Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccdcecec-0af2-30df-bcb7-59da3a8c3b57.roa
File:                     ccdcecec-0af2-30df-bcb7-59da3a8c3b57.roa (raw, json)
Hash identifier:          sLHzKp+bxJhNqY6tFrNR9QXeCzD22493JGjk8ZrvVbc=
Subject key identifier:   25:01:48:4C:F2:70:A7:AC:39:7E:C8:C1:68:08:71:B6:B4:3B:5C:A7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E5E79FFBD49784D020F1E6B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccdcecec-0af2-30df-bcb7-59da3a8c3b57.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     395973
IP address blocks:        136.126.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:ff:bd:49:78:4d:02:0f:1e:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=c4d2abc6-502c-4c79-866d-3ec3212e92a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:35:d5:9f:f0:81:b8:b7:d3:eb:7c:90:c1:45:
                    78:b8:6d:b7:2f:36:42:50:7c:89:0b:b6:19:14:dd:
                    14:80:b8:43:60:ad:66:14:3c:bc:1a:17:dd:8f:9f:
                    e7:97:92:29:a0:f1:77:53:4d:77:48:4d:e5:6d:65:
                    6d:03:0f:67:62:f0:ab:fb:66:c8:ab:9d:b9:07:a2:
                    a2:e0:d1:02:07:86:9c:c7:9f:2f:a7:6f:ac:89:11:
                    78:ed:80:a6:79:31:5e:d3:44:f9:58:6e:42:5f:97:
                    54:63:71:dc:27:61:3b:fa:bd:ea:ff:14:4f:93:44:
                    02:72:9a:87:38:b7:35:41:b0:1d:93:6f:15:dd:b3:
                    9d:bb:c7:57:63:3b:0e:18:0f:7d:9f:b5:e3:e1:b3:
                    ed:2a:e1:10:d9:19:b4:90:a3:e2:0c:48:e5:e3:cd:
                    40:c7:8e:7e:fb:14:a5:00:74:93:fc:b0:97:e1:76:
                    77:0f:29:f4:93:8d:6e:0d:bc:c4:7a:15:43:82:13:
                    9f:a2:b8:88:d1:54:5c:db:fd:a4:45:d2:24:5d:21:
                    00:d7:c8:81:ae:95:0e:26:d7:f1:15:d3:dd:9d:7c:
                    94:68:f4:97:e4:70:67:32:14:03:38:4e:97:ac:38:
                    84:47:73:96:d8:c2:a9:11:0e:09:0b:02:68:c3:aa:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:01:48:4C:F2:70:A7:AC:39:7E:C8:C1:68:08:71:B6:B4:3B:5C:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ccdcecec-0af2-30df-bcb7-59da3a8c3b57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.126.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:0e:49:b6:a7:2b:54:7e:78:aa:77:9f:f7:3a:ea:cc:84:
         b3:4a:7c:23:55:14:e7:e3:a3:14:6a:7b:ef:55:d1:d7:b5:c5:
         60:29:b7:4c:27:a9:24:3d:01:96:92:d5:03:05:7c:65:90:ee:
         ac:4c:ea:9c:b1:dc:e8:b1:a1:9f:1e:1a:1e:41:af:6a:ad:8c:
         93:20:9f:3f:f3:a2:23:7c:e8:78:a3:e9:9e:14:a2:1d:1a:71:
         69:a6:87:6b:40:50:0f:98:c8:6e:7d:2f:66:51:48:34:47:cf:
         52:d9:b8:37:f9:8e:d5:e4:4e:27:0c:a2:a1:df:39:c1:84:54:
         e5:c6:80:8c:fc:89:b3:ad:6a:f0:84:1e:2a:34:cb:ea:27:c1:
         92:59:89:6d:0e:0c:04:cb:ee:61:1b:6c:31:05:c5:a9:39:eb:
         24:e6:f0:c6:22:a3:d3:bd:8b:ac:b1:92:fc:81:af:69:ef:5a:
         2d:d3:38:4a:c4:95:15:08:ac:da:dd:be:78:7c:70:d2:32:b0:
         b8:25:35:33:07:e5:0c:76:14:f1:d0:cd:a6:e9:63:f6:88:11:
         c4:61:d5:dc:57:a4:23:2a:20:18:73:3d:87:4f:0f:0c:4f:27:
         00:d0:7f:60:73:a7:1b:e9:9c:0a:4f:6d:fc:e2:c0:e6:7e:e6:
         e9:39:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:59:59 2026 by rpki-client