Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/81fd244e-f226-367e-b02e-7f380e11df91.roa
File:                     81fd244e-f226-367e-b02e-7f380e11df91.roa (raw, json)
Hash identifier:          b00pja9fHoVgG8+Dz6OTAU8ODi8fSwwTiqV6QjSgz9k=
Subject key identifier:   0D:0C:8A:EF:86:55:1A:6F:CA:78:D6:A3:6C:60:42:FC:FA:E4:7D:89
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584A411052119472CFEC6891D800
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/81fd244e-f226-367e-b02e-7f380e11df91.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     202276
IP address blocks:        136.228.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:52:11:94:72:cf:ec:68:91:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=0bd2aaf9-c2d4-4309-ba9b-468aecbf3816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:43:66:47:37:07:2e:50:c8:21:f3:7f:43:31:
                    9a:21:18:ae:1f:17:8d:b1:d6:81:9a:ee:d3:67:7b:
                    b8:ca:41:cc:00:5d:8b:8b:4d:5b:38:84:a3:f3:52:
                    e1:bf:61:67:3f:e4:37:16:39:a3:29:c2:95:08:94:
                    ec:ad:83:47:e8:d1:3c:db:e6:e7:8f:ee:3e:22:9b:
                    e3:60:fe:67:fc:87:26:05:61:ad:2e:3f:bf:07:d4:
                    7b:f6:3c:c3:2a:b4:a8:76:06:db:a5:91:8a:1e:85:
                    1d:c1:ec:81:af:7c:e5:5c:3f:65:6c:e6:d4:3e:77:
                    01:49:e9:c5:9d:82:d8:3d:6d:ed:bd:e3:fa:aa:4a:
                    c1:18:e5:02:71:8a:20:a5:64:c0:bd:94:6e:dd:40:
                    a8:04:98:93:e1:ff:7e:6c:22:a3:ad:54:ca:86:f6:
                    5f:18:0b:33:db:75:30:1f:67:23:26:8d:c7:17:a8:
                    38:f1:b5:d6:46:48:4f:fb:bb:e6:11:2a:96:26:5b:
                    ef:94:ed:9f:7c:98:45:3e:83:7f:37:5e:90:45:70:
                    a6:c1:8a:70:e2:56:30:fa:88:0e:bd:f9:d6:b9:0a:
                    ee:00:b7:4e:ee:6a:d5:92:6a:73:46:8f:da:3b:8e:
                    56:9b:e3:fc:bb:6c:60:77:d6:42:30:16:a6:6a:bc:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0C:8A:EF:86:55:1A:6F:CA:78:D6:A3:6C:60:42:FC:FA:E4:7D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/81fd244e-f226-367e-b02e-7f380e11df91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:db:ec:10:47:37:c0:03:1d:96:56:40:40:ce:5a:2a:3b:3c:
         ac:72:b2:a2:5c:d5:11:38:9a:78:81:cc:2c:28:46:66:85:13:
         e0:66:4f:14:e1:44:56:2d:13:39:8a:7e:6c:a2:1d:a7:f9:d9:
         b3:2d:f8:e0:a1:28:a3:f8:05:2e:0d:bc:57:e2:82:a7:3c:93:
         5d:1b:9e:46:07:48:d8:4d:3f:56:c8:2d:12:dc:c9:72:81:26:
         07:69:e8:12:ab:7a:39:19:6a:d0:fe:96:53:cc:e8:92:11:d9:
         56:22:87:03:cd:fe:f7:21:7d:41:64:fc:1c:ff:42:27:86:ba:
         a2:e9:9e:36:f2:53:06:d9:f1:ea:a8:81:bb:48:a0:4e:d8:8e:
         61:59:66:54:be:9f:f0:44:b6:2e:f9:55:c2:49:c2:b1:fd:da:
         e3:4a:40:54:c4:4a:cf:87:30:a3:27:c9:a2:43:40:cf:7e:1d:
         74:7a:de:10:dc:86:85:64:ae:a7:53:56:25:39:fb:4d:1f:85:
         af:aa:ae:6a:ab:76:a8:53:2b:73:e2:78:19:18:e2:9e:86:a0:
         de:92:8b:ff:4a:0c:5f:6b:74:f6:28:92:1d:d2:22:f0:ec:ac:
         5b:81:66:1d:00:12:9a:2e:a7:8a:95:e2:3d:e3:aa:ff:d1:8b:
         d3:fe:93:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFIRlHLP7GiR2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
MGJkMmFhZjktYzJkNC00MzA5LWJhOWItNDY4YWVjYmYzODE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkNmRzcHLlDIIfN/QzGaIRiuHxeNsdaBmu7T
Z3u4ykHMAF2Li01bOISj81Lhv2FnP+Q3FjmjKcKVCJTsrYNH6NE82+bnj+4+Ipvj
YP5n/IcmBWGtLj+/B9R79jzDKrSodgbbpZGKHoUdweyBr3zlXD9lbObUPncBSenF
nYLYPW3tveP6qkrBGOUCcYogpWTAvZRu3UCoBJiT4f9+bCKjrVTKhvZfGAsz23Uw
H2cjJo3HF6g48bXWRkhP+7vmESqWJlvvlO2ffJhFPoN/N16QRXCmwYpw4lYw+ogO
vfnWuQruALdO7mrVkmpzRo/aO45Wm+P8u2xgd9ZCMBamaryWyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0Miu+GVRpvynjWo2xgQvz65H2JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODFmZDI0NGUtZjIyNi0z
NjdlLWIwMmUtN2YzODBlMTFkZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDb7BBHN8ADHZZWQEDOWio7PKxysqJc1RE4mniBzCwoRmaFE+BmTxTh
RFYtEzmKfmyiHaf52bMt+OChKKP4BS4NvFfigqc8k10bnkYHSNhNP1bILRLcyXKB
Jgdp6BKrejkZatD+llPM6JIR2VYihwPN/vchfUFk/Bz/QieGuqLpnjbyUwbZ8eqo
gbtIoE7YjmFZZlS+n/BEti75VcJJwrH92uNKQFTESs+HMKMnyaJDQM9+HXR63hDc
hoVkrqdTViU5+00fha+qrmqrdqhTK3PieBkY4p6GoN6Si/9KDF9rdPYokh3SIvDs
rFuBZh0AEpoup4qV4j3jqv/Ri9P+k/w=
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:54:31 2025 by rpki-client