Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa
File:                     7bf082f3-7712-3b6f-9529-66baede8d766.roa (raw, json)
Hash identifier:          KRS8RC6zM6Ux9YN2aU8Iv0QQ3w5G6u/OVyO3rV7xT4I=
Subject key identifier:   E3:FF:4B:80:D1:81:B7:B7:80:93:EA:C1:35:06:C4:98:A9:2A:58:6A
Certificate issuer:       /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial:       010D0C9F4328584CE09788E06F930B1B1F841FC0
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     61622
IP address blocks:        136.175.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:88:e0:6f:93:0b:1b:1f:84:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=67809593-590e-424e-bdd8-4779c276004b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:11:65:0c:61:b2:e2:f6:6f:5b:af:c8:51:80:
                    81:09:dd:7b:60:1a:c8:f6:93:25:a1:cd:78:7d:42:
                    01:d4:fc:c2:8f:85:a9:69:c8:c5:84:42:f4:52:1f:
                    5a:9e:af:e0:c8:03:b4:1d:f7:9f:9e:ae:7c:42:26:
                    ef:76:12:b5:e9:1f:72:22:6b:df:06:5d:63:c6:1b:
                    91:cf:45:86:f0:35:bb:8e:4e:27:4d:fb:f3:3a:cd:
                    77:e7:40:0c:19:89:60:80:c1:cd:69:32:92:55:86:
                    9f:3f:82:4b:6e:48:91:73:3c:b7:cd:55:bc:8f:83:
                    ce:bb:af:74:1a:51:44:b3:2e:f8:4e:3b:17:96:30:
                    92:34:7e:5c:72:40:7b:71:19:72:b4:c6:ec:bd:96:
                    27:7c:15:45:6a:8e:3d:68:27:ca:00:ac:19:48:b1:
                    6b:71:01:b4:6b:09:07:5b:a0:3b:cc:d1:5e:9a:50:
                    b7:83:af:94:dd:39:23:7b:d6:69:9a:c6:84:64:af:
                    d3:35:ac:dd:bf:19:ab:5b:bd:15:d2:15:b5:cb:f7:
                    1d:39:74:50:6c:a1:c3:a7:4d:88:b0:ec:c7:ec:58:
                    07:11:f3:e3:e5:71:fa:af:80:90:56:7c:1e:02:d3:
                    03:c1:4a:da:6c:07:15:3d:ec:95:6a:ad:78:2d:03:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FF:4B:80:D1:81:B7:B7:80:93:EA:C1:35:06:C4:98:A9:2A:58:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl

            X509v3 Authority Key Identifier:
                keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8f:50:54:1e:49:45:17:09:ce:85:f0:10:59:48:5e:57:72:
         e3:23:0a:75:8b:9c:ca:85:f3:2c:40:2d:a5:71:e4:3f:a0:74:
         06:aa:7f:4b:ca:24:92:e0:b1:02:69:80:ef:99:01:fa:65:49:
         90:8a:b0:88:85:a3:56:5b:a6:f5:62:18:4e:d7:c4:82:e0:6e:
         a5:ad:2d:c2:a0:81:c9:95:f0:33:79:36:b8:da:fd:96:50:9c:
         33:f4:04:11:18:94:9a:aa:97:15:a9:d0:87:9c:b3:9b:f4:d1:
         81:da:34:6a:32:84:87:5b:62:fd:18:ee:9f:f9:d0:93:fd:92:
         08:c7:5b:a1:ca:b1:bf:70:4c:63:2d:4f:0a:c6:2d:ca:7e:56:
         e2:cf:10:ec:3d:1d:d0:d9:44:7e:33:8b:de:75:9b:04:5d:e5:
         82:45:02:71:58:99:cc:1c:c3:26:72:73:e8:3d:fd:e5:d5:e3:
         03:c4:a9:f3:84:42:05:7e:76:9f:4c:8b:a5:be:55:65:31:55:
         e1:83:b7:68:a4:50:22:33:f2:86:4a:96:6e:86:6d:02:ba:d7:
         8a:18:55:91:9f:c2:fd:80:c7:72:95:af:c1:65:2e:a2:52:68:
         81:ca:83:c3:bc:55:a8:61:52:36:b1:50:24:b3:9d:eb:74:e3:
         dc:b3:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:02 2026 by rpki-client