Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e535a1c5-1fd8-3da2-9791-235febf28707.roa
File:                     e535a1c5-1fd8-3da2-9791-235febf28707.roa (raw, json)
Hash identifier:          PWTTPB3seGhQXmqi3QEyypoVkRP8mjk+wnH3VgL8eNs=
Subject key identifier:   3D:34:EB:F8:CE:01:99:CD:36:3C:A0:67:01:77:62:21:C7:98:DE:62
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584E6C6F770B0E81333D771F26A0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e535a1c5-1fd8-3da2-9791-235febf28707.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     54113
IP address blocks:        198.145.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:77:0b:0e:81:33:3d:77:1f:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=e87f9f78-5c71-4236-a58d-bfb5daac7c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:7b:06:25:69:d5:5f:f4:61:77:cf:d9:12:
                    80:32:7d:8c:8f:5d:b7:c0:23:5e:3c:72:d2:24:46:
                    29:e6:e7:f7:16:f0:d7:c0:a3:c2:af:e3:f9:a9:8c:
                    2b:4f:f3:1e:5c:2e:bd:69:c2:fc:e8:90:92:59:73:
                    d9:cf:c6:54:0e:0c:b0:52:23:f5:79:2d:90:81:5f:
                    84:b9:79:bf:cc:86:03:ac:c8:71:08:3c:3a:46:a6:
                    4e:7e:d8:7d:d6:3c:90:93:96:a6:cb:1f:01:a2:30:
                    b7:c4:1d:6d:a3:38:22:d1:ce:25:33:7b:c2:68:29:
                    11:64:66:a0:66:f0:6e:a3:10:53:55:3b:73:80:20:
                    eb:b3:aa:7e:25:50:0c:6c:f8:77:b3:70:cf:5e:32:
                    f4:ac:f9:66:9d:74:62:7d:77:9b:25:de:9c:db:bd:
                    ba:58:99:ad:d2:c7:37:79:56:a4:ee:9e:1d:24:a8:
                    e3:f5:2f:96:05:bf:c4:e0:a2:4a:e5:8a:bb:b1:7e:
                    33:1d:14:b6:ce:fd:4a:10:db:78:10:89:67:2e:b6:
                    33:4c:9e:19:02:94:d2:78:87:e4:61:d3:65:ec:c9:
                    21:42:02:06:a4:07:78:e5:c1:00:64:ef:36:ba:07:
                    f8:96:0a:60:54:44:f1:36:73:f4:dc:66:5c:c4:c7:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:34:EB:F8:CE:01:99:CD:36:3C:A0:67:01:77:62:21:C7:98:DE:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/e535a1c5-1fd8-3da2-9791-235febf28707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:4f:0a:46:02:ce:50:a5:71:89:77:6c:fb:a7:8a:54:9e:
         13:c9:4a:f8:ff:eb:5b:4b:28:b5:56:15:55:26:26:6e:17:d9:
         d9:96:38:c7:d2:fb:a2:0e:0d:ac:d1:57:21:85:f4:09:ec:40:
         9c:2c:49:44:e5:89:19:1f:6b:c5:d6:4a:28:85:26:bb:31:b4:
         9f:34:01:7c:48:ac:5c:ff:d0:b2:c6:16:e5:42:21:4e:26:9f:
         f3:72:10:e7:30:49:e4:bd:41:0b:89:14:22:7a:cc:38:13:f5:
         10:34:77:1d:fe:e8:aa:16:8d:45:93:dc:0f:31:2b:00:cf:d7:
         a4:3c:ed:6d:71:3c:be:65:90:44:62:03:1f:07:99:2e:d2:84:
         46:86:c4:8b:46:13:70:a0:69:41:fd:31:37:33:60:77:be:06:
         0a:01:f6:04:f9:2e:6d:d2:1a:b1:98:e8:fb:68:b0:eb:bc:09:
         5d:43:75:3e:fe:f0:7f:8e:c4:75:ad:fd:5e:f6:78:88:7c:d0:
         45:65:8f:83:60:94:37:de:76:1b:5f:b2:22:70:c5:b4:0f:a8:
         8c:19:2f:d8:c1:35:68:a0:49:ea:e2:5d:2e:cc:71:07:5d:8c:
         c1:be:59:19:db:1a:33:11:1a:a1:2c:e6:f1:9c:94:9b:4c:c6:
         e9:5b:c8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:32 2026 by rpki-client