Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa
File:                     793d4344-b365-3fc5-922f-5bd874e1dab9.roa (raw, json)
Hash identifier:          YkuBaZ/SGj6A0+z//xjhcr2Nu6A3bVzEQnKEeOk1CQk=
Subject key identifier:   51:B5:1F:B6:74:FF:13:BE:7D:FA:24:8A:B9:5B:0B:CD:EB:3C:61:5A
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584D1F4A747BFA974358970565C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        136.22.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:74:7b:fa:97:43:58:97:05:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4765c0e5-01f2-43b6-9983-9cf2555a0c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:81:af:d0:e5:da:54:ff:4d:e0:49:28:48:
                    98:6d:48:c5:fe:67:ab:32:6a:20:3a:26:bc:aa:18:
                    b5:5d:7f:e2:80:9c:b0:08:12:58:e3:b7:e0:95:b1:
                    1c:80:c2:39:d6:4e:e5:80:21:80:e1:dc:59:89:56:
                    76:5c:ad:46:08:47:fe:81:38:15:ab:94:30:91:af:
                    b0:e1:63:9f:66:3e:01:30:21:a8:03:80:66:4c:fe:
                    0b:48:04:4a:b8:c9:a2:25:2f:70:0c:ff:88:de:10:
                    ef:4f:2a:08:63:ba:7d:39:e8:55:55:46:fb:34:8f:
                    32:54:f2:a4:d1:bf:65:78:15:90:95:8e:78:a8:fe:
                    c2:4b:c5:6d:bc:a4:45:d4:9f:58:99:7d:de:f3:4a:
                    d7:f1:15:d6:28:fe:30:d5:c0:6e:48:65:1f:dc:ad:
                    89:56:e0:3c:fb:ff:2b:94:ff:a1:0a:2f:c1:ce:3f:
                    99:ed:8b:62:52:f8:9e:49:bc:f9:bd:e4:71:80:33:
                    f3:2b:48:e5:45:28:51:7b:ab:3a:1f:29:f1:b2:d6:
                    24:50:53:87:62:de:6b:30:5e:96:b2:e8:53:50:53:
                    2d:1c:75:db:11:91:1e:9a:11:06:37:79:18:16:a9:
                    a3:e5:d9:dd:dd:04:88:6d:e0:46:74:aa:6a:b0:2d:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:1F:B6:74:FF:13:BE:7D:FA:24:8A:B9:5B:0B:CD:EB:3C:61:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:61:8f:9d:52:0f:4d:1e:96:49:ae:e2:72:25:cb:e0:5b:55:
         a6:52:b1:5a:3c:00:55:5a:e5:8f:ba:98:f6:49:75:18:04:d6:
         ed:ef:3c:32:db:81:8a:87:ff:19:69:19:90:57:d1:2c:8d:02:
         24:f1:25:f9:a8:0d:ae:3f:f3:be:66:29:7b:31:c6:f5:06:61:
         85:fc:c0:48:4f:35:27:8e:cf:b2:55:27:dd:1c:61:63:fa:15:
         69:75:f9:96:c7:8f:75:1e:28:40:1a:37:13:1a:54:12:45:da:
         64:b4:f7:17:b9:e0:fe:6d:d9:9e:b3:95:fb:52:45:e4:b3:88:
         4a:97:6a:3c:2c:9c:0a:63:11:a5:da:4d:8c:8e:35:13:20:cb:
         e6:ad:2e:69:5e:bf:7f:6c:c4:c7:74:91:47:55:09:16:db:78:
         e4:ab:58:c4:02:25:1e:8a:35:e7:51:95:6f:dd:1c:16:23:90:
         ec:7f:9c:31:6a:b6:c6:64:1f:94:38:99:5a:a9:fd:ad:db:71:
         ae:55:8b:53:88:6f:e3:15:6d:94:17:26:78:6d:b8:7d:12:15:
         39:89:1c:8f:78:dd:8e:3a:16:e0:a7:7f:ab:fe:11:15:e8:f8:
         46:41:40:bc:4b:f4:1b:60:6f:e9:07:69:a5:6e:b8:01:c1:af:
         d3:e0:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:44 2026 by rpki-client