Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/57fcb634-1767-35bd-b179-1940002e85af.roa
File:                     57fcb634-1767-35bd-b179-1940002e85af.roa (raw, json)
Hash identifier:          fcw5fxoQBbuDf8P8swhHcfK8NZPgpuH+mhLSJekFO78=
Subject key identifier:   24:36:7B:F4:9B:28:F1:58:8D:E4:6E:CC:D5:1C:17:60:E2:57:2E:11
Certificate issuer:       /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial:       010D0C9F4328584F4973628E956C586955C66080
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/57fcb634-1767-35bd-b179-1940002e85af.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26037
IP address blocks:        192.139.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:62:8e:95:6c:58:69:55:c6:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=34792d66-d4f5-4a99-9d80-2b5d7047d24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:2d:fd:e9:2c:8b:1b:65:70:e7:9f:80:dd:
                    dd:6a:cc:80:d1:76:b6:ad:1f:3b:90:c1:ea:40:79:
                    30:29:ec:de:a9:60:c6:fe:8c:f6:6c:b1:07:33:cd:
                    9a:86:10:4d:d3:dc:a7:7c:8a:52:0f:04:af:92:ec:
                    3f:b7:50:72:63:fb:cb:f5:0d:91:27:c2:8e:24:99:
                    12:2e:80:b3:49:c5:52:8a:bd:fa:99:e0:d1:a9:96:
                    f2:69:8f:66:2c:02:c0:1e:e7:d2:fc:cf:a2:8e:d2:
                    9c:55:12:6a:35:96:17:5f:f1:f2:02:37:7c:b5:bb:
                    d8:19:0d:5b:2f:bd:f6:8a:04:ee:4d:3e:1d:5c:50:
                    bc:b3:df:98:d0:14:aa:b7:e4:6e:f2:ca:35:07:84:
                    74:92:10:24:86:38:37:74:aa:35:0e:95:6a:18:86:
                    5a:e6:e9:5f:1d:4f:9d:8f:0a:8f:38:47:d0:6f:fa:
                    35:e4:22:e4:e2:70:12:22:92:ad:82:a5:50:05:13:
                    df:bb:3f:c0:fe:d4:f0:fe:5e:d2:5d:e4:04:26:7d:
                    58:9b:41:8c:3c:18:e0:3c:0f:63:eb:e7:57:4c:73:
                    3f:12:06:a5:2f:33:5f:7f:a8:41:03:6c:b9:2b:97:
                    e7:c8:26:4d:c8:1e:42:d9:9e:e7:e9:01:a6:e0:c1:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:36:7B:F4:9B:28:F1:58:8D:E4:6E:CC:D5:1C:17:60:E2:57:2E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/57fcb634-1767-35bd-b179-1940002e85af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl

            X509v3 Authority Key Identifier:
                keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:26:91:fe:f1:d8:94:3c:30:00:16:a7:ba:5e:58:a7:6d:80:
         25:b9:a5:53:cc:b0:01:a1:c8:f3:ea:1e:66:0d:b4:e5:f0:3f:
         f3:36:3e:a4:84:42:18:5d:2a:9d:df:8a:c0:17:a1:48:3b:53:
         0c:84:68:19:24:d1:b4:f1:34:4e:56:9c:91:a7:81:f8:92:8a:
         57:e6:c1:5a:a9:67:28:58:f9:ac:b6:69:f5:d7:71:68:f6:c3:
         f5:85:43:3a:59:fe:b6:e0:c8:fa:0e:f6:c1:ea:85:41:bc:a4:
         31:85:98:62:f1:6e:51:0a:61:90:11:93:d3:fd:b7:8e:7b:a6:
         51:27:ae:51:27:0b:e0:6f:71:f7:66:77:07:dd:9e:ba:29:fb:
         43:8c:a3:64:94:86:1b:62:e5:22:12:91:90:ab:a9:0d:ca:7e:
         dc:83:16:0b:82:01:3a:a0:1a:aa:2d:ba:77:49:48:c9:c6:47:
         be:96:cc:0d:8b:8f:fd:52:2a:78:39:b8:25:3c:3d:92:4e:a1:
         50:91:c3:0c:df:19:13:16:93:5b:4b:f9:07:8a:3d:74:0f:58:
         9a:ce:1f:cf:65:07:0e:f4:cb:39:08:3c:de:5d:a4:8a:ca:cd:
         64:85:0c:26:e9:aa:06:0c:51:8d:be:6a:15:08:55:36:0e:72:
         77:c5:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:45:03 2026 by rpki-client