Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ad1b166c-ed57-38b7-b5f0-df141468d996.roa
File:                     ad1b166c-ed57-38b7-b5f0-df141468d996.roa (raw, json)
Hash identifier:          EYQj3pDpT52q+ZBZjZMp+oAgwuZg9Rkms6NlVB+4I+0=
Subject key identifier:   C7:C0:0E:EE:DD:A1:BC:98:56:44:E3:4C:52:CD:B5:59:7D:C4:3F:A5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B947691EF454CBE0059F660
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ad1b166c-ed57-38b7-b5f0-df141468d996.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     62044
IP address blocks:        136.226.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:76:91:ef:45:4c:be:00:59:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=28cfe388-7f23-4ca1-bd30-5144b86e00a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4d:d9:a3:bd:a3:f2:ee:ff:ad:94:12:2a:8f:
                    2d:0d:22:c1:75:4e:a7:00:17:ec:79:5d:a3:e6:39:
                    10:ef:59:eb:13:3e:c5:79:c7:ce:81:cd:16:68:d3:
                    e4:38:cb:4f:05:3d:07:f8:61:31:42:7e:64:d2:55:
                    97:d2:bc:cc:b4:86:4b:1d:4e:f5:ee:d7:c7:96:9a:
                    40:8c:1e:aa:01:1a:bd:73:90:39:8e:87:36:7a:d0:
                    cf:36:c2:46:bf:47:bc:f9:cd:06:ef:81:2d:01:b7:
                    26:62:48:d6:1c:cc:6f:18:cc:d5:33:4a:fe:c5:fe:
                    13:1d:33:1c:93:87:ec:0f:7d:34:17:3a:e5:d2:81:
                    47:82:8d:40:de:64:fa:5f:74:e4:a3:33:79:a3:a0:
                    2d:ae:31:40:8c:8b:cf:52:ac:fa:6a:33:a0:1d:a6:
                    6f:88:af:45:d4:5e:99:59:26:e7:98:23:4d:06:e7:
                    0c:98:56:ec:ec:f0:b6:5f:78:5f:12:a6:65:25:cb:
                    40:53:ca:94:3a:04:f4:df:f3:0a:6c:2a:e1:f6:28:
                    c9:ad:2a:1c:23:4f:d5:5b:46:6e:be:a0:f6:0f:45:
                    a6:41:bd:ba:54:60:c0:2f:87:a7:b1:c2:f9:b9:3b:
                    70:36:02:4c:fc:64:d2:66:8a:8d:11:c0:41:5f:7f:
                    2f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C0:0E:EE:DD:A1:BC:98:56:44:E3:4C:52:CD:B5:59:7D:C4:3F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ad1b166c-ed57-38b7-b5f0-df141468d996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b9:ad:a9:3e:53:f2:a9:7c:59:68:e9:ae:73:3e:32:4a:ed:
         26:c5:14:f4:28:65:de:41:56:1c:43:dd:04:46:24:57:52:f9:
         34:72:55:90:4a:2f:1e:4c:0c:83:3f:81:5d:48:28:d2:37:0e:
         fa:e1:cd:00:50:7c:65:8c:c1:c9:df:7f:21:8c:1d:7a:31:35:
         5a:84:e8:9c:91:c1:4b:af:3a:22:0e:2a:8a:de:cd:55:74:11:
         14:e0:83:5a:f1:dc:19:63:32:94:b8:02:40:9a:31:61:03:dd:
         e6:15:92:ae:f8:b3:a9:e5:aa:0e:ad:a1:e2:6d:c1:69:23:85:
         de:e1:91:20:50:af:89:4d:79:24:59:f2:d0:e3:d7:00:ca:1c:
         65:0a:80:d2:95:69:a4:63:73:d3:97:c6:9b:2c:ba:78:c0:6c:
         cf:17:27:f9:96:85:d9:35:d6:53:7c:93:cd:64:57:6b:3a:4c:
         2c:a8:56:41:0e:cc:4a:30:86:05:99:77:58:9f:22:40:3f:57:
         eb:65:8d:9f:47:9f:2f:f0:40:5d:0d:a5:c0:5a:6c:1d:64:2f:
         34:cd:07:ed:af:aa:f4:3e:84:10:06:97:0c:fa:7b:83:06:a6:
         a9:7a:69:71:d9:ee:e9:c3:69:5d:da:98:41:90:9e:b2:dd:3a:
         70:fd:89:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:51 2026 by rpki-client