Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6488c169-7a6c-3d44-a8e1-62db0225a752.roa
File:                     6488c169-7a6c-3d44-a8e1-62db0225a752.roa (raw, json)
Hash identifier:          dkBaoyzepBRH5fWnVA5AnEO/NWI/ea/JHkgrxkrebEg=
Subject key identifier:   BE:A9:65:DC:37:F2:56:BF:CF:78:5B:3D:91:23:EA:7B:88:92:B6:FB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E4C54B2A976C3EAD25E7A07C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6488c169-7a6c-3d44-a8e1-62db0225a752.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     19527
IP address blocks:        136.121.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:b2:a9:76:c3:ea:d2:5e:7a:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=76fb6fb2-fdf4-4341-8f72-e7d8cc62bc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:ab:ca:67:94:f6:92:06:5d:42:f1:22:66:
                    af:f9:5b:d2:29:c2:67:86:e7:6a:ec:d3:8d:0b:9b:
                    fd:21:2a:11:46:d4:cf:8a:b8:95:44:0b:fc:a4:16:
                    87:cc:2c:ae:3e:27:ba:96:93:4a:c2:fc:98:30:26:
                    88:be:6d:52:5a:f7:d1:8d:0e:e4:72:3f:ca:24:aa:
                    f0:11:66:78:08:4f:45:b8:5e:94:e2:24:92:ad:f3:
                    23:e8:d5:58:5c:34:0f:6c:7e:11:4d:8a:57:22:e2:
                    9a:fc:29:71:cf:58:70:1d:e9:60:a5:b4:ba:fa:d5:
                    06:4b:ef:f1:f1:6d:35:37:bf:d2:a0:ba:fd:0e:af:
                    fb:9c:f9:2e:12:3f:09:33:69:cd:18:13:45:42:b8:
                    6c:45:a5:88:4d:3d:bc:8d:16:38:31:0e:33:41:0f:
                    e1:14:2b:62:be:1b:d6:78:37:c5:a9:cd:cf:50:ed:
                    13:a2:ba:c2:83:b4:3e:36:74:8c:dd:ec:54:33:ab:
                    b4:96:1d:28:52:9c:b0:95:d7:02:af:4e:9a:1e:53:
                    93:76:9a:d7:92:c1:c0:1c:b9:5d:6c:b8:9b:46:e8:
                    5c:94:47:61:4a:fc:56:56:ec:15:20:f3:5a:ea:10:
                    fd:78:83:75:1f:66:60:61:7c:6c:9b:62:f3:29:12:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A9:65:DC:37:F2:56:BF:CF:78:5B:3D:91:23:EA:7B:88:92:B6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6488c169-7a6c-3d44-a8e1-62db0225a752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.121.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:64:e6:20:7a:2f:04:21:61:a3:48:6f:6e:a0:80:b8:17:b4:
         b9:0a:bc:30:a8:a1:1d:85:16:86:ab:26:90:1f:61:de:42:ac:
         2b:97:41:26:fb:10:46:a8:14:de:16:fe:99:52:9e:82:ac:8e:
         a2:2c:ab:11:9a:20:f7:f7:35:12:e6:73:81:f2:0e:da:d6:07:
         18:0c:3d:ca:dc:35:13:5f:50:0d:2a:1d:c1:16:4f:30:af:75:
         46:3e:5d:23:03:b0:0e:ca:cd:d7:0c:03:4b:f2:50:c4:fb:cf:
         06:9b:e3:db:1a:fa:8e:89:77:e6:4e:23:65:c2:17:b2:38:62:
         18:5f:8e:96:18:52:98:0f:6e:c3:7a:1a:02:e1:a7:97:89:85:
         47:a2:23:1c:94:07:c7:d4:53:75:3b:02:26:99:5d:d0:50:97:
         1b:84:50:d6:4b:2e:07:5c:4c:2e:c8:e6:22:6c:a3:2a:51:85:
         29:38:b7:d9:1f:67:c6:a1:1f:94:4c:d8:17:b7:ab:10:35:1a:
         f0:0c:6f:0d:ae:e7:34:1f:7f:73:0c:64:51:97:aa:8a:19:7c:
         d5:61:61:52:61:1b:be:bc:e6:db:a2:2c:8c:5a:44:0b:0c:9f:
         b2:94:7a:47:9f:cb:75:7b:2a:73:d8:91:2b:e8:ac:c9:6f:e1:
         4d:6c:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:49 2026 by rpki-client