Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa
File:                     3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa (raw, json)
Hash identifier:          MKCiokLdcmO3eOTksORnPVxo4arf7U5tLO+NaSF3SCg=
Subject key identifier:   70:10:73:90:C0:99:89:0B:A5:5E:F5:52:63:35:EF:75:31:3A:94:C1
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584D0EA7B43DDFEA9441AFDFFC40
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     400025
IP address blocks:        136.228.46.0/24 maxlen: 24
                          136.228.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:b4:3d:df:ea:94:41:af:df:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=b7de65fa-ad43-42a6-8b41-ebe75496f28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5d:99:2e:aa:fb:b7:f0:51:5b:ab:34:f2:4d:
                    5a:72:7a:dc:c9:5b:33:22:52:01:63:3d:0a:95:8e:
                    cd:a1:69:05:2a:f5:62:a2:aa:cd:1b:bc:f1:1a:77:
                    a3:53:ea:16:92:15:dd:06:c9:6e:ce:5a:b2:b2:f8:
                    f3:ba:74:ff:2e:20:83:ae:07:18:1b:df:2e:2d:36:
                    77:ba:7a:f0:71:fb:40:a6:42:32:13:a7:09:c9:a1:
                    76:cc:18:67:19:10:79:d0:65:40:a9:49:7f:6a:cf:
                    3e:95:43:83:46:46:7b:1e:eb:12:9e:c2:4d:6b:d9:
                    6b:cf:e0:87:a6:dc:97:98:5b:40:b6:a2:98:7a:4d:
                    e9:c5:b7:24:7c:d5:54:0c:40:da:ce:75:76:72:c2:
                    36:1e:0f:ad:cd:c5:60:f7:8b:1b:95:59:a0:56:ce:
                    02:59:e8:33:26:e9:ee:12:3e:7f:40:ae:c3:b1:12:
                    84:ac:43:67:ea:54:60:04:3e:b0:36:03:e0:a7:6f:
                    01:ea:f5:b2:0c:46:ef:3b:3c:c4:ee:98:97:dd:58:
                    83:ab:79:52:42:b5:ce:72:d4:8e:ba:82:56:75:d5:
                    9f:b4:71:fc:40:eb:37:90:6e:4a:c8:89:33:fc:9c:
                    81:a0:5b:04:26:18:98:a1:0b:5e:02:83:f3:65:97:
                    e1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:10:73:90:C0:99:89:0B:A5:5E:F5:52:63:35:EF:75:31:3A:94:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.46.0/24
                  136.228.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9b:be:72:bb:54:56:f8:4d:f3:e8:b4:53:e9:dc:c4:6a:2f:
         7b:e8:bd:77:ed:3f:27:a6:c3:7f:4b:a7:8e:fc:c3:25:50:ba:
         68:da:81:7f:9c:82:ed:88:f8:bc:57:35:d6:6e:c4:ce:b4:c2:
         03:8f:08:b5:61:f1:21:a3:15:54:d2:0a:fd:7e:0e:80:e3:c8:
         4a:33:57:4f:3e:da:36:ab:70:20:fe:dc:3b:89:f1:e2:5e:b9:
         74:5c:c8:3a:f3:42:ba:18:34:d5:b8:be:0b:ef:24:21:96:82:
         84:7e:8d:a3:bf:c4:e6:c2:d4:ec:45:e8:25:09:89:fb:33:46:
         47:be:a8:1f:a3:0c:e5:87:1d:47:78:75:a9:de:e8:99:92:1f:
         76:de:45:85:f5:3f:18:a4:01:8d:2b:0f:de:fb:00:0e:31:d7:
         d1:f0:5e:cc:cd:ac:45:8a:c1:ba:0e:5e:a4:be:30:08:53:2b:
         d8:29:9b:46:5f:8d:3f:24:81:b3:e6:35:78:d1:86:47:20:27:
         df:e0:f9:5c:ec:19:29:52:44:04:a9:2b:aa:af:63:3b:7b:90:
         84:3b:bc:20:88:c6:be:d5:b4:87:13:4d:1d:6e:77:89:86:28:
         80:21:11:37:34:56:cc:35:2c:ce:8f:bd:63:e5:39:f0:97:d8:
         9b:24:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 13:51:09 2026 by rpki-client