Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa
File:                     b5345dc5-a721-346f-a285-62853822bb1b.roa (raw, json)
Hash identifier:          c1X/BajzSJl+L6jV0OMs/P9MSmxdywuQYNKsIX7SOdE=
Subject key identifier:   A9:EF:F6:C7:79:71:94:FA:E9:02:CE:89:40:00:18:B8:45:DF:1F:3D
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584F63F80D1EFBC8857C5EEA3340
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     137922
IP address blocks:        136.228.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:0d:1e:fb:c8:85:7c:5e:ea:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=322e024b-a355-4f8a-be58-51b998d36719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c9:4f:ff:2a:ce:1c:7a:c9:5a:b9:2e:b3:bc:
                    56:8b:52:56:75:a3:ef:00:be:31:ee:19:45:bc:6a:
                    97:4e:a9:c9:1b:92:6f:3a:c9:e7:cc:a7:e3:17:a3:
                    81:7b:13:2f:75:8a:27:8e:bf:18:f7:5c:41:72:91:
                    84:9c:af:d3:0c:0d:40:69:8f:1e:2e:08:64:cc:84:
                    d8:cd:24:81:2e:89:5c:3f:48:e2:7c:31:c4:99:f6:
                    8d:eb:68:cb:04:b6:bb:3d:14:04:c3:42:84:a0:91:
                    11:47:eb:c1:84:a0:17:83:96:98:d4:bb:d7:54:94:
                    69:f0:a4:2f:67:60:68:4b:c4:fb:be:ef:5b:94:bc:
                    b3:b3:96:c4:fe:bc:4c:85:8b:1e:5c:78:b5:cd:27:
                    c3:0f:c6:a3:00:3c:5b:a8:e0:63:3f:9c:eb:87:f4:
                    fa:be:2a:15:e2:23:6b:9d:bb:d6:13:90:1d:88:88:
                    a2:13:09:9a:f7:fd:31:51:e1:2d:65:28:f6:94:8b:
                    80:61:4e:04:63:75:e8:c5:10:61:7e:7b:b4:99:2e:
                    69:c6:82:56:9a:58:15:9d:4a:44:a5:39:db:39:21:
                    a7:6b:72:6d:87:c1:3d:70:67:59:d4:47:52:29:98:
                    93:90:c6:6d:98:e7:12:15:e3:33:30:5a:2e:d3:5e:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EF:F6:C7:79:71:94:FA:E9:02:CE:89:40:00:18:B8:45:DF:1F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/b5345dc5-a721-346f-a285-62853822bb1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f0:e3:54:20:d8:f8:90:eb:75:0c:4f:b0:2b:46:92:0f:97:
         0f:ec:7b:cf:f9:2b:bc:b9:e5:23:8c:a2:d8:32:e7:74:9c:e8:
         d6:b9:27:86:ad:3c:05:af:e9:49:d2:b5:db:5a:fc:49:ea:60:
         20:c3:27:55:61:91:78:54:ba:38:97:43:71:4f:5e:72:ed:f8:
         5e:7d:b3:01:d6:38:93:dd:71:e0:c1:ac:f7:dd:e9:2b:a9:58:
         46:c2:7e:16:8f:99:20:88:86:74:dc:70:df:f5:74:50:9b:6f:
         f0:d7:20:8f:b0:b4:1f:5e:dd:60:1b:d3:d9:25:ed:ef:29:3b:
         60:f2:e7:c5:4b:ef:f6:23:fb:a3:8f:81:ee:9f:2a:30:18:80:
         64:e6:49:54:ef:1b:96:46:6a:80:aa:7a:a4:a2:c8:d2:12:48:
         9b:73:b0:23:a0:ae:17:e3:9c:7a:5d:13:7e:52:72:51:21:05:
         b6:15:4f:4c:57:39:84:9c:13:d1:9f:a5:ae:f0:1a:e2:7e:25:
         8d:0b:04:6b:cb:2d:69:fa:73:d0:53:c8:6d:b0:06:b7:7a:6e:
         da:2a:bd:cc:39:5b:54:d0:07:c8:23:a8:be:03:c5:ae:b4:73:
         c1:f5:f7:24:8b:b4:98:70:81:15:6a:fa:96:c2:4d:3d:d3:e1:
         43:5a:ad:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:43:23 2026 by rpki-client