Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/1d551313-586d-314b-a892-2b1319137fc1.roa
File:                     1d551313-586d-314b-a892-2b1319137fc1.roa (raw, json)
Hash identifier:          eabUl9SNBmIUvnK5XX5G9ioCGmZliNw+kKLcXnq26C4=
Subject key identifier:   35:4D:8A:B1:AF:CC:E6:B5:DC:22:D2:C0:77:26:1B:37:8B:4C:B2:2A
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584DAF1017B7444975F01FF36480
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/1d551313-586d-314b-a892-2b1319137fc1.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     396253
IP address blocks:        136.228.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:17:b7:44:49:75:f0:1f:f3:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=92aed5d3-ce5c-4b8f-a981-3750c14a3b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:7f:13:d3:a8:40:28:63:08:24:2a:66:35:
                    da:02:98:65:ca:78:d4:c9:dd:1c:6f:1e:56:98:e8:
                    7f:25:af:50:10:35:25:78:be:56:41:5f:b7:fc:73:
                    d1:ef:47:0f:d4:f0:11:b0:2d:7e:61:03:dc:4a:98:
                    7c:29:25:c9:9d:32:89:03:36:17:01:ed:13:01:88:
                    54:1a:d7:1f:ed:a1:f4:44:25:7a:35:70:40:e7:05:
                    09:d2:ae:ab:b6:b3:e3:ba:63:8e:e6:cb:04:fc:e5:
                    5d:5c:22:62:c4:10:bd:42:83:e0:48:17:56:77:30:
                    1c:48:38:00:2d:b6:a0:cf:65:1a:91:2f:6c:23:45:
                    8a:47:53:a8:fe:b6:9b:03:55:a7:30:f4:80:8a:19:
                    bd:ee:e7:45:ea:c1:df:26:14:83:98:3a:1c:f3:43:
                    d0:51:0b:3c:fb:b8:33:c7:68:ec:b5:f5:12:2e:60:
                    a6:9b:41:07:25:28:e4:a6:e3:de:ec:5c:16:bf:15:
                    f2:c2:02:8b:13:b9:1c:3b:7e:d4:e7:ab:33:29:7b:
                    31:3b:5e:e4:dc:e3:e6:6e:b4:37:fc:0e:b2:c0:2d:
                    21:01:4b:a8:d4:16:8a:28:a8:b2:29:5d:85:b4:e3:
                    6e:29:32:0a:fe:09:26:30:f1:01:b0:68:b1:54:7c:
                    5c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4D:8A:B1:AF:CC:E6:B5:DC:22:D2:C0:77:26:1B:37:8B:4C:B2:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/1d551313-586d-314b-a892-2b1319137fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:92:9a:0c:15:d7:58:bb:7e:dd:a9:69:90:fb:e9:14:2c:1d:
         34:02:26:17:57:47:a6:47:a6:18:af:37:92:80:e5:ce:43:f7:
         b0:8c:bb:75:8c:7b:01:28:ef:f6:9c:fb:a5:ee:91:83:dd:a5:
         61:be:2b:18:7a:19:56:84:a2:cf:9d:10:d9:a2:13:e4:31:d7:
         88:d2:52:81:2d:e2:0f:a1:30:a3:0a:de:d2:ab:09:22:98:54:
         49:38:a5:8d:cc:fe:b2:34:da:5e:ee:25:1a:e0:3c:f6:21:af:
         31:db:f6:4a:68:fe:96:70:ec:0b:9e:cb:93:3f:7c:09:33:af:
         2b:61:aa:86:50:d0:a6:4d:c5:17:b8:67:ee:7a:dd:7d:51:46:
         d8:1c:2a:18:ac:5e:42:cf:03:b6:6f:39:87:20:94:80:aa:8a:
         b9:e3:11:d8:4f:19:be:24:9f:a7:38:bf:ae:13:7b:d4:99:ef:
         0e:c1:a4:a3:29:bd:4b:5a:75:85:c2:3f:f1:5c:39:80:5c:13:
         00:24:4a:d7:86:58:2d:ff:86:c9:ec:66:41:ec:b5:79:6b:21:
         36:be:f2:7c:d0:ea:49:16:77:8f:48:c8:85:9f:77:7c:54:24:
         d0:02:56:6f:94:0b:77:14:75:18:cf:2b:49:15:bb:2a:ae:d1:
         60:6c:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:43:13 2026 by rpki-client