Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d7292f6a-df87-3184-8c67-566c24a72679.roa
File:                     d7292f6a-df87-3184-8c67-566c24a72679.roa (raw, json)
Hash identifier:          ujberiydOqjyNW0MCWyorBpjjcR+YnDvPw1NdL53Mww=
Subject key identifier:   BE:59:46:57:7C:B6:69:CF:58:F5:2B:A6:FA:67:24:33:B7:C1:DC:6D
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584B1F01703152855BA1DB48E540
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d7292f6a-df87-3184-8c67-566c24a72679.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     202276
IP address blocks:        136.228.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:70:31:52:85:5b:a1:db:48:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=b9d6bd1a-c34e-4c04-8727-0dd1162bc179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:a9:8c:17:dd:18:8b:29:21:a1:fa:8e:b7:
                    63:22:77:5f:1e:1c:4f:7f:c7:86:3a:19:3b:d7:ea:
                    8a:97:d6:e4:b7:17:26:32:e7:7e:c7:69:13:d9:fb:
                    ab:d9:0d:00:8d:32:d3:be:b7:cd:5a:10:ce:30:0c:
                    15:d5:50:20:dc:cb:7a:17:65:fd:e3:43:2e:7e:ff:
                    16:ba:48:8a:12:86:51:ce:50:e8:76:e6:a1:e6:df:
                    22:7d:c1:77:71:26:a2:78:e1:50:30:e0:81:92:4d:
                    c0:ec:1a:77:3b:89:3f:6d:9e:68:a0:1e:d9:c2:6e:
                    81:96:7c:6a:a1:92:0d:7e:63:38:f3:64:86:83:e6:
                    3c:20:84:5a:38:b6:23:d7:c1:be:36:fd:1f:58:44:
                    6b:13:f2:d3:4a:bb:31:a4:ec:0d:83:39:1c:16:ed:
                    f6:e6:4e:10:c2:d5:12:e0:23:65:97:70:5d:25:df:
                    05:8b:da:e8:60:5f:1a:fc:84:5b:5a:ac:8e:e0:73:
                    70:c8:09:87:92:70:a7:6e:8b:c8:54:88:c6:79:b7:
                    ec:d7:f8:b9:0c:86:67:0b:0b:22:59:0a:1b:1d:9a:
                    9c:fc:94:cc:ec:40:ce:f3:3e:c3:d3:2d:91:27:5c:
                    9a:e1:5e:62:cd:0e:57:c1:f5:b1:7f:95:53:1e:f1:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:59:46:57:7C:B6:69:CF:58:F5:2B:A6:FA:67:24:33:B7:C1:DC:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d7292f6a-df87-3184-8c67-566c24a72679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:91:f7:de:d5:21:46:9d:87:f3:e3:96:d8:9c:9c:e0:04:ff:
         76:a4:3d:b7:d1:5e:e1:d0:61:c0:2f:c4:e2:af:b4:e8:d4:56:
         fd:b6:ac:65:49:1b:aa:c9:0d:f7:4f:6d:ac:7b:7a:b7:ef:27:
         27:17:cd:0b:2c:98:98:36:34:a7:ad:32:10:cf:99:48:71:76:
         cf:97:88:61:8c:41:f3:9c:69:af:30:36:2a:ff:1d:d3:58:a6:
         9f:48:b9:55:8e:f5:f1:03:ea:41:f2:dd:2c:dc:fb:f9:60:37:
         8b:69:ca:f4:0c:b1:aa:87:76:f2:1e:1f:6f:18:f8:6e:7e:b2:
         ee:c1:2b:51:b9:10:21:29:39:5b:d4:90:b7:fa:eb:dd:a7:64:
         fc:4a:22:20:77:4f:da:41:22:e1:16:d8:b6:89:bb:f5:0f:02:
         14:8d:99:3f:0e:57:6a:d9:08:9f:0a:a1:e9:ba:35:80:58:6b:
         ee:69:07:e4:27:8b:2b:e4:43:eb:c9:12:b2:75:ac:1d:9b:26:
         35:a8:23:8a:47:5b:c5:8a:29:0d:74:f0:fa:b7:76:e4:b9:a5:
         1d:fd:0c:35:31:e5:e2:67:2d:4c:e5:9d:ef:d7:5e:98:cf:44:
         68:88:18:bb:78:b9:67:b9:4b:fd:43:1e:57:13:00:80:a0:ec:
         41:c7:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:35:31 2025 by rpki-client