Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/e9b61d17-43f4-352f-beaa-6c2b99ea9ca7.roa
File:                     e9b61d17-43f4-352f-beaa-6c2b99ea9ca7.roa (raw, json)
Hash identifier:          KBwcs1DGRhxVj8uqE44NMc21r5y+NVxXR7y85QZ8dRY=
Subject key identifier:   62:D1:DE:8C:F0:9F:7C:B4:56:AB:82:FF:0D:09:D9:48:05:B0:09:E1
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584DB7702FE858701140E35BE0C0
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/e9b61d17-43f4-352f-beaa-6c2b99ea9ca7.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        136.184.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:2f:e8:58:70:11:40:e3:5b:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=97094d97-dd86-46e7-b597-804c9347243d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9e:dd:04:a2:4b:66:0c:70:98:dd:df:54:94:
                    bf:6e:91:39:7b:d6:b4:26:21:e8:5d:1a:f4:23:fe:
                    4b:fb:79:d2:dd:fe:49:bc:00:fc:0a:dc:5d:76:ba:
                    b3:41:52:ac:51:45:78:48:de:8e:06:49:f8:d1:93:
                    ae:be:10:bb:e8:fb:0d:b0:82:d4:74:e0:83:38:55:
                    f5:b4:7a:6a:8f:9b:e7:85:eb:ba:53:76:60:3a:f3:
                    da:1c:c1:c4:ce:8d:4e:fb:29:52:76:c9:8c:ed:04:
                    64:0b:92:45:38:07:b5:7d:41:54:4f:5b:69:0b:b8:
                    13:59:79:bc:6d:3e:03:75:a3:ac:e2:37:f7:ef:f6:
                    cd:27:86:73:69:2a:4d:11:02:c2:32:b4:a4:0a:80:
                    ad:44:1f:35:48:0d:dc:55:b3:a2:a5:d7:e3:24:e3:
                    b8:0d:cc:de:29:12:c4:90:05:71:c7:f4:11:68:9e:
                    f2:1a:cf:8a:c6:cb:9b:a8:f2:2e:36:b2:b6:80:f0:
                    e6:59:1a:2f:10:47:fb:95:b0:b7:e4:44:1d:9a:b6:
                    32:a3:f8:a4:4c:f0:4b:3e:d0:e6:4e:31:d1:67:52:
                    e4:6f:bc:ed:72:3f:08:f0:9a:e5:b5:9b:06:94:5e:
                    31:66:43:72:ef:98:8a:d0:ac:9f:4b:f9:a1:3c:fb:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D1:DE:8C:F0:9F:7C:B4:56:AB:82:FF:0D:09:D9:48:05:B0:09:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/e9b61d17-43f4-352f-beaa-6c2b99ea9ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:94:ac:c8:8f:3d:60:be:7d:8d:e0:4b:85:f1:fd:01:c3:89:
         33:e8:f4:66:94:11:39:b5:86:6a:47:3b:05:a4:8e:19:bd:80:
         d5:b6:72:46:c2:fd:c7:2b:24:7d:bd:4d:05:a6:37:4d:b2:ea:
         33:5d:c9:ca:b8:7e:70:6b:7e:86:cd:fb:86:45:c5:bb:fb:e3:
         8f:78:c3:a7:eb:a1:5f:f0:55:ee:e8:61:bf:02:58:2e:b3:97:
         41:7e:2c:f4:8f:e7:df:bd:5a:08:2f:0e:4f:96:00:44:cb:90:
         78:06:ca:fc:4f:ca:84:34:ee:9d:76:0a:40:af:aa:7b:2c:b2:
         48:58:23:c7:ab:03:b8:d4:80:67:04:88:50:af:f1:be:ca:87:
         38:da:15:2b:2b:22:a8:20:a5:9b:16:89:bb:7d:47:2b:d9:69:
         89:cf:a9:f6:eb:77:59:88:ce:63:24:62:a4:01:b9:7e:23:33:
         43:3e:10:b3:df:a4:90:bb:9c:c7:d5:c5:01:c3:a4:d7:07:bc:
         4a:80:8d:0a:f9:cc:18:fd:20:52:54:f9:f0:60:f9:6a:a2:63:
         c2:ca:1a:dd:21:4a:6f:f0:5d:be:24:e1:5b:53:e1:4c:85:aa:
         e6:d1:e1:b4:fc:fe:65:25:dc:a2:2c:a5:f7:ee:5d:b5:f7:14:
         84:0d:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:22 2026 by rpki-client