Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28e81f54-5d7c-388d-ac20-88cc5971c632.roa
File:                     28e81f54-5d7c-388d-ac20-88cc5971c632.roa (raw, json)
Hash identifier:          gQ7rmGrhmH0r4Iuf9/05JFB17EWfuMhOGOw+eP6P5oE=
Subject key identifier:   BC:3C:95:73:EC:E0:84:83:95:04:A5:76:99:4D:F0:29:BC:0A:6B:2C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B9473726318730FD1766380
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28e81f54-5d7c-388d-ac20-88cc5971c632.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        136.226.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:73:72:63:18:73:0f:d1:76:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=6c37a11e-dba7-4ae7-82de-70eee37a0cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:40:61:a7:3f:ad:bf:70:b7:ae:1b:4f:20:
                    b0:3a:98:b7:4f:3f:fa:dd:52:ec:9c:83:fb:94:9f:
                    75:d9:36:7f:f8:bf:16:c7:67:71:ad:8a:9b:04:da:
                    3c:73:19:61:50:e8:6c:9c:b7:3f:62:96:5b:54:58:
                    20:d0:10:61:52:f7:da:70:36:64:88:28:7e:86:89:
                    e2:e5:e5:cb:2a:40:e3:82:28:90:ff:73:ef:43:d2:
                    32:b2:27:17:7b:3e:43:1e:0d:c5:a7:fd:63:9a:dc:
                    12:5b:e7:cd:8d:a7:cd:6d:4b:4d:4c:e7:eb:6a:6b:
                    6d:e4:dd:4c:fc:93:f3:a0:b4:30:16:53:20:74:39:
                    4a:19:53:bd:04:9e:58:d8:d6:e9:90:44:10:d2:fb:
                    ea:ff:ee:e6:88:a8:08:50:41:9f:c7:0d:9a:12:22:
                    af:87:34:d6:47:27:28:37:8b:b0:0e:f0:a6:53:6f:
                    12:40:a8:67:e1:f6:7a:b4:f6:5c:c0:a0:02:86:56:
                    65:5c:33:5e:16:36:00:90:88:33:09:c6:77:e3:71:
                    02:56:ff:52:e4:c4:5e:9a:1e:9a:e2:9b:c6:28:fe:
                    18:a9:e5:ec:d3:61:29:85:b9:28:9f:79:27:86:0f:
                    e6:40:79:e2:4f:b6:8b:47:15:2a:03:cf:36:d6:f7:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3C:95:73:EC:E0:84:83:95:04:A5:76:99:4D:F0:29:BC:0A:6B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28e81f54-5d7c-388d-ac20-88cc5971c632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:5e:ec:58:81:30:81:ef:4f:04:11:53:34:c0:69:8d:41:
         23:a5:07:c6:ef:0e:ed:cf:dd:50:df:cd:56:4b:46:b6:a8:27:
         cb:1f:3c:1c:ab:fb:75:39:0e:61:f0:e4:83:87:95:57:9a:38:
         37:f2:97:4b:67:a5:7c:3a:0b:be:e4:0a:af:34:a9:45:a6:95:
         fd:b0:e0:57:f1:9b:ed:3d:a6:f4:e0:bf:46:2d:96:6c:a7:9d:
         87:6a:8c:6d:50:da:fd:63:c1:98:f4:70:12:ac:4c:95:6c:5b:
         8e:bf:cd:9a:a8:e8:11:f4:84:23:ee:5d:8d:c0:c4:e4:de:dd:
         bb:4d:78:ac:2e:f9:0f:66:fc:86:50:0e:0a:40:0e:28:e0:1b:
         83:8a:88:83:c6:c9:db:03:39:1d:a6:4b:05:c5:f0:40:cf:f2:
         a8:14:59:72:87:d6:31:b2:cf:cf:4f:5c:0a:6f:22:e9:6b:8f:
         5e:c4:fd:08:05:11:36:0c:5d:b6:7b:9e:0c:bc:6d:a8:5c:87:
         8f:62:6f:59:04:56:c1:b3:fa:1e:e0:e6:8f:ad:95:a4:8a:75:
         79:ba:25:fe:39:a7:8a:f2:3f:cb:17:6d:ad:a4:4c:26:61:13:
         5b:c7:9c:8b:7b:31:c4:d9:fa:df:11:c5:27:17:ae:c8:68:97:
         46:60:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:12 2026 by rpki-client