Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/77417015-c5b6-331e-86ca-868773d1c05a.roa
File:                     77417015-c5b6-331e-86ca-868773d1c05a.roa (raw, json)
Hash identifier:          8/9SkzSGLUSKfWpuK2RGpzeiRsztPhppPecQH2Mj4Nk=
Subject key identifier:   76:B7:23:E3:C4:6A:AC:CE:BF:C2:5A:A5:56:F4:76:70:10:65:58:D1
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584EA79AA2A00DC89CC04E141BE0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/77417015-c5b6-331e-86ca-868773d1c05a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        136.22.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:a2:a0:0d:c8:9c:c0:4e:14:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f62d291e-890c-40c4-a641-9d84c8137748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:1f:ef:0d:3d:cc:f9:4e:41:af:41:06:e0:
                    5e:14:96:1c:19:05:85:74:31:88:2f:68:9d:01:df:
                    4b:90:42:a9:9a:03:18:be:21:4d:a5:f3:69:85:c4:
                    c7:dc:b0:c9:77:fe:89:7f:da:8a:49:e5:d6:42:4c:
                    72:d1:a3:4d:b2:e5:a6:7d:f5:59:07:ff:bb:c0:cb:
                    b9:44:31:3e:ea:a4:1d:88:70:70:2a:cf:48:70:4e:
                    2e:de:7d:0c:d7:ee:ce:d1:63:41:45:b9:14:b2:ef:
                    10:01:de:d8:be:19:7a:c6:3b:19:ca:4d:de:7e:9f:
                    b2:18:b7:f2:02:b3:40:74:06:01:95:7c:ee:eb:8b:
                    df:94:ce:74:ba:fe:39:a6:fb:7a:71:34:59:44:16:
                    71:84:f4:d8:bb:1c:e3:4f:1f:e1:81:b1:bb:ed:e8:
                    6a:67:1d:7d:e3:02:61:5c:81:e6:1f:0e:df:df:1f:
                    36:71:71:cb:65:93:8c:8b:0d:12:7b:b5:20:d0:34:
                    94:ea:9b:a7:f2:0c:59:2d:9c:bc:0c:39:17:64:b1:
                    51:c2:42:6f:dc:07:e0:dd:d4:05:72:21:ed:89:a5:
                    c8:0e:92:22:56:d1:c2:9f:ee:45:eb:2d:cb:f8:21:
                    5e:56:c1:5c:0a:22:03:71:86:06:30:6a:06:86:60:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B7:23:E3:C4:6A:AC:CE:BF:C2:5A:A5:56:F4:76:70:10:65:58:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/77417015-c5b6-331e-86ca-868773d1c05a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:a1:af:de:99:74:1e:23:02:e5:da:da:e0:8b:84:b5:77:2a:
         90:ed:9e:08:01:c2:3b:e5:95:2e:7f:05:f4:5b:7f:f0:26:d8:
         35:c8:d0:0e:cc:a3:bf:50:90:ee:3e:6d:bf:75:9c:8a:61:b2:
         e6:ff:21:aa:1f:c5:e6:73:39:bd:26:c5:25:29:c6:28:8e:3a:
         04:58:59:07:43:4f:b9:73:b3:a4:4f:e7:f3:ee:bf:b1:9a:cd:
         05:a4:ca:00:3b:98:e3:78:74:85:ff:6d:8b:83:19:33:a5:09:
         a3:85:d0:9f:ea:75:9e:a8:0f:6a:6b:9e:15:fd:35:f1:15:48:
         19:32:70:94:99:b2:52:44:93:46:3b:6a:e1:14:60:a0:7b:bc:
         df:db:89:73:c5:c4:c0:e6:cd:86:e4:70:38:e1:a8:62:9f:32:
         9c:2d:4f:6b:fa:3b:92:1a:64:b5:f0:ae:e1:89:fe:ae:d5:11:
         09:d1:86:f9:be:00:00:95:5d:3a:7a:ab:3b:a5:e3:27:87:aa:
         41:cb:0d:d5:b2:1b:b6:c6:0d:2a:e1:1f:03:7e:f6:58:90:31:
         69:ed:39:1c:5e:9a:10:6a:0f:3e:ab:20:68:b1:e9:d8:64:a9:
         30:fe:53:85:59:bb:fe:a0:01:1a:d6:c9:20:36:8c:49:3a:2e:
         3a:f6:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:25 2026 by rpki-client