Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa
File:                     36766eed-ee8a-3083-8823-23777bfe75b3.roa (raw, json)
Hash identifier:          1d5DfNMfHhzrzi8u9nH53ycaQp0d0pZ7qujcZnM2CtA=
Subject key identifier:   D5:DA:0F:A2:EA:1E:00:F3:F2:1F:16:C9:12:07:39:EC:1A:CE:74:54
Certificate issuer:       /CN=7f1c958a-c540-4699-8a42-ad625fc751f3
Certificate serial:       010D0C9F4328584D65150E71D385F9DC9675F180
Authority key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        209.160.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:0e:71:d3:85:f9:dc:96:75:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1c958a-c540-4699-8a42-ad625fc751f3
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=638fd839-145a-4f4e-be27-49a4b787ebc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:e1:c7:d5:43:17:a7:f2:0b:06:58:14:d9:
                    12:0b:dd:2c:40:42:2c:15:28:fb:11:09:7d:c1:00:
                    d7:6d:dd:98:84:04:15:59:12:3c:f5:a6:b4:cc:a7:
                    da:45:e6:94:ca:c7:22:da:f7:78:24:5e:e9:d3:e9:
                    b1:3a:98:d8:88:a5:4d:86:66:71:d3:86:7b:7a:c2:
                    56:1e:53:30:fe:d9:d2:77:7a:c2:78:d5:64:dc:cb:
                    0f:9c:71:c4:02:bd:87:5d:de:85:51:7f:de:c7:31:
                    54:73:b1:26:93:79:f9:d4:46:9a:2c:6f:37:34:89:
                    eb:c2:52:82:de:cf:a0:be:26:cc:47:85:d4:c5:2e:
                    1f:cc:7f:27:5d:b3:18:c7:9d:62:a5:2d:0d:97:e5:
                    2a:9b:3b:33:1d:ac:5b:29:76:72:17:76:0b:d7:01:
                    2e:1f:20:0f:58:1c:23:36:cb:64:9c:05:bf:b1:e0:
                    14:17:e9:1c:10:b8:71:0b:94:0b:7a:80:f1:ea:62:
                    06:d1:1e:a2:0d:c3:f4:b7:c2:1e:72:9d:33:a3:7e:
                    21:6f:1b:de:6a:62:85:87:85:ae:ae:6d:19:cc:93:
                    93:0e:29:7c:70:49:67:08:99:fb:d9:86:68:13:b7:
                    f1:e2:1a:4b:a3:f8:b0:e8:4a:af:14:12:f6:6c:6f:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DA:0F:A2:EA:1E:00:F3:F2:1F:16:C9:12:07:39:EC:1A:CE:74:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/36766eed-ee8a-3083-8823-23777bfe75b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl

            X509v3 Authority Key Identifier:
                keyid:C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:14:ae:b7:a0:60:a7:d5:30:64:ae:d0:5e:79:92:8a:24:e5:
         25:4a:35:0d:f6:12:5d:1e:04:e5:26:b9:7b:82:e4:54:29:5b:
         ac:bb:62:4b:0b:f7:29:65:48:15:e4:8c:3c:43:b1:ee:56:1e:
         1b:c7:32:a2:b8:c0:91:f2:bd:76:39:e2:67:02:67:15:4d:3c:
         8b:48:75:d6:b6:d7:a0:fd:5f:60:e4:d5:ab:cb:66:cd:f1:4b:
         49:0b:cd:05:d9:d1:9f:2f:2f:8d:f3:23:e6:55:16:7b:88:f0:
         30:36:38:1d:b2:ea:52:2f:67:63:14:53:f4:17:ea:97:6c:c1:
         bc:87:05:20:03:2c:41:11:9f:8f:5c:b8:e8:07:80:00:e4:8a:
         e4:99:e4:98:e9:8b:62:85:1c:99:0a:9e:a9:5c:32:f9:94:01:
         0a:93:1a:1c:d5:04:f3:c4:82:40:fd:11:35:f7:a9:92:09:ac:
         e2:8c:18:5e:50:35:64:fc:ca:90:6c:af:cb:57:f6:52:e6:15:
         43:68:2e:ae:da:1e:86:4a:00:16:06:09:3d:bb:44:c1:99:dd:
         04:c6:3d:97:90:06:c9:fe:c1:ca:0f:d4:61:7f:56:65:b7:e1:
         45:e0:00:ce:d9:c5:c5:ce:32:89:88:95:af:aa:04:9a:a7:e0:
         bd:69:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:45 2026 by rpki-client