Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b512f588-35d4-3f88-bc4e-7f1c1a4cd016.roa
File:                     b512f588-35d4-3f88-bc4e-7f1c1a4cd016.roa (raw, json)
Hash identifier:          9Yi7qPNUDDM3sB3KRP4LkFAZD/l6QoWSo6uD+ZV84uk=
Subject key identifier:   D0:5D:9F:F8:29:88:22:6E:A8:1B:30:62:9D:37:2C:27:89:25:DD:D6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E5E79F6739E7B05E80F459380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b512f588-35d4-3f88-bc4e-7f1c1a4cd016.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     395973
IP address blocks:        136.126.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:f6:73:9e:7b:05:e8:0f:45:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=faea0577-2337-4b12-a851-f150aaaa4c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:84:35:aa:ea:9b:78:69:da:98:36:c5:09:
                    63:3d:56:65:87:87:0e:a2:8f:f3:70:d5:e1:6e:13:
                    00:95:77:0d:4e:ed:32:c1:09:56:59:e7:e2:24:47:
                    c8:7b:79:cc:d5:13:d5:ee:ab:81:ef:67:58:c3:92:
                    8a:8e:e1:d1:e5:b6:94:11:f4:ed:39:b2:6a:06:ad:
                    2c:ea:b3:83:5d:65:fd:8a:8e:69:d2:3a:4a:e7:70:
                    d7:15:50:c8:49:bf:92:1f:99:26:64:d6:5b:a5:7a:
                    b2:44:86:d0:82:ee:b7:7c:20:6f:e1:cd:16:f7:85:
                    33:d4:25:0d:a6:0a:66:68:b7:e8:90:67:da:86:13:
                    f6:f4:16:8d:eb:44:6c:ce:ce:f6:a8:b3:c8:fe:9c:
                    00:9c:8e:03:ba:f1:c7:da:7c:7e:31:64:4e:52:82:
                    06:67:a1:b0:c9:47:e3:c4:50:bb:69:ab:ad:8a:ba:
                    4e:95:f8:a8:0e:0d:4a:92:ae:f3:18:17:1b:67:cc:
                    1c:72:12:80:c1:49:f9:22:f3:96:c2:90:d5:ba:92:
                    c0:ee:09:18:02:17:03:bc:a5:50:61:03:80:be:c3:
                    a2:2e:13:ad:7d:20:76:88:0d:d9:eb:13:f6:15:32:
                    6f:cd:da:37:68:da:89:05:bf:91:09:56:95:74:4b:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5D:9F:F8:29:88:22:6E:A8:1B:30:62:9D:37:2C:27:89:25:DD:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b512f588-35d4-3f88-bc4e-7f1c1a4cd016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.126.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:c1:a2:34:5d:12:6f:3f:fd:fb:67:f7:91:0f:9b:1e:c9:
         3b:17:a0:53:20:e5:e0:d3:7c:2c:22:e0:15:75:46:fb:b1:37:
         8d:61:7e:ff:c7:1f:fc:b7:bd:f7:2d:52:fb:79:b0:05:c5:a4:
         6e:ba:06:ba:10:b5:e6:0e:83:5f:74:cf:21:aa:d3:c9:4d:c5:
         b6:1d:d0:24:1a:04:55:d5:e6:29:0e:29:64:f9:ba:ae:dc:e6:
         ab:65:be:8a:06:4b:bf:c8:bc:59:72:17:ed:58:a6:dc:b1:d9:
         91:de:4d:69:a4:5b:3e:4a:c6:ec:a1:2f:c6:1c:8f:0a:44:42:
         03:8a:b1:18:d7:5b:c7:57:10:77:c0:5b:bd:e4:95:e1:ba:26:
         7d:da:cc:f6:63:b2:77:f7:c5:d5:75:4c:41:45:ed:5a:be:79:
         e2:9c:1b:ef:04:2e:64:a8:c4:67:86:8f:79:da:e5:97:fe:8d:
         0a:16:bf:55:72:80:06:0c:cb:60:22:30:a8:0b:e4:a3:e4:2d:
         fb:1c:84:71:d8:4e:13:d5:61:61:b1:18:5c:7e:0b:6b:17:73:
         92:4b:fc:e5:6d:fe:b2:dd:03:2c:0b:50:3c:84:dd:a5:57:c5:
         94:00:77:6d:19:4a:10:b1:1b:c1:ef:cb:78:af:1f:57:fc:e5:
         80:31:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:45:48 2026 by rpki-client