Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa
File:                     67809917-6020-3043-ad7f-2c9b27b1d820.roa (raw, json)
Hash identifier:          wxV1cTXVqXQfLInvSvhBYHKAdEGYAG0CLSsNjP6LTAA=
Subject key identifier:   6D:FB:81:33:93:49:AA:7D:B9:15:E5:0C:0E:F4:AC:F0:8F:A4:89:22
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584F4984DAA0DC4E896810B97E80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        136.22.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:da:a0:dc:4e:89:68:10:b9:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7eaa56d7-7f83-47d7-9dcc-5eb5303d473e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:47:8e:a5:b0:48:c4:f6:2d:83:a9:77:41:
                    47:cf:1c:eb:e8:fd:36:3c:0a:f7:cc:08:ac:75:e6:
                    39:29:2f:a7:48:92:cd:f2:f9:83:6c:53:68:04:67:
                    5e:71:4a:17:36:5e:4e:15:ac:11:15:92:6c:99:0c:
                    03:a1:3c:3f:54:96:95:04:37:8b:b6:29:5f:17:78:
                    cc:ab:83:0b:da:da:e9:b3:d2:e3:4c:c9:8c:bb:a3:
                    71:cf:7a:51:50:d7:d4:a9:05:06:57:f3:12:09:e3:
                    04:20:b6:91:9e:df:a6:74:70:d2:be:e5:1d:09:64:
                    27:9f:ad:61:97:74:9a:d9:8b:15:6d:18:5e:fd:26:
                    e4:44:39:5f:31:d4:77:50:1e:cd:fb:a5:14:3f:ed:
                    3d:40:90:7d:b6:25:8c:c9:83:fd:9c:aa:9a:e9:bf:
                    5a:ce:5b:4b:cc:65:9a:51:95:59:9c:10:58:1b:76:
                    78:ff:e5:58:dc:0c:bb:bb:12:ff:7b:31:aa:d6:f2:
                    0d:66:1d:71:ac:b5:7b:a6:14:8d:5e:ad:66:0b:ff:
                    a1:1f:3b:26:0d:e8:09:24:94:22:8c:81:8a:82:09:
                    fb:b6:7b:d1:97:1a:f3:7d:3d:9d:74:70:55:eb:29:
                    cb:4d:52:78:a7:58:e9:3e:bd:d4:98:47:34:dc:98:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FB:81:33:93:49:AA:7D:B9:15:E5:0C:0E:F4:AC:F0:8F:A4:89:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:2e:5f:5b:b2:b4:91:20:66:9c:ee:2e:cc:88:17:5c:12:17:
         e7:d9:b7:83:e4:8f:52:5c:2a:40:db:e1:40:da:ae:03:6e:25:
         a1:c6:e0:bb:51:47:10:7f:a3:aa:3a:47:f7:1d:e0:32:bf:c8:
         7c:53:4d:61:af:e2:fc:71:10:44:1a:c0:c2:f4:33:d0:b8:76:
         04:37:46:63:4b:9a:e5:ee:15:66:25:74:09:76:fc:f8:7a:a6:
         5b:3f:c5:7c:47:77:25:3c:93:36:71:f4:1c:66:93:46:96:8c:
         64:c0:23:2f:6f:b0:27:68:46:cd:ed:3c:7f:4a:2a:55:ff:a7:
         8c:4c:3f:57:df:fd:b4:19:51:e5:b4:71:12:57:a9:5c:37:44:
         97:7b:37:cb:03:13:79:3e:9c:fa:fe:9d:47:bb:df:62:4a:9e:
         3f:e8:a4:5a:77:73:25:f0:7e:e0:40:73:6f:a4:a0:ba:21:d2:
         20:2d:68:df:05:ea:36:c7:46:4c:42:11:25:17:e2:fa:fe:10:
         ff:55:71:8a:84:ef:a1:6a:cf:71:df:9f:c5:dd:7f:c4:31:5b:
         6f:99:7a:c6:78:8f:b2:87:dc:bc:0f:6e:bd:b0:27:d1:27:ad:
         8c:e5:f2:46:24:1c:ef:52:33:b9:8e:08:1b:d4:2d:2e:e4:b8:
         e8:8c:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 07:45:47 2026 by rpki-client