Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/81fd244e-f226-367e-b02e-7f380e11df91.roa
File:                     81fd244e-f226-367e-b02e-7f380e11df91.roa (raw, json)
Hash identifier:          PkEufX1bkj5ESRfsgTdoWR7LpLpviapFREP/j+rOMxA=
Subject key identifier:   F1:09:28:5D:91:6B:A6:DD:9E:46:B4:F8:7A:45:0D:1F:7C:F5:B1:17
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584DC29AE6ED814B5B67553FBD00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/81fd244e-f226-367e-b02e-7f380e11df91.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     202276
IP address blocks:        136.228.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:e6:ed:81:4b:5b:67:55:3f:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=bc4fa7f6-b0b1-4381-a9e2-bdb5f1162571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:c1:60:e2:07:fd:9d:ac:ea:5f:dc:45:ea:
                    d5:76:33:3a:22:f4:41:a3:28:48:4e:07:2b:c4:a7:
                    42:d8:82:db:de:d7:6a:c8:88:a5:23:8b:18:80:1c:
                    d5:be:fe:dd:e2:65:72:6a:7c:97:19:cc:03:73:bb:
                    99:f6:9b:04:a2:64:9a:31:6e:df:28:0b:96:46:38:
                    ec:37:6a:31:9c:ba:df:1d:bf:7d:bd:1a:6a:9f:74:
                    04:1a:34:b9:e9:c3:11:dd:73:1c:1e:6d:46:35:92:
                    e2:64:74:be:bb:dc:5f:ed:39:1d:f0:24:1c:27:88:
                    87:9b:fb:6f:88:04:cb:b7:e9:1c:40:d2:82:00:b9:
                    4f:bb:e7:75:62:c2:a4:81:81:7d:9f:42:7b:5f:81:
                    a2:bc:c9:08:6b:32:e9:0c:23:2e:42:89:45:40:ef:
                    31:e1:83:9c:0f:26:a2:56:4d:dc:45:36:72:82:c1:
                    eb:aa:37:b0:ce:88:b0:b7:0c:f4:6a:fa:fe:61:ab:
                    ae:18:e9:2d:b4:a1:fc:46:c9:68:77:3e:53:ba:0c:
                    4f:f4:e5:0e:d2:3b:dd:45:e9:24:57:a7:1e:64:ea:
                    3b:d3:d3:52:b8:7b:cb:83:95:df:46:5f:d7:66:14:
                    f1:89:61:88:ef:54:0f:42:7f:20:b7:44:9b:cf:69:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:09:28:5D:91:6B:A6:DD:9E:46:B4:F8:7A:45:0D:1F:7C:F5:B1:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/81fd244e-f226-367e-b02e-7f380e11df91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f9:ab:b9:36:a6:14:e6:ab:58:aa:c8:f3:a1:9b:8a:8b:9e:
         a6:2a:0d:9d:7a:6a:64:18:14:55:8c:a3:b4:a9:49:48:cb:73:
         6d:e3:df:d8:20:49:f8:64:f9:cd:4a:cc:b8:12:5f:d1:53:cc:
         6e:b9:d6:6d:c2:1f:5e:00:b0:c5:13:d6:87:8a:6e:f8:8d:c9:
         7d:b0:5e:b6:d8:28:77:e5:c4:48:3a:67:44:d4:b3:f2:56:a1:
         30:af:60:55:0e:88:63:c2:92:9d:f3:d5:af:f8:ee:49:4c:8d:
         5d:34:3d:ec:0c:0a:32:57:c6:ee:66:00:36:30:4f:4e:14:2f:
         fa:85:8d:6d:40:58:3e:21:42:e9:62:28:47:73:6b:9e:db:09:
         04:66:1d:2a:9e:56:4a:d2:6d:bb:7a:15:18:0d:7c:fd:d5:d0:
         ff:fd:2e:fa:04:a7:29:26:6f:0c:a1:f9:4d:4d:c2:62:3e:db:
         e5:5a:f5:42:52:b2:bb:55:6c:c9:a6:b7:c6:49:b7:b3:98:c3:
         f7:bb:58:e7:46:f1:7e:96:01:30:be:e3:fb:d1:47:29:d8:44:
         e7:bf:4c:0c:2f:60:8d:6a:a6:11:63:2a:bd:f0:e1:d0:4b:1e:
         1c:c6:bb:23:2a:5b:db:c4:4e:f0:e3:23:e1:7d:83:e3:00:ed:
         ef:e8:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:01:37 2026 by rpki-client