Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/00707324-e653-343c-ba4d-0a1b77eaffc3.roa
File:                     00707324-e653-343c-ba4d-0a1b77eaffc3.roa (raw, json)
Hash identifier:          lb3RtNwIgfJ8MCOb8BLpxT82VH4RE7yxwCiAMLBwCLw=
Subject key identifier:   A7:55:4C:0F:B5:EF:9B:99:A4:D2:06:5D:AE:CE:3B:AD:CC:BB:38:CD
Certificate issuer:       /CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
Certificate serial:       010D0C9F4328584D6515156B82D1614E57F21300
Authority key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/00707324-e653-343c-ba4d-0a1b77eaffc3.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     62490
IP address blocks:        136.175.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:15:6b:82:d1:61:4e:57:f2:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=b8c02184-8691-4edb-8d5d-9513ff2cabe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:ff:f3:eb:51:cd:6a:05:e9:4e:6d:ab:fe:
                    df:64:32:83:02:88:df:a5:05:77:90:31:4a:e0:62:
                    91:d7:89:91:e6:d8:2a:b3:3f:28:70:f5:fa:13:8d:
                    f1:f0:46:66:79:e7:6a:cf:67:32:ed:5e:70:43:c4:
                    a9:cf:1b:32:01:a7:2c:8a:de:b7:3f:3d:de:cb:57:
                    38:0e:23:6a:4c:b4:b1:7b:6f:d5:f6:41:38:02:b9:
                    e0:97:37:49:70:fd:a7:f8:53:a4:f2:62:5e:15:dc:
                    e4:f4:58:1b:2b:62:9c:d3:cb:9c:7e:f6:88:4b:2c:
                    59:5f:81:0c:35:4c:aa:53:6e:79:3d:4c:8d:4c:77:
                    eb:99:19:12:50:41:fd:3d:51:d9:63:7f:e1:c1:c0:
                    0d:c8:a2:f9:8d:bd:46:1e:51:a7:14:71:1e:66:a0:
                    3d:47:70:50:24:81:af:e2:1d:40:a5:e1:ac:da:1c:
                    6e:95:52:7d:dc:5b:b6:a8:6a:39:24:3c:fa:6a:49:
                    81:41:31:3a:29:c9:ae:5a:1f:49:f4:9b:ed:10:89:
                    3a:e1:14:bd:3c:a2:24:4c:4a:89:5f:7e:f4:d1:bc:
                    e8:bd:04:40:95:d3:30:c0:58:63:f6:bd:ef:6c:d8:
                    1e:f9:17:23:18:8b:7b:fa:bf:47:05:51:cc:d0:08:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:4C:0F:B5:EF:9B:99:A4:D2:06:5D:AE:CE:3B:AD:CC:BB:38:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/00707324-e653-343c-ba4d-0a1b77eaffc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl

            X509v3 Authority Key Identifier:
                keyid:4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:86:4b:dd:de:49:eb:dc:b4:ed:bf:bb:f7:70:85:af:86:a5:
         dd:07:3e:31:64:3b:41:19:15:b0:5c:ca:9c:57:f7:6d:fb:c8:
         b6:cf:8a:22:56:0d:03:34:69:4d:a2:c9:d6:8b:0e:2f:ea:ec:
         87:bd:b5:b1:75:25:8b:f5:d7:88:08:c3:fc:c3:28:0e:d9:6d:
         07:1a:dd:45:e4:a8:10:a8:cb:0d:40:39:4b:69:69:4d:b9:e9:
         5a:00:91:94:9b:1b:b2:a6:ae:47:0f:8d:59:fb:e1:6d:6b:11:
         bd:1d:a1:14:20:b2:49:fd:74:e2:d3:90:60:fd:f2:03:6b:37:
         27:f4:84:43:8d:6e:0d:c8:1c:ec:27:2f:fd:d4:c4:26:79:be:
         1e:a5:72:b2:bc:03:d8:66:47:a1:2d:3a:a2:06:01:c0:be:5e:
         1b:25:d8:a9:9e:44:84:6e:d2:f3:1e:95:1a:10:7d:2a:01:55:
         84:49:32:f5:5b:87:24:d3:cb:f2:8d:e8:ee:f2:c1:05:09:d5:
         13:8b:50:6e:ca:06:ef:96:c6:18:3a:14:fe:19:ee:6f:39:c2:
         f9:02:19:bd:70:95:4a:fb:30:73:0a:08:e9:06:6b:a9:c4:83:
         99:ba:bb:0e:4e:d0:34:4f:41:3b:ba:93:0d:bc:9c:dc:c3:9f:
         b7:33:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:32 2026 by rpki-client