Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d1938a90-7064-385d-b234-2b4998b1fba0.roa
File:                     d1938a90-7064-385d-b234-2b4998b1fba0.roa (raw, json)
Hash identifier:          SkEfn15FgJpfSBLR1E57WkjAZ9xfyEF3TK1Xe4ffgQk=
Subject key identifier:   CA:79:D2:D1:55:3D:9F:79:FE:F6:B7:2B:AA:F2:5B:3C:CF:4B:04:1C
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F7783656429F843FC374C0060
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d1938a90-7064-385d-b234-2b4998b1fba0.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     63023
IP address blocks:        136.176.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:65:64:29:f8:43:fc:37:4c:00:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=11b2f46a-122e-40e3-b758-15aea4ce55b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:be:ef:80:a1:f6:46:75:7e:b8:77:ae:89:
                    a4:89:10:b8:e9:ed:50:92:8c:18:c5:2f:e8:ea:46:
                    60:df:3d:2d:1a:0c:fb:f0:81:03:51:4d:74:15:0e:
                    ee:3d:67:dc:8a:5a:20:f8:5d:a8:9f:0c:03:7f:f3:
                    c4:af:08:bd:f4:1f:c3:72:30:e3:f6:b0:8a:1e:0b:
                    1e:14:6a:a4:24:88:d9:68:d4:21:99:a7:92:17:f3:
                    f4:49:a5:2e:ee:fd:d5:90:1e:22:54:7a:1d:b3:87:
                    d5:22:d1:d8:90:e1:10:e1:86:1a:38:f1:2e:c9:dc:
                    48:cf:3a:df:2a:8e:30:88:8c:5c:b9:9f:56:94:a8:
                    43:79:47:4d:b5:7b:e8:6a:31:48:a4:40:57:3b:ef:
                    3b:e7:50:0c:77:e6:69:fd:4e:6f:ee:0d:f0:66:e2:
                    38:14:68:5f:8e:d0:b1:a8:80:f0:59:c0:3c:b7:31:
                    a3:c3:16:12:f4:1a:d2:73:be:c5:dd:0b:04:24:a6:
                    58:85:b8:30:b7:b7:7d:1d:ba:9d:f7:e6:cf:6b:e8:
                    ce:5e:8a:e2:d4:40:90:6a:8d:5d:2f:55:76:a9:69:
                    8e:e0:d4:fb:85:5c:69:68:ad:33:51:53:14:c1:7c:
                    db:b1:5b:6d:ad:10:b3:28:a1:5b:83:af:2d:75:ab:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:D2:D1:55:3D:9F:79:FE:F6:B7:2B:AA:F2:5B:3C:CF:4B:04:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d1938a90-7064-385d-b234-2b4998b1fba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:1c:f7:46:ed:a4:c4:5f:70:8a:27:17:76:db:38:3b:97:
         51:ec:47:9d:c1:e7:23:1e:16:84:51:7c:b0:10:66:af:fa:be:
         a1:67:ea:03:0b:66:0c:f9:f2:6a:13:dc:e9:97:b2:34:fa:bb:
         c3:3b:c3:f9:44:2e:28:7f:6d:08:0a:39:4b:83:d2:7c:47:fa:
         5d:59:1b:8b:87:dd:94:e5:8f:38:da:e7:7b:a3:28:9b:ed:3e:
         27:79:c7:60:9d:4d:ba:aa:29:59:5c:dc:c3:20:12:d5:f9:db:
         ba:ab:e7:09:db:99:38:08:bd:39:95:0e:24:9b:64:94:51:06:
         de:a1:95:11:cc:d4:28:b8:61:b7:26:18:55:85:75:b0:29:83:
         85:b0:90:64:2e:ce:a1:f1:3f:11:af:f8:df:fb:f2:0f:f1:c1:
         6a:c0:a4:3f:fb:96:76:ab:f6:96:83:1e:7f:8d:fb:36:05:05:
         6a:8e:46:4b:35:c5:c4:a1:cd:7a:be:de:a2:b6:b0:eb:64:16:
         79:18:0f:fa:4b:03:17:c3:42:b7:b9:0b:82:ce:35:6e:31:09:
         29:d1:99:7e:fb:df:bf:9d:31:9d:a8:e7:b5:c0:d1:51:e9:ed:
         fb:9c:94:53:3e:69:37:e4:6a:10:b7:8a:fd:14:86:38:e7:e1:
         03:98:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:41:57 2026 by rpki-client