Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa
File:                     5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa (raw, json)
Hash identifier:          tjg5E1EdcW/DWzrGNe5baWomntAu8/xH/iNWEjXhmZg=
Subject key identifier:   B5:6D:49:1C:79:B0:C7:4F:20:8E:49:0B:15:E4:E7:73:DC:0F:A0:84
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584F4973B8AD4681448350691AC0
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396253
IP address blocks:        136.228.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:b8:ad:46:81:44:83:50:69:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a8f631e5-f8b1-4119-9334-2e385635f60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:6f:70:3c:42:04:80:12:ed:ea:72:79:71:
                    14:eb:b1:df:a1:8c:64:9c:c2:e6:8a:a6:73:a9:01:
                    2d:2f:42:d1:94:b8:95:2d:9d:ef:70:88:9d:00:d7:
                    c6:fe:ab:87:b3:07:49:a7:fc:68:ae:43:2f:41:82:
                    d9:49:da:11:c5:b9:9b:39:22:61:d8:f6:69:21:92:
                    12:eb:2c:e9:e8:cb:db:6e:56:be:7f:81:e0:7c:4d:
                    00:e4:46:07:0a:08:74:c6:75:4f:a6:0a:ac:75:8b:
                    a3:b4:3b:93:64:40:b2:45:4e:71:e1:80:7f:e0:9a:
                    26:76:4b:2b:65:31:0d:70:f1:af:5f:35:2a:0f:23:
                    5a:af:35:10:88:cb:fb:7b:9f:cf:92:02:2b:64:d3:
                    0d:1a:5c:d3:1a:e6:17:04:07:6c:80:4b:6a:85:5c:
                    f3:7b:57:31:ec:ab:02:ce:92:0e:3c:f8:49:b4:86:
                    50:87:9a:37:b7:a5:cd:1e:da:8f:8d:19:16:9f:78:
                    8b:e9:7d:67:85:8c:a3:80:77:da:ac:14:0a:53:e4:
                    ac:2a:60:20:55:5c:4d:35:b5:d1:30:0f:94:dc:a2:
                    75:a5:5f:32:7b:ae:df:35:71:95:d2:4e:6d:af:6a:
                    39:da:d5:3e:5f:55:30:69:7a:ba:27:25:7d:cc:ad:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6D:49:1C:79:B0:C7:4F:20:8E:49:0B:15:E4:E7:73:DC:0F:A0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:04:90:26:0e:ab:d9:bd:20:64:e0:f5:d3:83:9a:d0:07:ad:
         9a:a0:63:55:1d:a8:f0:c6:bf:db:cb:18:bf:d8:32:10:66:e9:
         95:e2:de:46:f8:2f:51:6a:b6:13:0a:00:e8:9b:8c:07:19:83:
         1a:fc:35:54:91:ab:62:8f:d9:8e:39:35:3e:da:d8:b0:73:0e:
         4c:60:23:1a:29:00:bf:a9:00:6b:7f:52:9e:23:73:fb:01:f2:
         08:55:61:2d:e0:44:1f:df:3f:6d:3d:02:5a:a9:1b:ed:33:a7:
         a7:a7:a6:cd:4f:03:75:74:28:03:e6:92:3f:e7:8d:a6:53:77:
         8e:09:2a:d2:45:33:84:97:b3:1d:38:c4:19:15:83:d8:26:40:
         9e:b6:59:3b:f5:fc:79:ec:12:45:e8:a8:d3:40:71:ae:de:fa:
         38:09:ad:0d:e6:f2:5e:bd:3f:47:50:ea:5c:cd:24:54:86:45:
         83:42:7a:cf:e9:1c:8e:d4:a4:d1:2b:25:01:a3:b2:28:ad:09:
         59:63:ef:ac:e1:42:7d:c8:86:e6:fb:b6:80:b7:e9:28:d1:e8:
         21:81:48:a0:ff:17:31:2b:71:d4:09:09:e0:5d:fd:0b:d8:03:
         a3:0f:5c:c6:c8:af:ce:64:ee:28:af:2f:c7:1c:df:8e:a3:49:
         97:76:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:41:51 2026 by rpki-client