Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c97de213-4f07-3298-9cee-3a216fcfd2d4.roa
File:                     c97de213-4f07-3298-9cee-3a216fcfd2d4.roa (raw, json)
Hash identifier:          p6f5QqH/TB/YF6s8ZhQvQoWi2aJOQMf5XHYycAA/e9o=
Subject key identifier:   14:4F:42:1E:73:FD:9C:1C:21:A8:D8:AF:C6:8C:E7:A2:F8:DF:07:92
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B9471884FEAE8265628E900
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c97de213-4f07-3298-9cee-3a216fcfd2d4.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        136.226.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:71:88:4f:ea:e8:26:56:28:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=0891aa51-a65a-4699-8641-06ea57fc3f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:72:5f:ea:77:d4:4a:23:9b:c0:26:42:55:
                    9d:8b:c2:5c:0c:66:1d:10:9d:5f:85:ea:74:2c:c2:
                    74:91:ea:2d:7c:f6:01:51:69:b0:4b:12:ba:55:62:
                    8c:96:6c:7d:c5:96:b7:7e:36:79:dc:27:f3:a7:03:
                    79:7e:c8:66:79:e6:11:8f:69:1e:b1:7f:e2:3b:e1:
                    54:d2:4b:83:08:0e:84:bf:90:e9:ab:10:47:1e:81:
                    37:fd:05:3b:ed:0b:b2:fd:72:35:f7:5f:d7:22:8b:
                    62:f0:1f:c0:91:66:e9:45:5f:c7:20:24:26:df:9c:
                    90:ff:40:64:5e:e7:7f:60:95:16:4b:62:e5:ef:75:
                    3a:78:e1:01:aa:9a:4b:86:12:c9:2e:e3:dd:81:bb:
                    e9:19:a8:7d:58:9b:9a:13:98:eb:32:f2:d5:3a:b0:
                    ae:d3:59:ca:2a:51:8a:97:f8:1e:1f:4e:5e:1b:bf:
                    d1:8f:6c:3b:39:c1:f1:40:d7:12:08:32:4a:ae:2e:
                    1b:02:1d:a6:5f:fa:b2:f6:86:21:e9:b9:7e:17:17:
                    ae:a4:94:02:5a:40:ef:8f:20:9d:97:57:e5:80:aa:
                    6d:37:9c:86:42:bc:a2:22:31:a4:f1:41:1d:a8:d5:
                    31:40:16:25:af:e1:07:c8:0b:8b:99:7b:5b:da:9f:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4F:42:1E:73:FD:9C:1C:21:A8:D8:AF:C6:8C:E7:A2:F8:DF:07:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c97de213-4f07-3298-9cee-3a216fcfd2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:11:6e:88:ef:30:22:d9:3a:fb:07:7a:01:e2:4f:8f:13:bd:
         d4:21:e0:56:21:ae:2f:a8:99:71:a0:83:f8:7f:e1:b7:0e:9b:
         8c:0a:47:36:f4:c3:4e:ea:46:e3:0d:21:74:3b:ee:12:2e:67:
         35:2f:c3:24:74:64:b5:61:02:3b:01:69:aa:73:e1:f9:7f:ad:
         c9:e0:f3:c9:2a:35:4f:46:de:c6:3d:cb:89:ad:96:5d:18:82:
         32:28:00:68:c9:97:5a:ba:3f:77:c3:80:0f:6e:ba:2a:a5:54:
         41:b4:38:6b:67:b6:ff:9e:78:90:36:33:ef:c1:90:4c:b2:b4:
         54:31:0b:0e:5a:05:9f:64:f5:a5:90:58:03:cc:fc:4d:5d:62:
         dc:12:07:14:88:11:56:d2:80:cb:38:99:ab:72:1f:65:18:d7:
         b6:64:1c:5b:e0:b8:c3:bb:cf:5c:7e:97:2a:da:b6:ad:a0:de:
         05:4f:b0:85:01:be:a4:dd:70:66:b5:a8:88:e1:0a:d4:f7:51:
         48:c5:ea:20:a6:fe:bb:7a:e6:02:65:a7:88:e4:68:30:7e:9c:
         47:8f:79:47:01:70:7c:2d:5a:cf:a7:84:f2:10:17:08:0b:cf:
         dc:6d:3e:1f:f6:4d:f9:a3:f2:05:5e:1f:6b:25:a0:34:b1:2f:
         25:48:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:36:11 2026 by rpki-client