Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/cda2924d-a399-37d4-af63-1ae5a1146110.roa
File:                     cda2924d-a399-37d4-af63-1ae5a1146110.roa (raw, json)
Hash identifier:          YDP5FVHD3R0yEyb6YuOE4JM1cVz3JQvIHaWOk35wCkQ=
Subject key identifier:   FD:21:00:49:76:9F:8E:CC:8A:05:D2:90:FF:67:0E:CB:EC:D8:7F:15
Certificate issuer:       /CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507
Certificate serial:       010D0C9F4328584DC0E3009EDBD3D0272A681880
Authority key identifier: 31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/cda2924d-a399-37d4-af63-1ae5a1146110.roa
Signing time:             Thu 07 May 2026 10:14:10 +0000
ROA not before:           Thu 07 May 2026 10:14:10 +0000
ROA not after:            Wed 05 Aug 2026 10:14:10 +0000
asID:                     13447
IP address blocks:        136.227.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c0:e3:00:9e:db:d3:d0:27:2a:68:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507
        Validity
            Not Before: May  7 10:14:10 2026 GMT
            Not After : Aug  5 10:14:10 2026 GMT
        Subject: CN=e0e34b1d-eb34-4c6f-be87-6773df4edb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:36:98:17:49:a4:2f:bb:31:a8:db:9f:20:
                    e6:ec:cf:5e:e0:23:39:c3:bb:87:17:cf:16:3e:b9:
                    5f:7d:a1:2f:d3:59:53:6d:8c:72:06:d4:37:11:c1:
                    d8:8d:9a:07:9b:c3:a1:f1:57:da:e3:d1:a5:98:c0:
                    d1:d4:56:9c:03:83:2a:10:3b:78:63:68:9b:f4:57:
                    cb:47:3a:93:0c:51:15:82:45:6c:31:e7:1d:bf:89:
                    3d:e4:94:28:cf:ff:3e:b9:15:ef:d0:03:63:6d:ac:
                    e6:80:0a:d2:f0:da:cb:54:61:96:c8:0c:0a:85:2d:
                    56:85:3b:b7:be:5e:11:c1:04:6b:4a:d3:6b:59:48:
                    98:e9:e4:fb:6d:df:b6:60:13:dc:df:95:45:3c:62:
                    b2:c4:41:a7:7d:47:7a:34:64:f4:7f:0b:a3:ae:3d:
                    7b:45:1e:ed:72:f3:ae:12:3b:6c:2a:7e:dd:53:94:
                    bd:de:f0:77:6d:c9:c6:0a:60:13:a9:e6:22:9e:57:
                    e7:2f:e0:44:f9:99:ab:56:fe:97:50:c9:c7:39:1f:
                    f4:60:be:4f:cb:55:35:04:dd:95:63:77:a0:a0:3d:
                    8a:2a:83:fb:80:80:35:65:6d:7f:58:3a:cb:d5:49:
                    9c:a4:58:5b:87:a1:4f:1d:46:ff:56:df:aa:73:63:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:21:00:49:76:9F:8E:CC:8A:05:D2:90:FF:67:0E:CB:EC:D8:7F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/cda2924d-a399-37d4-af63-1ae5a1146110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl

            X509v3 Authority Key Identifier:
                keyid:31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.227.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:0a:d4:7d:ad:7c:76:3e:ef:1e:53:2a:b9:be:ec:8c:ab:
         28:ee:91:7c:26:e5:89:c4:28:9d:11:53:42:41:55:88:c9:a5:
         b6:a1:5a:b7:15:d8:1e:79:52:d2:cf:3c:8f:25:96:5b:dd:f4:
         25:56:8b:ef:77:b4:1b:80:1b:43:d2:b5:2e:79:f2:0f:c3:aa:
         e6:c8:57:8f:c8:f4:2a:0b:ff:05:b7:ec:1f:01:90:a4:2c:a1:
         20:19:ed:c6:e4:0b:32:30:c5:e0:31:65:93:d9:92:4a:9b:52:
         ee:05:0b:e4:f0:7e:45:0f:59:a5:30:6d:1c:7a:2f:41:ff:4f:
         15:a2:f0:da:be:df:36:cf:ff:9b:a2:25:dd:24:36:bb:9a:ac:
         3b:5e:71:5f:58:25:91:9f:1d:7e:e0:a5:f3:04:3f:22:0c:f6:
         d0:50:2b:51:ba:60:b5:08:61:af:8f:8c:8c:ed:8d:21:c0:f4:
         f3:83:f7:6b:a9:e1:3d:28:2f:f1:bc:be:c1:57:a2:ce:7c:52:
         31:94:a8:d4:68:8d:3d:b5:23:94:c5:bc:e8:c8:da:01:49:9f:
         30:4f:98:7f:7c:84:00:c8:1f:4b:c5:1c:92:1d:96:47:ae:8f:
         07:bb:10:a5:76:44:36:1c:50:cb:1a:39:87:17:0c:bc:52:99:
         f8:b0:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:33 2026 by rpki-client