Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ee5acd40-c8bb-33fd-82e0-00f9c53c268e.roa
File:                     ee5acd40-c8bb-33fd-82e0-00f9c53c268e.roa (raw, json)
Hash identifier:          g/OC9cZQ2gigED+sDdbNUI0OZDWeqSJXyUyRG9Rlb2w=
Subject key identifier:   F8:DD:02:31:BA:C9:63:FF:02:56:B8:C5:A2:FB:BC:F2:C7:A3:8D:2C
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584B2CF6E1A43A945788D2966F80
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ee5acd40-c8bb-33fd-82e0-00f9c53c268e.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     202276
IP address blocks:        136.228.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e1:a4:3a:94:57:88:d2:96:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=235d1ff1-33b1-4730-a86b-7e55497b7fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:c6:6e:1b:a1:3e:58:20:32:4e:17:ac:52:
                    bc:d5:ff:4e:13:61:e9:71:37:52:e3:30:3c:2c:e5:
                    ec:ca:fa:a1:bd:19:cd:40:29:36:05:e6:f8:52:0c:
                    cc:97:7f:ce:e9:cc:4d:a4:69:e8:a3:1a:02:bf:10:
                    70:06:62:6f:c2:27:9a:50:e1:64:95:df:b2:6d:4a:
                    9c:15:c4:90:97:38:a0:d6:af:a7:62:fc:13:ae:4e:
                    ee:f1:19:60:48:f9:d5:3e:ac:4e:7f:94:d4:5e:2b:
                    07:ce:2f:45:6a:ab:ac:df:7a:0f:04:bc:b6:7b:79:
                    56:66:18:93:c9:91:b1:2d:e3:c1:82:e6:e0:38:c1:
                    e4:0f:96:4b:47:90:38:41:6b:ad:c3:4a:89:01:fe:
                    a2:99:07:0e:da:02:0d:c9:c0:6e:24:f4:94:64:b7:
                    a7:00:7a:57:01:06:f7:a5:62:10:2f:d4:ed:1f:97:
                    ee:43:58:9f:0c:f6:e5:8c:ac:50:2f:9d:56:48:b6:
                    a6:28:f1:a9:32:15:36:8c:67:ba:71:53:15:12:2d:
                    48:28:49:15:71:83:99:7a:2d:e9:15:64:72:0c:b6:
                    16:89:7f:cc:ca:32:6b:20:0e:15:26:58:3f:4e:9d:
                    c5:96:78:36:3d:67:a9:2c:e6:c0:43:8d:ae:00:ae:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DD:02:31:BA:C9:63:FF:02:56:B8:C5:A2:FB:BC:F2:C7:A3:8D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ee5acd40-c8bb-33fd-82e0-00f9c53c268e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4f:e0:a8:bc:0b:ab:c2:ae:6e:e5:3b:63:da:b9:ad:af:28:
         6e:9d:3a:91:a4:c6:93:cb:b9:50:b7:80:cf:24:31:2e:a6:e2:
         31:9e:8c:d6:20:60:c0:57:64:2d:a3:65:75:8c:70:1e:d8:0c:
         0d:e9:77:dc:cb:b1:14:f0:44:f4:93:27:cf:e8:6e:d3:32:e8:
         27:0c:f1:ac:90:67:c2:e1:13:7c:d4:7d:57:75:da:b1:50:31:
         6f:83:46:77:22:93:6a:bd:e8:cb:12:ac:44:43:03:a0:77:3e:
         bc:d4:ff:04:0b:ce:de:17:05:f8:b6:f1:d2:a7:bf:c4:09:67:
         b3:b8:95:1e:2c:b0:74:88:1c:f7:56:cb:3d:aa:7f:59:b6:21:
         33:35:58:a2:87:8b:d4:ef:67:b9:08:d4:f7:4f:83:46:f9:ce:
         d2:46:cc:31:03:83:2f:a9:82:23:fb:5a:49:a9:b9:da:a3:27:
         1c:5a:81:43:ef:8e:b4:95:0b:b1:b1:02:61:46:94:08:df:06:
         0a:c3:2a:af:c1:7c:c0:8c:72:b7:36:50:a1:08:90:5c:25:33:
         99:8d:fb:98:6a:aa:fe:16:86:da:e0:88:f7:1a:70:28:52:bf:
         a9:5d:39:b6:08:92:4f:20:77:4c:17:f5:80:bd:67:eb:be:36:
         ce:d0:ce:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uGkOpRXiNKWb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk
MjM1ZDFmZjEtMzNiMS00NzMwLWE4NmItN2U1NTQ5N2I3ZmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EjGbhuhPlggMk4XrFK81f9OE2HpcTdS4zA8
LOXsyvqhvRnNQCk2Beb4UgzMl3/O6cxNpGnooxoCvxBwBmJvwieaUOFkld+ybUqc
FcSQlzig1q+nYvwTrk7u8RlgSPnVPqxOf5TUXisHzi9Faqus33oPBLy2e3lWZhiT
yZGxLePBgubgOMHkD5ZLR5A4QWutw0qJAf6imQcO2gINycBuJPSUZLenAHpXAQb3
pWIQL9TtH5fuQ1ifDPbljKxQL51WSLamKPGpMhU2jGe6cVMVEi1IKEkVcYOZei3p
FWRyDLYWiX/MyjJrIA4VJlg/Tp3Flng2PWepLObAQ42uAK40nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjdAjG6yWP/Ala4xaL7vPLHo40sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZWU1YWNkNDAtYzhiYi0z
M2ZkLTgyZTAtMDBmOWM1M2MyNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFP4Ki8C6vCrm7lO2Paua2vKG6dOpGkxpPLuVC3gM8kMS6m4jGejNYg
YMBXZC2jZXWMcB7YDA3pd9zLsRTwRPSTJ8/obtMy6CcM8ayQZ8LhE3zUfVd12rFQ
MW+DRncik2q96MsSrERDA6B3PrzU/wQLzt4XBfi28dKnv8QJZ7O4lR4ssHSIHPdW
yz2qf1m2ITM1WKKHi9TvZ7kI1PdPg0b5ztJGzDEDgy+pgiP7WkmpudqjJxxagUPv
jrSVC7GxAmFGlAjfBgrDKq/BfMCMcrc2UKEIkFwlM5mN+5hqqv4WhtrgiPcacChS
v6ldObYIkk8gd0wX9YC9Z+u+Ns7QzrE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:26 2025 by rpki-client