Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/d74360ce-5967-3e0c-a46a-bffaf7fbcfd7.roa
File:                     d74360ce-5967-3e0c-a46a-bffaf7fbcfd7.roa (raw, json)
Hash identifier:          n3XIQUZkc59NLIZ6AuH9A53BBHuxlDvIUjtQ6ubmFJY=
Subject key identifier:   35:64:52:96:9F:FF:94:21:F9:0D:3E:9E:0B:2C:9B:B4:1D:DD:29:CB
Certificate issuer:       /CN=f42ba754-2a4d-4b4e-b364-698af500fc82
Certificate serial:       010D0C9F4328584F0ADD712C45B76A9C60544700
Authority key identifier: 7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/d74360ce-5967-3e0c-a46a-bffaf7fbcfd7.roa
Signing time:             Wed 02 Sep 2026 14:59:43 +0000
ROA not before:           Wed 02 Sep 2026 14:59:43 +0000
ROA not after:            Tue 01 Dec 2026 15:59:43 +0000
asID:                     1613
IP address blocks:        168.100.236.0/23 maxlen: 23
                          2605:e740:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:dd:71:2c:45:b7:6a:9c:60:54:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42ba754-2a4d-4b4e-b364-698af500fc82
        Validity
            Not Before: Sep  2 14:59:43 2026 GMT
            Not After : Dec  1 15:59:43 2026 GMT
        Subject: CN=b5060d54-6359-4cd0-a234-358616615f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:b8:19:9a:1a:d7:59:63:11:f4:22:be:72:
                    d2:1c:b5:35:48:3d:e7:e0:cb:37:a9:2d:e6:d1:30:
                    a6:bb:3b:4f:da:b3:63:09:f9:2f:8b:b5:46:8e:30:
                    da:85:db:f8:8f:67:bb:2f:1e:eb:7b:49:11:1b:c5:
                    ee:50:aa:f5:65:57:22:5c:a2:ba:22:9f:31:26:cd:
                    7e:34:cc:15:3a:2d:6a:30:a1:d1:7c:cb:92:20:5b:
                    ec:53:50:2f:b6:c4:f3:2e:01:36:24:6d:16:52:6b:
                    c4:00:5d:3a:ac:63:2a:5b:45:e7:18:32:3d:47:03:
                    96:59:97:36:da:ef:4f:cf:bc:20:93:07:63:48:5a:
                    85:78:a4:69:98:c5:92:88:12:5b:ab:b8:2f:b1:e3:
                    9f:62:79:1a:7f:17:56:dd:3e:b5:b3:7d:9c:f4:b8:
                    12:bd:62:9d:f0:4f:a0:b8:32:63:16:f6:eb:53:57:
                    88:b2:e0:4d:35:70:63:6e:9c:5a:04:29:67:8f:42:
                    c9:52:a3:cc:27:f0:93:43:e7:d9:1d:46:ed:05:e3:
                    bc:0c:3a:a1:79:77:6c:46:40:93:f9:ed:36:1f:7e:
                    25:78:20:a5:a5:ab:ea:99:2b:1e:49:81:1f:7f:ea:
                    30:d3:eb:82:d8:1b:2f:9b:1e:45:09:b7:9d:19:02:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:64:52:96:9F:FF:94:21:F9:0D:3E:9E:0B:2C:9B:B4:1D:DD:29:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/d74360ce-5967-3e0c-a46a-bffaf7fbcfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82/f42ba754-2a4d-4b4e-b364-698af500fc82.crl

            X509v3 Authority Key Identifier:
                keyid:7E:C2:DF:26:B9:88:C5:11:94:F3:BC:2C:44:11:34:0D:C2:5A:0C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f42ba754-2a4d-4b4e-b364-698af500fc82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.236.0/23
                IPv6:
                  2605:e740:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:05:b3:a3:19:66:74:71:83:2e:3e:cf:90:9c:91:ae:ea:4c:
         cf:08:71:53:18:0d:1a:f4:d4:c6:75:bf:ca:6e:65:60:4a:03:
         39:d1:26:4f:7d:ba:dc:ce:bd:61:09:56:72:f8:99:58:2f:dd:
         51:25:6c:e8:3c:b1:1b:a7:55:0c:63:3e:cf:1d:e5:3d:5c:05:
         86:1c:2a:82:1e:21:99:86:e5:78:3a:4f:94:b6:e4:00:a8:96:
         6f:fc:95:70:20:32:d2:b9:ef:2f:26:7f:25:94:15:35:e5:50:
         85:83:20:34:1e:39:59:13:20:b1:23:fd:ed:6e:3b:48:91:d8:
         f6:37:d5:ec:1f:2b:2f:3e:e7:22:f3:ef:75:ac:bd:2e:c0:a0:
         ea:42:27:1e:2c:0f:c9:73:dc:41:e8:a8:69:ca:b5:40:dc:79:
         a6:04:c2:80:e5:a4:34:37:a5:9c:32:2a:a6:50:84:40:80:f9:
         8e:14:27:9b:a7:f1:a5:55:2a:66:b4:7a:e5:f1:9e:81:5f:69:
         7b:9d:8c:0b:38:69:b7:42:6d:88:a1:c4:63:9b:59:d7:82:01:
         6d:5d:83:49:1e:57:db:51:35:d7:fe:61:7a:5c:11:e5:19:5f:
         5c:c2:46:80:db:0b:4e:71:8e:f3:4e:ea:e1:e7:59:e2:b6:a8:
         c5:4f:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:50:16 2026 by rpki-client