Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/8da0e230-c0a2-344a-a2b7-6979b2a2a464.roa
File:                     8da0e230-c0a2-344a-a2b7-6979b2a2a464.roa (raw, json)
Hash identifier:          K+URlK1yCvJzJbe839QisRMjKWRljbe5xLYkQnVJIc0=
Subject key identifier:   5F:46:BC:13:3C:CC:2C:B0:8D:C9:88:95:8B:EB:87:D0:4C:CB:CA:D2
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584F4F080A949FC40FA3FC2AE432
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/8da0e230-c0a2-344a-a2b7-6979b2a2a464.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     401307
IP address blocks:        136.228.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0a:94:9f:c4:0f:a3:fc:2a:e4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=398c0432-64a2-457b-a7b3-824ce6f4c037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:11:c5:76:e3:17:8d:5c:25:0a:e6:50:21:
                    98:ae:b7:b7:7b:f2:90:fb:90:5c:f1:8c:10:0a:de:
                    96:57:06:56:f3:bb:6e:59:cc:ed:89:cd:e2:8a:58:
                    b6:4b:11:f7:39:e9:30:22:0d:d9:84:26:54:2d:5a:
                    2d:c1:5e:7f:57:66:c3:19:40:35:12:8c:7d:c5:9f:
                    de:c3:0e:29:8c:e1:cd:81:61:72:c9:68:5a:61:7a:
                    71:ab:f1:b8:7a:b1:20:43:47:c8:13:f4:4d:09:92:
                    cc:2b:33:ef:d5:60:e7:69:4d:41:c3:db:0d:1c:00:
                    89:92:15:e5:9e:f0:46:00:dd:32:f9:25:82:cf:14:
                    83:5a:bf:cf:92:80:34:70:ae:b2:05:2c:be:64:75:
                    44:ba:4a:20:63:0d:b5:2b:d2:7f:d1:09:30:57:e2:
                    8c:13:81:cf:c9:2d:8f:9c:96:55:b8:44:ad:c9:1d:
                    df:4f:63:9b:7b:42:49:7d:80:83:36:96:dd:a9:6d:
                    d2:64:b9:fe:68:61:8c:af:fa:29:cb:92:ca:39:bc:
                    e4:dd:06:6c:08:d9:22:82:7d:f7:37:98:f9:df:cb:
                    f0:1b:72:92:54:61:d8:cb:6b:ad:af:25:37:34:fd:
                    46:06:e7:ad:19:cd:16:e5:25:7f:c9:6e:74:68:5c:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:46:BC:13:3C:CC:2C:B0:8D:C9:88:95:8B:EB:87:D0:4C:CB:CA:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/8da0e230-c0a2-344a-a2b7-6979b2a2a464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:69:f8:6b:c9:17:a8:93:7a:3f:85:53:7b:7a:c1:4f:27:1c:
         db:75:7f:c6:ba:f6:25:08:a2:c0:b3:fd:22:0d:f8:05:b2:14:
         32:9f:de:91:b1:b2:20:72:28:8c:4c:d5:50:0d:15:59:c6:9e:
         72:58:f4:15:50:6e:cf:b7:12:c8:da:b1:ec:20:c6:8e:7b:78:
         33:c4:9f:66:a7:95:e2:c1:e8:21:df:b5:49:17:85:f0:13:f2:
         87:c6:b8:86:ac:31:8f:94:f5:5f:f8:99:1c:79:3f:e6:9d:d4:
         0e:7a:ba:31:7c:64:ea:d1:55:3a:bc:bf:e0:e9:1c:48:ee:90:
         f0:dd:87:14:9b:1c:d7:42:fd:2e:d2:5c:0e:5e:60:1c:41:3f:
         76:39:19:69:f9:30:32:d7:18:ad:21:3d:88:8c:03:1d:59:4d:
         e5:e0:5e:ae:30:a1:a9:bb:e5:02:3f:d1:c5:b9:84:11:3b:57:
         f8:60:f3:6a:7a:53:44:58:ec:8d:38:00:d7:19:5a:55:a1:1b:
         dd:d7:9b:de:aa:88:12:fb:14:4c:f8:c3:11:3e:f5:26:e2:40:
         d9:e9:69:8e:79:a2:3d:5f:74:e6:8e:a0:8f:62:c5:7c:6d:6a:
         4f:66:a1:04:07:49:dc:bc:26:81:2a:20:1d:65:2d:6b:e4:89:
         63:73:6a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:38:00 2026 by rpki-client