Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/423433c6-51b5-38bb-b31d-948f4edb7a73.roa
File:                     423433c6-51b5-38bb-b31d-948f4edb7a73.roa (raw, json)
Hash identifier:          kCalEziYB4EyoK+AL5uoXgnCVl8BQlqEIZpOszLeYuU=
Subject key identifier:   85:20:0A:FF:C8:4E:52:A3:F2:21:D3:76:AE:BB:D4:39:AA:46:EC:0E
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F4328584DC6CAFBBEFA7143BA7BFB8200
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/423433c6-51b5-38bb-b31d-948f4edb7a73.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     400792
IP address blocks:        136.175.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:ca:fb:be:fa:71:43:ba:7b:fb:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=8160a763-81bf-4279-98e2-3003eb41dbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:eb:be:68:09:8c:02:75:12:44:8f:b7:7d:4a:
                    9b:bc:ce:f7:6b:df:4e:da:c7:db:c4:43:0a:04:30:
                    f9:16:62:4c:fc:76:6a:20:3f:6a:71:6d:7c:87:5c:
                    79:61:06:22:31:15:f4:18:35:a8:ff:6c:21:fe:37:
                    3a:29:f2:c3:f6:fa:bc:1a:3a:b8:87:76:be:df:8a:
                    52:9f:1d:38:3c:81:15:bf:38:ed:60:eb:dd:2b:a2:
                    2b:e9:96:94:7b:9b:66:b9:de:e8:e0:9f:6a:71:a7:
                    0b:0c:a3:c2:5a:b2:79:a3:4b:31:25:0d:e5:97:7b:
                    78:6b:75:96:64:30:ae:f7:2b:85:0c:1e:37:cd:61:
                    d4:ce:74:93:b5:4c:4e:ae:1d:e5:9e:ed:2a:6f:b1:
                    05:9b:ce:a5:2d:f5:5a:2a:40:76:b3:06:3c:8e:90:
                    ae:f9:36:0f:e6:01:80:59:70:d4:0a:b9:66:83:64:
                    3b:3d:82:d4:14:b3:f5:fb:27:e1:0e:52:63:82:2e:
                    2f:a5:34:f8:c1:e0:82:ad:1b:80:5b:c6:53:43:40:
                    74:e8:3b:c0:f0:4d:7b:c2:f1:f2:55:36:a7:51:d6:
                    d2:da:23:d8:20:d9:6c:5e:ed:fc:fa:5e:bc:3d:49:
                    2a:ff:71:57:f9:19:ff:8b:b5:89:af:14:6d:f4:78:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:20:0A:FF:C8:4E:52:A3:F2:21:D3:76:AE:BB:D4:39:AA:46:EC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/423433c6-51b5-38bb-b31d-948f4edb7a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:08:ea:81:b6:49:34:f7:f1:f1:97:0f:a4:59:a1:37:27:6d:
         40:d0:bf:e5:bb:96:21:f9:98:f8:07:8c:a9:23:c7:60:96:a2:
         eb:45:5d:c0:5b:fb:c3:4e:2b:6f:77:82:6f:10:fa:f0:b3:29:
         82:e5:f7:0c:f4:47:27:0f:3a:93:24:8e:0c:c0:5f:0b:65:09:
         f9:d1:f4:59:75:00:b9:48:a3:b4:78:53:f8:b7:b0:80:74:f2:
         0d:f3:f6:81:80:b1:56:22:70:33:9b:1a:3e:ef:48:27:16:89:
         69:74:15:f2:de:fe:e1:80:05:96:d0:21:71:15:e8:b6:3d:83:
         05:1c:4e:83:ef:25:b6:b6:22:77:75:8e:cf:f4:39:4d:82:7a:
         7f:99:45:cc:7b:6c:c5:30:02:12:46:55:e0:4a:8f:c3:17:02:
         9f:57:63:96:3f:34:d9:19:3a:ee:af:ae:95:92:d2:df:a9:1b:
         8c:76:18:17:c1:99:bc:9d:f9:a5:6b:17:59:f6:fa:fa:e6:d5:
         d7:a6:a6:80:34:90:32:57:f8:59:e9:ac:66:c8:26:c0:7f:2b:
         1b:6e:d7:49:42:47:a3:80:46:22:14:38:c4:4c:3c:ca:a6:dd:
         4a:9c:94:0f:4b:71:d8:0f:68:05:c3:97:8f:ba:df:f4:06:c0:
         f2:66:ac:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:16 2026 by rpki-client