Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/826cac33-212b-3cd3-b513-4fc98bffba3d.roa
File:                     826cac33-212b-3cd3-b513-4fc98bffba3d.roa (raw, json)
Hash identifier:          Z0E3EwSoxoSU5+fB+iN5nf6sqkuZ2M8MyMvEVQXI9l8=
Subject key identifier:   75:A1:F4:53:4F:53:96:EE:C9:6A:51:1A:92:62:FB:3C:34:1E:66:51
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F4328584F20F7ADB45FF3CFAC49D9DB80
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/826cac33-212b-3cd3-b513-4fc98bffba3d.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     270147
IP address blocks:        136.175.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:ad:b4:5f:f3:cf:ac:49:d9:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=9c9ea8d8-361f-4ca2-bbae-c4e9b089c84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:ef:4f:38:27:44:96:11:a1:06:b1:c4:ab:
                    f4:52:ad:1d:14:53:9e:2c:52:66:49:b0:97:24:f1:
                    f6:eb:9b:05:26:91:24:c5:fe:ac:18:6a:bf:c4:a8:
                    47:43:b1:43:07:66:21:a5:28:06:59:7f:ea:7d:a7:
                    8c:86:9a:2b:a4:f7:a6:36:db:e1:6b:8c:91:01:ff:
                    70:b3:4d:df:e6:b7:e8:61:f9:fb:b2:d9:b6:d5:fb:
                    6c:6b:e1:a8:e1:19:4e:26:3e:98:8d:92:9e:2d:0a:
                    9d:0d:7a:67:75:a5:86:b8:e0:35:a7:11:b0:d5:46:
                    50:ec:02:76:66:d4:de:14:9d:b8:c4:af:76:78:4c:
                    10:a0:a9:35:fb:50:e5:62:d5:2e:e1:a3:a7:43:f7:
                    fe:78:b2:2c:5a:ba:2f:0a:a7:18:00:4b:ba:19:ef:
                    ff:f3:0c:4e:46:08:0d:34:2f:64:4c:d3:af:2c:58:
                    e3:03:82:45:83:87:82:e5:d3:e9:a2:e5:7a:71:68:
                    dd:4f:99:51:72:0e:fa:08:05:b1:af:ff:1b:e5:58:
                    83:a6:47:cd:8e:71:6f:b8:6d:af:a8:17:c3:07:75:
                    68:af:99:01:ae:d2:60:63:d1:01:26:b8:a1:14:a5:
                    0b:17:1d:26:3d:8b:de:61:60:a3:20:20:d6:1f:5a:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A1:F4:53:4F:53:96:EE:C9:6A:51:1A:92:62:FB:3C:34:1E:66:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/826cac33-212b-3cd3-b513-4fc98bffba3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:4a:83:30:dd:67:12:dd:25:e6:1c:2c:51:3c:05:64:11:68:
         e2:c0:65:af:79:5c:d7:72:eb:a7:fd:ee:80:58:4e:c6:d4:63:
         75:18:8f:3d:71:77:bd:54:68:0c:ed:fb:db:a8:9d:ed:c5:4a:
         70:8b:f2:f0:38:47:7a:b1:a0:97:c3:25:73:82:bd:81:8a:24:
         ca:29:97:b5:bc:43:82:30:9f:1f:2b:eb:c8:0b:df:94:08:53:
         96:14:67:ec:fb:70:7a:ff:cf:f0:3f:ad:f8:b6:60:c5:17:29:
         b4:2e:9a:1e:cf:1c:14:35:64:81:28:db:de:90:1c:ce:43:aa:
         f3:4f:27:43:04:75:ab:ca:0f:f9:eb:b1:76:3c:8c:62:71:9e:
         55:0b:78:04:15:0c:02:04:61:98:f6:0d:3a:76:48:54:78:ac:
         44:33:31:29:cf:a5:dc:cb:e9:8c:d8:f0:0c:db:3a:43:50:f6:
         1e:b8:5e:69:65:26:4b:cb:55:68:a3:7e:89:90:de:66:b2:a1:
         06:c5:f3:76:db:3f:41:09:cb:ca:68:d3:c7:6d:38:42:da:76:
         21:d2:74:36:40:87:90:c3:ce:56:fd:77:d0:b5:4a:e1:5b:15:
         eb:5a:01:92:22:69:f0:69:ae:55:10:93:ac:11:ae:ed:97:c6:
         e7:04:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:26:18 2026 by rpki-client