Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a882b57-2cb5-4065-a5c4-9fb4398a516e/36c53721-bc6d-3da1-9e3c-59b318e821f2.roa
File:                     36c53721-bc6d-3da1-9e3c-59b318e821f2.roa (raw, json)
Hash identifier:          i5KyC68jhl3M4lOtiVjTnsn8Y7PSKLltPK8VH+epZCU=
Subject key identifier:   78:DA:E7:17:E8:EA:49:02:A6:A4:7A:7B:D9:BC:57:1F:CC:AF:21:96
Certificate issuer:       /CN=8a882b57-2cb5-4065-a5c4-9fb4398a516e
Certificate serial:       010D0C9F4328584D15A253541F91879A8A5D6380
Authority key identifier: 7C:37:C1:79:E9:6A:4D:25:2F:77:EC:CC:24:0D:F3:24:4A:9B:04:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a882b57-2cb5-4065-a5c4-9fb4398a516e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a882b57-2cb5-4065-a5c4-9fb4398a516e/36c53721-bc6d-3da1-9e3c-59b318e821f2.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     53671
IP address blocks:        144.86.175.0/24 maxlen: 24
                          204.187.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a882b57-2cb5-4065-a5c4-9fb4398a516e/8a882b57-2cb5-4065-a5c4-9fb4398a516e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a882b57-2cb5-4065-a5c4-9fb4398a516e/8a882b57-2cb5-4065-a5c4-9fb4398a516e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a882b57-2cb5-4065-a5c4-9fb4398a516e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:53:54:1f:91:87:9a:8a:5d:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a882b57-2cb5-4065-a5c4-9fb4398a516e
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=3b550a61-ba75-4cc2-8c99-ae9d4946e96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d4:3f:ff:aa:f0:66:8c:fd:af:96:84:dd:fc:
                    90:62:be:54:32:c0:5a:88:71:e1:71:e0:b9:60:f9:
                    1c:98:b0:a4:38:85:5b:a9:fc:30:3e:c1:e9:b1:79:
                    2f:c2:08:7c:0f:ee:1d:37:e9:9e:75:05:ec:96:6d:
                    af:a1:6e:04:0a:c7:5d:6f:6b:4a:2c:0e:30:16:0b:
                    2c:15:cc:bd:c5:51:72:da:9e:df:a4:ad:b1:0c:ed:
                    60:fb:16:da:0e:ea:d6:b2:ed:c9:48:4f:93:02:c9:
                    cd:6c:91:14:b4:8e:ff:c5:74:9d:31:64:d6:08:2f:
                    22:cd:ae:85:dd:83:7b:3f:18:34:22:b9:60:53:58:
                    76:c6:78:9e:3f:cc:2f:5c:ed:fd:0c:5a:14:1f:f3:
                    62:40:88:8c:b4:25:86:7a:7a:07:ef:89:10:9e:d8:
                    c4:bd:dd:8e:d2:76:70:56:c2:f5:3c:cd:88:d1:db:
                    f9:d1:8c:7c:16:fa:72:c3:c6:70:7a:11:e1:66:60:
                    31:ab:ad:2d:c3:ae:3f:6e:2e:36:d3:aa:35:3f:48:
                    c1:59:42:b6:cd:9a:68:4b:66:b7:72:b4:4d:fa:91:
                    39:38:a2:77:2d:8f:8f:cf:ba:a6:ba:9a:a2:ef:e7:
                    a9:08:db:8f:a1:b6:81:a8:04:e8:d8:e5:f7:29:d5:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DA:E7:17:E8:EA:49:02:A6:A4:7A:7B:D9:BC:57:1F:CC:AF:21:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a882b57-2cb5-4065-a5c4-9fb4398a516e/36c53721-bc6d-3da1-9e3c-59b318e821f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a882b57-2cb5-4065-a5c4-9fb4398a516e/8a882b57-2cb5-4065-a5c4-9fb4398a516e.crl

            X509v3 Authority Key Identifier:
                keyid:7C:37:C1:79:E9:6A:4D:25:2F:77:EC:CC:24:0D:F3:24:4A:9B:04:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a882b57-2cb5-4065-a5c4-9fb4398a516e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.175.0/24
                  204.187.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:d7:f0:ec:82:a8:9a:a5:bb:f6:39:95:f7:ef:f2:b1:a2:c1:
         e3:77:eb:a1:55:e4:57:2d:81:3f:63:72:ca:c1:af:c1:3e:55:
         37:9e:66:dd:64:31:b0:61:d1:0f:b8:4f:4a:70:04:a4:cd:42:
         d0:77:95:06:10:41:0c:21:7b:54:d9:28:4a:e0:c9:42:83:73:
         ba:84:1d:cd:07:8c:8d:25:30:e0:3e:8b:d7:03:f1:8e:c7:86:
         66:c7:8d:15:4b:92:02:ee:53:b5:ed:54:25:d8:94:cc:ef:61:
         4a:30:bd:0a:5d:34:ed:5b:a8:8b:27:a2:f1:60:e0:9b:3f:2d:
         72:7a:1f:b5:08:98:c5:d4:69:60:1f:b9:cf:cd:a3:af:6c:19:
         44:df:ab:ff:16:95:ba:fc:6d:30:ca:b9:c6:c3:cd:71:d0:27:
         b6:69:ff:a1:1a:87:4d:33:74:16:24:8d:d9:25:86:2c:a7:eb:
         24:db:02:db:25:2d:41:84:ac:14:56:0c:8a:26:4c:2d:69:c1:
         ed:dc:b4:da:50:c3:2b:25:11:23:1a:7a:77:f6:25:19:4c:7b:
         af:a6:fd:a4:63:ac:f3:27:09:e0:d7:9e:c6:c5:d5:11:cd:f0:
         fa:ac:81:50:86:6f:d9:89:ae:6d:9a:0f:8f:43:4c:fc:b8:7d:
         18:55:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:31 2026 by rpki-client