Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa
File:                     9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa (raw, json)
Hash identifier:          kSv4wy0hPDWyVWe2Ht5u9TnfrHg+Viw6lahUxtxzJSQ=
Subject key identifier:   20:FE:EC:96:22:41:C1:7E:36:35:2F:CB:59:1C:96:A9:2B:B0:FE:BA
Certificate issuer:       /CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
Certificate serial:       010D0C9F4328584D6515155D637DF71730010780
Authority key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     62490
IP address blocks:        136.175.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:15:5d:63:7d:f7:17:30:01:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=cd3f4751-3e3c-420c-82f1-de290758fe92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:fd:2d:53:a4:19:9d:d3:cd:a2:29:c2:d9:
                    e5:9b:b8:1c:7e:0e:92:9c:74:19:96:ec:d7:13:cd:
                    0a:f4:53:5a:fe:99:9d:44:15:a1:e1:0c:6a:51:33:
                    f6:37:8b:64:c4:7c:15:85:8e:72:8d:ff:35:91:58:
                    39:89:c5:31:12:d2:22:ce:d7:b0:95:2e:9c:3b:bf:
                    f6:5b:95:9f:3b:45:44:9c:13:02:b3:79:f9:d5:71:
                    72:cd:fa:7f:46:24:1f:fe:63:63:fb:74:97:58:e8:
                    2e:e1:8f:e4:30:ab:44:f6:f8:dc:4e:44:56:17:6c:
                    2c:78:1d:c6:ca:25:db:05:52:3f:1c:b2:86:8a:cc:
                    cb:e3:98:9e:ca:6c:9b:95:b7:26:a5:a9:1d:a8:aa:
                    5b:e4:6f:1a:c4:cf:ec:1d:a3:6a:57:97:91:62:38:
                    5a:13:a8:ca:36:ac:a5:21:12:3d:df:46:69:76:a3:
                    cc:89:18:d6:18:8d:28:34:66:b9:f8:9f:bf:88:f8:
                    72:e7:a3:2b:40:8e:7a:df:c0:e7:88:e8:14:da:e0:
                    0d:15:cc:3f:ed:70:98:51:e7:c6:7f:51:28:1d:9c:
                    a8:61:a9:17:e8:b3:28:5b:20:7d:48:93:bd:58:43:
                    26:ce:fa:12:c4:68:ff:eb:43:e3:54:a0:dc:c3:59:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FE:EC:96:22:41:C1:7E:36:35:2F:CB:59:1C:96:A9:2B:B0:FE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/9f9d0003-375e-36c2-bddd-c2334fcb4eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl

            X509v3 Authority Key Identifier:
                keyid:4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:4c:b8:d7:60:24:38:bd:9d:53:b9:6c:91:8c:11:a9:1e:
         60:20:a7:53:c6:d5:30:e9:be:58:dd:06:ad:f1:c9:dd:f8:57:
         f0:fe:c9:96:52:b1:c3:1d:7b:1f:b3:73:4a:6b:cd:6a:a8:a4:
         c9:59:c8:6e:c4:e0:57:35:e0:ea:ad:38:54:f6:c7:a4:81:7b:
         61:fd:a2:87:26:82:cd:df:51:47:3d:a1:20:89:27:a6:e7:31:
         3e:41:8b:c6:0a:23:a0:22:a0:d3:f1:20:e6:b7:0f:17:37:11:
         4b:66:07:c2:20:9e:e1:ff:56:11:0a:34:3c:82:7b:17:0b:2c:
         20:1b:1f:92:c0:53:42:cd:95:17:82:50:dc:df:7c:4b:20:29:
         0a:23:d2:c4:3a:0b:84:d5:de:eb:15:49:78:02:0a:dd:74:ea:
         02:f2:56:15:90:e6:99:94:7b:27:5b:e0:a0:1d:9d:10:ad:b5:
         98:90:14:14:fc:02:87:5c:5b:35:49:44:64:a0:81:24:55:49:
         19:ce:c7:0f:ce:d6:2e:2c:34:44:94:79:ce:89:30:51:cc:dc:
         39:20:a6:67:5f:cd:cb:33:11:9d:cf:ea:62:3e:ea:ee:94:1f:
         3b:9d:23:74:7d:11:72:01:4a:c8:c4:40:ef:02:89:32:8f:3c:
         5b:15:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:30 2026 by rpki-client