Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/8a544afe-6f47-393c-b1f2-b5d309fff22d.roa
File:                     8a544afe-6f47-393c-b1f2-b5d309fff22d.roa (raw, json)
Hash identifier:          xbrsG3QoWqazSA2UKowTCb672D1lkRiXtlurm06YNvo=
Subject key identifier:   D1:E5:75:FD:3E:63:95:E5:04:E2:DE:8E:FF:33:A7:D8:5A:E9:D8:F7
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584B84E76D368AF16381FFC07278
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/8a544afe-6f47-393c-b1f2-b5d309fff22d.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        136.184.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:6d:36:8a:f1:63:81:ff:c0:72:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=17ecea46-8631-4b2c-9682-798d6c1fc5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:82:21:ec:35:b4:fc:04:21:91:45:1c:d6:
                    d7:7f:5a:43:c0:67:bf:58:88:de:39:0b:fb:3c:9f:
                    da:2e:30:4a:7c:1a:73:1e:69:72:8a:d2:2e:6e:34:
                    de:2c:b0:ae:5c:5b:af:5e:40:1d:2f:ba:da:46:81:
                    95:77:57:b9:55:43:4f:54:db:62:ff:d1:09:f0:d8:
                    a6:41:47:fc:14:85:d1:9f:20:ab:78:81:49:0d:29:
                    d4:bd:54:48:b8:34:7e:f0:3e:99:73:a4:56:e2:15:
                    c2:7c:03:da:14:48:96:93:ef:77:c0:cd:31:85:04:
                    07:6c:91:01:60:17:e6:cc:6a:87:d3:df:de:21:13:
                    68:be:52:c8:67:c5:f2:46:52:b1:fa:79:95:da:94:
                    94:78:66:82:c8:40:a1:23:e7:e5:fc:53:df:f3:c6:
                    7d:55:a6:e3:73:e1:26:f3:17:11:70:46:40:00:04:
                    fb:31:6e:f1:9b:bf:3e:61:a4:86:89:a7:27:1c:62:
                    a7:82:27:8b:53:da:09:bf:c4:27:14:a1:90:00:39:
                    2d:89:4a:b4:3d:06:94:19:60:24:7d:52:37:f3:4f:
                    46:22:63:3f:9a:cb:0d:26:c4:5e:7a:cc:70:29:85:
                    92:0f:31:3a:c2:9a:7b:cc:95:25:c3:1a:49:42:97:
                    26:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E5:75:FD:3E:63:95:E5:04:E2:DE:8E:FF:33:A7:D8:5A:E9:D8:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/8a544afe-6f47-393c-b1f2-b5d309fff22d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:88:07:81:49:d9:02:d9:e0:7a:f3:82:79:92:61:48:82:55:
         ff:e7:db:5d:fd:a1:7b:11:73:6a:d1:8d:07:9e:eb:c3:ff:8e:
         57:ba:dc:80:0a:7c:4c:0d:3e:ab:e0:60:25:20:de:1e:bd:64:
         f2:29:21:f2:a0:0e:26:6a:af:a1:fe:3d:8a:e6:c0:44:63:80:
         46:24:b4:7e:62:71:3b:99:8e:e1:6a:c5:a1:c4:a4:79:fe:eb:
         13:8b:56:18:48:ed:0a:51:1c:34:ac:0c:bb:f4:07:89:74:3c:
         3b:53:18:19:5c:4e:d5:a0:9f:32:32:a6:9f:94:0c:c3:db:ea:
         38:a6:57:60:ff:4b:6a:db:2d:71:92:f9:f1:88:51:f6:f2:2a:
         37:95:c3:67:a0:5d:6e:54:65:28:9b:ca:92:8e:44:24:62:84:
         0c:13:1f:41:af:ef:c0:86:0c:e5:1c:61:58:ca:a1:4e:51:95:
         f8:c1:a4:00:ee:60:41:74:ca:27:2d:c2:5b:35:15:3b:d0:7b:
         21:bc:36:75:e8:84:8e:62:4e:3e:bb:6e:7c:11:31:48:3d:e7:
         b9:42:02:ee:d3:66:da:ae:b8:dc:b3:ea:ed:4f:99:9b:5c:7b:
         38:d5:4f:91:16:9b:62:d6:8a:09:23:f9:d6:fb:cc:81:4f:fc:
         58:e8:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:25 2025 by rpki-client