Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78b07efb-0b6c-4870-8d93-b44481705712/1960f337-7aec-3b9f-b1dd-3c4b0174fc90.roa
File:                     1960f337-7aec-3b9f-b1dd-3c4b0174fc90.roa (raw, json)
Hash identifier:          GbgHG2kWuO4Zp49tS4VzpF1qx8OypIcZVUgbzyAfbfw=
Subject key identifier:   B2:5F:71:F1:41:B2:82:AB:36:15:3E:4E:87:80:F6:E4:C1:E8:6B:B9
Certificate issuer:       /CN=78b07efb-0b6c-4870-8d93-b44481705712
Certificate serial:       010D0C9F4328584EF7175A210F8911E9BC1F3700
Authority key identifier: FE:22:A4:34:04:D9:DA:1D:E3:8A:BC:1E:38:4F:9E:A8:A4:E9:DF:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78b07efb-0b6c-4870-8d93-b44481705712.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78b07efb-0b6c-4870-8d93-b44481705712/1960f337-7aec-3b9f-b1dd-3c4b0174fc90.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     393386
IP address blocks:        136.175.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78b07efb-0b6c-4870-8d93-b44481705712/78b07efb-0b6c-4870-8d93-b44481705712.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78b07efb-0b6c-4870-8d93-b44481705712/78b07efb-0b6c-4870-8d93-b44481705712.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78b07efb-0b6c-4870-8d93-b44481705712.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:5a:21:0f:89:11:e9:bc:1f:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b07efb-0b6c-4870-8d93-b44481705712
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=4762aaf3-aab3-448e-aebb-6ef6bb6f520d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:13:95:24:1d:75:af:c1:59:20:b8:f3:48:
                    c2:93:48:80:ca:67:ed:c0:71:db:de:e9:a2:79:1b:
                    2c:64:08:22:72:05:2c:6d:26:66:5e:98:0b:13:12:
                    33:f7:28:ab:a9:96:fd:60:dd:b1:bc:e8:3b:55:d5:
                    2f:6f:d3:4c:75:05:47:e6:fb:e9:f1:99:76:56:27:
                    3b:18:7b:dd:a1:3f:27:70:f7:dc:d0:92:fd:80:a7:
                    b0:ca:f3:f7:fc:5d:47:9c:df:0e:cc:95:5b:aa:78:
                    64:fe:63:3d:f6:9c:a6:52:87:cb:74:29:01:8a:66:
                    2b:04:1e:e1:ad:6e:37:e2:82:69:d2:23:94:19:3c:
                    42:fe:d0:c9:3c:cf:69:88:c0:fe:ff:d0:0a:df:8e:
                    19:84:d2:8c:89:6f:71:75:c1:f4:1d:e2:4c:ff:a0:
                    d3:f8:ca:0a:7a:3c:b0:ce:37:6e:28:16:6c:2f:6b:
                    ef:e2:88:f2:f7:0c:7c:81:34:e3:09:f1:be:62:eb:
                    93:b0:66:35:ff:9e:f4:ab:e5:a6:4b:ab:21:6a:c0:
                    e9:af:1d:a4:62:be:b2:40:c7:7c:63:27:c8:41:c8:
                    98:20:b3:f4:a2:e4:be:78:8d:38:f6:2c:a7:ed:65:
                    02:62:5a:54:29:05:32:ed:4d:0f:35:73:7a:b3:c9:
                    f0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:71:F1:41:B2:82:AB:36:15:3E:4E:87:80:F6:E4:C1:E8:6B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78b07efb-0b6c-4870-8d93-b44481705712/1960f337-7aec-3b9f-b1dd-3c4b0174fc90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78b07efb-0b6c-4870-8d93-b44481705712/78b07efb-0b6c-4870-8d93-b44481705712.crl

            X509v3 Authority Key Identifier:
                keyid:FE:22:A4:34:04:D9:DA:1D:E3:8A:BC:1E:38:4F:9E:A8:A4:E9:DF:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/78b07efb-0b6c-4870-8d93-b44481705712.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d2:ea:55:69:81:67:02:11:7f:a1:b8:22:cf:9d:8d:57:8c:
         7d:6f:cd:0e:59:67:a5:48:92:17:be:d8:4c:14:8b:88:35:aa:
         d8:2c:a4:fa:cd:7f:ad:c9:df:f3:f8:ac:69:17:c1:eb:4d:71:
         53:78:61:e3:14:d8:63:f0:66:5e:89:68:f8:37:68:7d:89:ba:
         42:b0:8c:9b:0a:e8:23:ad:af:27:be:cc:d8:f2:1b:3e:1c:2f:
         be:90:fe:13:1d:5a:9b:ce:89:30:9e:14:a8:14:08:99:17:a6:
         f6:46:f7:fc:e2:ca:db:65:bc:33:da:fb:5b:fb:9f:b9:a1:f0:
         20:e0:b9:c6:2f:fc:21:99:e3:bf:db:66:71:62:6a:48:56:ad:
         2c:74:e2:c6:56:d5:f2:03:81:de:65:e1:7e:a3:3f:50:7e:6d:
         8b:ef:3e:19:21:90:7f:8a:c1:39:34:f2:ab:ea:df:11:6a:ac:
         41:43:53:a1:3c:5a:58:24:01:5f:59:2c:b2:58:5f:92:3d:ff:
         88:42:a4:68:22:ef:ee:e5:1d:65:65:20:39:40:c6:63:7e:13:
         26:13:4b:fe:d2:83:f8:4d:15:ad:d3:05:22:6e:de:0e:ad:21:
         dc:d7:1f:bb:31:9f:f1:e4:70:38:1f:64:5c:12:5c:66:86:b8:
         88:1e:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:56 2026 by rpki-client