Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/74e42a91-4e6a-38f3-9928-86c5ee9607d6.roa
File:                     74e42a91-4e6a-38f3-9928-86c5ee9607d6.roa (raw, json)
Hash identifier:          MF5bJZgo4jf17Cd7CjKD4LwqhaXFSmQAwCH4Rz9Hq18=
Subject key identifier:   2D:93:DF:0E:50:26:06:82:CB:BD:5A:CB:A0:25:18:7C:F9:CE:5B:F5
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584D300A5C4A39B7F0DB18517800
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/74e42a91-4e6a-38f3-9928-86c5ee9607d6.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        136.245.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:5c:4a:39:b7:f0:db:18:51:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=787c9c33-2acf-4a39-91f3-9d29d19b801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:18:70:d9:4a:03:2d:ca:4d:55:be:82:d7:
                    c7:96:8e:b2:cb:e4:65:52:a3:36:43:8f:60:7e:37:
                    c7:86:65:61:42:7d:43:6c:10:b3:7a:a1:cc:40:88:
                    cf:9d:07:4a:13:76:6e:e3:3f:07:96:8c:84:a6:f7:
                    7f:2d:f7:0a:85:d3:d6:17:6f:ef:8d:ed:1a:fb:ec:
                    b9:0f:54:29:17:f7:14:d7:86:be:c8:fa:cb:ea:27:
                    61:a4:5b:83:1d:57:8f:c3:fe:32:0a:d9:a4:4a:7f:
                    0b:4f:9f:be:ee:db:3d:4a:cd:00:e4:cd:bc:20:dd:
                    2c:8d:b0:2c:b5:58:48:40:3b:9e:d5:0a:15:19:15:
                    66:84:c9:0e:37:8c:ac:9a:fa:7d:f7:28:d5:4e:76:
                    73:f9:ea:2c:4a:99:93:59:be:33:96:44:e1:b0:0e:
                    86:a1:05:97:ff:76:52:d5:5c:55:71:26:a1:16:0d:
                    3b:b3:ca:03:14:b5:9d:38:44:96:a9:ad:a1:fb:b1:
                    9a:25:44:ca:c1:40:4c:c0:ea:92:e5:74:c6:55:73:
                    d2:14:c8:57:8c:43:ec:63:c7:39:b1:d1:a9:b7:94:
                    bc:ef:df:3c:5d:d5:81:77:be:74:f9:de:aa:18:d5:
                    65:5a:97:75:d6:a6:82:0a:38:71:a6:e4:38:02:04:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:93:DF:0E:50:26:06:82:CB:BD:5A:CB:A0:25:18:7C:F9:CE:5B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/74e42a91-4e6a-38f3-9928-86c5ee9607d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a4:a3:7c:49:0b:88:9f:08:95:c4:fb:fb:eb:f0:67:2e:07:
         80:69:61:34:37:12:5e:ef:fb:1d:fc:3d:5f:2c:66:fa:4a:43:
         ca:aa:99:19:0e:ad:3c:2f:82:a1:8e:d5:8f:7f:6f:a8:cf:6c:
         98:e7:95:9c:b5:8a:72:7d:df:74:b1:d6:3f:32:2c:49:a5:64:
         36:74:33:75:45:25:a8:66:c1:99:f3:83:60:cc:ff:d1:31:e6:
         99:43:15:34:d4:f9:3d:21:a8:b0:d9:b6:67:2c:41:e1:00:f3:
         95:e8:17:c8:cd:db:5a:d4:61:50:82:cc:5e:e4:f9:a4:2d:a5:
         99:da:2f:2a:14:47:29:9d:08:22:84:0e:45:34:47:c3:22:5d:
         72:e7:ac:34:5a:55:2a:94:57:55:6d:46:f3:e4:2a:8e:5f:86:
         a8:43:6b:68:54:91:91:b0:fd:0f:03:7c:ff:e4:45:82:13:69:
         bb:7e:2f:29:56:fa:ff:8a:51:74:7b:30:5a:00:95:17:2f:99:
         ed:75:ec:3f:ec:6f:43:3f:53:5f:13:4c:f3:03:13:3c:85:d3:
         8d:f0:7e:8f:9d:b0:db:40:a2:f9:7e:61:73:7f:c5:b6:fa:4c:
         33:b6:27:dc:c5:63:03:b8:22:45:6d:0f:90:cb:22:f3:5a:94:
         ba:a9:ab:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:55 2026 by rpki-client