Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ac3af203-b78d-389d-bc39-34ee10544caf.roa
File:                     ac3af203-b78d-389d-bc39-34ee10544caf.roa (raw, json)
Hash identifier:          XOzxpila2YAwNd2RgXiaIUPZvq/ttcg9MJmquoTbMno=
Subject key identifier:   C8:83:1B:A4:56:43:54:A9:0A:C2:49:F7:CC:7F:7F:22:7D:42:F1:CD
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584B1F0171630C7CD6F1EA260700
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ac3af203-b78d-389d-bc39-34ee10544caf.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     137922
IP address blocks:        136.228.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:71:63:0c:7c:d6:f1:ea:26:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=cd7d9668-099d-4869-a2a9-9b18c20fc294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:fc:8d:a3:aa:82:e1:95:a5:c5:fe:48:2d:
                    4f:6d:79:1f:b3:0e:86:85:0f:e3:20:0c:17:63:12:
                    e6:89:49:b1:ae:ba:fa:fb:3c:77:1b:76:a2:a0:06:
                    15:ae:2d:c9:da:46:fe:fe:3f:a7:8f:07:c7:68:71:
                    b9:90:3b:df:89:49:62:bf:3a:50:1d:40:af:20:0e:
                    08:4f:26:ee:2f:ce:5e:4e:6d:31:49:25:75:7a:c1:
                    bf:0b:36:a0:b9:a0:64:2d:54:24:7e:f9:96:56:fe:
                    c4:7e:05:e0:54:dd:2e:ad:b3:53:db:bf:aa:f5:c0:
                    47:4c:79:9c:de:41:17:7d:08:a5:87:53:54:43:d5:
                    16:e2:63:34:92:d3:07:01:e8:58:39:e4:2d:d3:0e:
                    05:a8:72:16:f9:66:92:67:fb:b0:c6:45:3c:55:87:
                    79:8f:03:ad:ab:d0:d5:42:5c:06:a9:9c:da:6c:79:
                    b0:b8:78:d6:9c:66:f5:47:4a:db:7d:05:a7:dd:13:
                    51:1f:ef:f2:31:e0:99:dc:13:28:5c:ab:70:a6:ec:
                    b9:6b:87:b4:09:e3:d5:96:59:dc:d1:49:53:22:71:
                    6f:8e:9f:cf:f2:84:5c:49:a3:fa:d1:91:1f:00:dc:
                    b1:61:4b:92:bd:72:8b:f8:f4:f6:c2:18:e1:de:a3:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:83:1B:A4:56:43:54:A9:0A:C2:49:F7:CC:7F:7F:22:7D:42:F1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ac3af203-b78d-389d-bc39-34ee10544caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9e:50:18:4a:72:2a:05:ee:b0:20:1f:d7:f9:7c:2c:fa:a3:
         46:4a:29:06:08:bd:e5:a3:ae:2a:1b:cb:f7:3d:1e:0b:72:10:
         15:4c:cc:bd:4a:ba:f1:34:ae:37:ea:d8:0f:98:11:98:79:60:
         fe:b7:cf:be:a5:22:4d:ca:dc:19:69:df:00:98:db:a8:67:00:
         47:f6:f0:e2:d3:32:ca:59:28:d4:36:f8:4c:73:0b:62:81:c4:
         4c:90:80:f3:b9:11:4e:ff:3e:ea:4a:31:3d:97:11:40:4d:df:
         e7:9b:39:51:3e:70:4d:86:c6:f2:36:f2:4f:66:50:e1:57:47:
         9d:4a:b4:84:88:72:c2:f9:57:f1:3e:42:a9:82:d6:76:66:f0:
         ea:20:33:60:47:7e:d7:f9:46:46:11:76:20:96:73:c3:13:04:
         0e:20:64:ed:cf:05:2f:05:39:76:1c:77:e9:60:45:d4:cf:21:
         e6:67:4e:29:c5:88:df:0c:47:44:14:dc:b7:4f:3a:28:ea:d7:
         7a:5d:7d:e7:0a:d9:00:41:94:b3:d3:d6:53:d0:8a:45:c1:02:
         20:2b:2d:f9:3e:fb:cb:b4:34:39:e4:5d:64:11:d2:9e:74:fb:
         38:31:ce:f0:85:48:07:ea:e7:04:7f:0f:91:0c:8f:99:c1:3b:
         a2:19:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:24 2025 by rpki-client