Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa
File:                     6207f57d-7286-3e57-bd00-2ce12029aa76.roa (raw, json)
Hash identifier:          vlh8ITIzZo3RawRhfynBKn4JXcy6/i8e95MFFwthgjE=
Subject key identifier:   86:7A:72:A5:DC:52:C2:F7:CA:70:54:4F:F1:A8:73:DE:14:F7:79:F3
Certificate issuer:       /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial:       010D0C9F4328584DCAFB18CE4F3576BC044EAE00
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     23532
IP address blocks:        216.40.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:18:ce:4f:35:76:bc:04:4e:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=d8ea9df6-127d-4c21-ae06-be5d3700771c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:f1:8c:c0:02:3a:23:d3:de:cd:92:e6:33:
                    ca:c2:fc:81:1a:81:5c:dc:ce:b5:f4:10:77:4f:a9:
                    a0:fa:11:16:f6:a6:2f:7e:ee:05:ed:0f:0b:c5:b1:
                    70:3a:88:76:4a:8b:13:f7:45:b9:cf:29:61:b1:a7:
                    64:01:63:44:e1:e2:8b:ef:0e:c9:1c:2b:33:e1:50:
                    11:e8:df:a4:a0:7e:fb:a7:55:d5:de:30:38:5f:a2:
                    b7:59:7b:66:19:68:63:19:ab:64:43:94:55:11:e9:
                    73:af:65:a4:da:c0:9d:f1:61:8d:58:89:92:20:f2:
                    13:0f:98:a6:f8:e4:f1:ab:5c:a4:d5:23:38:a9:73:
                    d4:1f:62:19:7a:0c:62:47:66:e8:3a:d0:58:09:82:
                    be:3b:a2:73:02:46:3a:81:61:e6:24:da:0b:1c:c7:
                    87:91:ce:65:4c:f6:f7:3e:13:94:a0:a1:b4:9a:ae:
                    c7:65:16:6c:03:a0:4a:6f:b6:ed:63:24:aa:c1:f3:
                    9d:26:02:d5:4f:5a:06:b2:a8:61:55:3e:06:f4:3d:
                    1f:9c:6c:b3:08:cd:27:a8:f8:2b:fa:91:f2:c4:6f:
                    1a:92:04:5c:38:ad:4d:41:24:89:4c:7c:c9:53:de:
                    76:9e:e1:e8:29:c2:a4:7b:03:34:d0:19:4e:a3:8d:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7A:72:A5:DC:52:C2:F7:CA:70:54:4F:F1:A8:73:DE:14:F7:79:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/6207f57d-7286-3e57-bd00-2ce12029aa76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl

            X509v3 Authority Key Identifier:
                keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:be:8f:b1:5a:6c:77:c9:94:b1:a0:91:81:1f:d4:ae:f1:92:
         3b:f1:12:87:8c:85:e6:89:16:87:91:b1:81:92:af:e9:7f:bb:
         da:7c:0a:ad:08:61:bb:5f:82:1a:aa:4b:29:26:ac:72:61:f2:
         4a:33:08:18:a4:8d:50:c0:4d:9d:1f:b1:d9:84:d0:ce:6a:f2:
         91:3b:19:77:b6:d0:6a:55:8f:c1:16:fb:f2:81:9e:4f:c7:f5:
         6e:0a:a6:e9:5d:b6:dc:54:0e:f4:91:db:c9:23:21:8b:0a:bb:
         2b:a2:2b:3f:60:ef:a8:b7:ae:21:1d:14:69:28:fb:6e:4a:ba:
         ad:57:d9:2b:00:f6:42:49:c3:5b:2d:af:64:18:33:35:93:62:
         49:e2:0c:7e:04:67:8a:ee:02:29:de:47:8d:2d:c0:df:1f:06:
         d0:4e:c3:28:78:24:c0:7a:b8:0f:e6:70:5f:0e:0b:db:b4:77:
         6a:ae:0b:58:cf:a8:ee:6e:41:4a:9c:8a:d1:04:39:21:4d:97:
         24:6e:be:11:eb:59:5d:d1:de:b4:87:a8:81:e4:3b:97:69:b4:
         1b:9c:19:79:8b:8b:d3:c6:e4:fa:20:36:f1:c7:93:38:98:09:
         3e:cf:68:62:57:dc:5f:7c:66:b6:66:07:a9:30:4c:bf:ec:08:
         56:98:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:20 2026 by rpki-client