Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/c6399336-9b00-3da6-b859-c1e1382086e6.roa
File:                     c6399336-9b00-3da6-b859-c1e1382086e6.roa (raw, json)
Hash identifier:          N9D9tyNOaMAzolKSerzHT1/Srd3FglqNytGZ+6G6Hyk=
Subject key identifier:   B5:C8:05:75:B5:17:46:D9:72:70:C6:3E:86:C0:C0:23:8F:EE:82:31
Certificate issuer:       /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial:       010D0C9F4328584D98BAB39E2DDBBEDC6259F940
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/c6399336-9b00-3da6-b859-c1e1382086e6.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     55201
IP address blocks:        74.122.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:b3:9e:2d:db:be:dc:62:59:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=c56d06c8-6c89-41b6-ad75-f9fe2cd01b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:4f:c0:57:2d:24:09:88:40:0c:fb:10:89:
                    ff:d6:22:96:3f:cb:9a:86:ac:69:6d:d2:bc:57:6c:
                    05:a6:b3:7f:80:f5:91:d1:8b:c9:75:37:81:52:2d:
                    a5:1f:56:9d:24:33:a1:91:63:84:88:0e:eb:85:12:
                    c1:84:7e:3e:70:ed:7f:c4:cc:b7:53:da:d7:78:9f:
                    f9:13:0a:6e:81:8f:18:71:ed:00:dc:62:80:b9:da:
                    0e:83:29:0d:6f:0f:de:bc:04:e8:49:ed:a0:7c:99:
                    60:f8:ad:6e:54:66:bc:fc:30:03:e5:97:d4:cb:f0:
                    e5:d3:00:99:22:ac:05:d2:4e:38:86:41:c5:23:ba:
                    e9:be:96:7c:77:0c:61:c7:7e:d4:d3:1e:21:f0:ea:
                    18:6c:5a:67:2f:f4:74:9b:7e:e2:fc:29:1c:b7:7e:
                    01:d5:fb:b0:d2:13:f5:6f:55:fd:9a:91:6a:81:90:
                    d2:70:18:8e:e5:53:7c:43:07:30:b6:63:5c:99:29:
                    ac:01:91:d3:b7:11:b4:79:7e:b8:e0:84:bb:08:94:
                    ec:d2:f3:55:7c:ac:63:6c:f8:57:09:77:b7:56:00:
                    95:00:94:59:8a:02:65:b5:40:14:58:93:ba:50:29:
                    33:c9:a9:b9:8b:8b:eb:05:8a:8b:15:80:70:9a:02:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:05:75:B5:17:46:D9:72:70:C6:3E:86:C0:C0:23:8F:EE:82:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/c6399336-9b00-3da6-b859-c1e1382086e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:35:5c:d8:c7:29:e3:e4:5c:50:85:ad:7c:4f:90:9a:fb:
         a3:3c:2c:d4:da:12:5d:43:ed:fd:77:9b:cf:05:0b:b7:ec:af:
         bc:3d:14:bb:2d:e9:4f:ae:e4:6b:73:c8:be:61:e3:2f:c8:89:
         95:eb:89:3f:82:3e:18:eb:92:a0:2c:aa:f3:b4:01:64:fe:60:
         a9:15:f3:e4:21:71:0b:cb:91:09:a8:3a:7c:25:e1:0b:17:7d:
         1e:94:5e:7f:49:90:76:9d:f8:79:3a:c5:c0:c0:6d:75:8b:67:
         43:ba:90:3d:dd:c3:3b:a6:ca:24:5f:7d:f4:86:1b:ba:c2:18:
         76:27:d5:93:f7:b7:ab:63:7c:07:c5:02:01:a1:4a:2c:2e:b3:
         2a:57:51:15:ae:b5:ab:f2:f6:d3:36:d1:47:5d:86:e4:9c:93:
         0a:e4:fe:87:06:32:11:29:9f:f9:2a:9a:d3:04:bf:05:e6:37:
         26:64:eb:ac:61:13:07:01:a4:71:30:eb:fb:eb:93:b2:c2:93:
         a9:f3:7d:b7:c1:d7:13:58:96:b3:66:3e:a9:80:8b:4d:53:74:
         0b:39:79:90:41:65:a0:c8:20:c5:c0:42:c0:d2:12:3f:84:fc:
         05:55:28:8b:e6:e4:5f:d3:50:23:99:88:d0:0e:81:b0:d8:e3:
         9d:e1:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:34:44 2026 by rpki-client