Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa
File:                     65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa (raw, json)
Hash identifier:          roJg01nSv/Kl645t01V2VbckKyU39ZVqFw+wC3RzwgQ=
Subject key identifier:   3A:BD:4A:99:79:A3:21:4F:DA:9D:56:18:4A:BB:D9:4B:35:88:4B:38
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584EA794FD86910889E139387C00
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396422
IP address blocks:        136.175.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:fd:86:91:08:89:e1:39:38:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fcacc483-a35b-491f-a74c-88bc042c38b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:38:6d:f6:05:28:86:82:ee:2f:8f:47:7e:
                    37:75:81:33:d6:82:8f:ba:c7:3a:67:04:ca:f1:89:
                    67:75:69:b9:68:5c:0c:71:9d:5a:38:3e:51:d9:26:
                    a0:53:01:b1:29:13:38:93:50:ab:b8:22:eb:31:bb:
                    fe:95:37:0e:a6:1d:94:36:20:af:7d:36:20:5d:87:
                    6f:cc:ba:64:9a:45:ac:fe:5d:87:2f:ec:bf:43:14:
                    20:9c:0d:ea:ed:58:b5:f5:15:cb:05:9c:6d:53:6b:
                    20:bb:4d:a4:0a:41:5b:56:ce:1a:8a:a6:5a:51:cd:
                    cb:97:6f:f5:75:2f:cd:e2:48:d3:dd:ce:6f:43:65:
                    5c:32:cb:6a:8d:7a:ee:6e:a0:ef:d2:ec:ca:4e:d3:
                    f6:18:50:17:3b:d6:04:c3:f6:4f:86:29:d1:3f:ff:
                    25:f0:43:f1:72:d2:4d:65:e9:a8:89:47:9f:6e:1a:
                    53:f3:05:ae:0f:89:d8:d7:fa:44:84:ec:ae:41:33:
                    9c:c8:fd:5a:7a:10:ab:7e:1a:77:5a:d9:38:93:03:
                    bf:ce:15:9e:40:c0:85:1c:84:fd:dc:e9:f6:59:80:
                    79:c4:9c:11:db:a3:79:d5:53:fa:ab:41:00:aa:a3:
                    69:67:d7:92:71:c8:1f:c1:d6:de:ac:93:88:e9:e6:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BD:4A:99:79:A3:21:4F:DA:9D:56:18:4A:BB:D9:4B:35:88:4B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ef:db:7c:bb:08:b1:fd:ed:46:bc:99:a6:c8:6d:c7:4e:a1:
         09:cb:61:51:0b:41:29:bd:2d:56:95:f5:67:33:5b:c1:fa:06:
         5c:07:89:72:bd:38:90:26:09:fa:c3:09:ce:bc:c4:15:bc:9c:
         7e:aa:14:75:dd:4c:d9:2d:62:aa:93:3e:ab:c0:47:b7:5d:73:
         df:20:15:d4:87:20:8c:c8:95:f1:8c:90:66:b3:38:ba:34:b9:
         ce:50:e4:e9:be:c7:57:5e:b3:14:b1:c5:84:3d:f3:23:e2:31:
         f3:98:e7:aa:84:1a:a4:61:79:b5:f9:6a:28:c2:80:90:e8:60:
         a7:95:5e:84:e2:7a:3f:19:ef:cb:c7:0a:fa:e2:80:4a:8d:3d:
         ec:7b:59:53:f0:6d:5e:de:8c:41:63:6c:fb:f9:f0:d1:0c:47:
         c2:3c:d4:9f:e0:36:0b:45:4f:18:b1:1c:ea:b1:f0:8e:1d:12:
         89:bc:ed:7a:0b:96:bb:25:63:ad:40:e9:fb:b0:ac:ca:a2:32:
         ba:37:00:63:43:7c:da:40:dc:f6:d1:cd:9f:37:88:37:ec:dd:
         0c:94:f3:aa:fc:47:f3:ce:62:e7:27:3f:50:b6:89:c0:94:5c:
         b7:81:57:b8:82:0b:d1:93:de:dc:9f:6c:e7:e0:50:48:49:a2:
         fb:e9:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:29 2026 by rpki-client