Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/9ea4cf00-8a06-3820-829d-bc31538b7381.roa
File:                     9ea4cf00-8a06-3820-829d-bc31538b7381.roa (raw, json)
Hash identifier:          lxf9yp6FTg+Git/RX6znPxVMPVYVsORGp0/0Z+o1Zrg=
Subject key identifier:   DD:01:39:A6:74:FE:BD:12:D6:28:0B:0D:B1:ED:82:F6:14:9C:51:59
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584F4C3D48ED39F8079367604E60
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/9ea4cf00-8a06-3820-829d-bc31538b7381.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     395926
IP address blocks:        136.228.38.0/23 maxlen: 24
                          136.228.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:48:ed:39:f8:07:93:67:60:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=be28f62c-0b5d-49bc-b59c-4701f957c619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:20:cd:e0:1b:85:30:f5:81:5d:32:df:74:
                    a1:93:d9:28:fb:1d:01:82:ee:a9:a8:25:0e:fc:eb:
                    02:cd:06:db:f2:67:cd:cd:d4:48:70:76:58:0e:e2:
                    9a:fd:3c:1d:c8:d8:db:8f:0e:47:06:4e:59:b9:c4:
                    96:47:f9:9c:c3:eb:61:75:3c:a8:8b:6f:8a:84:5e:
                    32:b0:72:65:bd:1a:fe:07:e5:88:ed:38:0c:10:19:
                    45:f3:3e:38:8a:ec:66:2e:09:e3:78:61:f2:71:7e:
                    4a:24:4e:21:b9:f7:47:41:aa:d4:23:05:bf:cb:ac:
                    28:8e:0e:99:30:0f:ed:fc:75:1c:c7:cf:b9:7e:d2:
                    81:e9:59:bf:22:8f:d7:64:52:a2:c2:13:a2:f6:c7:
                    bf:9f:d6:2b:d2:5c:68:ae:dd:6e:11:91:4a:81:5d:
                    5d:ad:a9:80:ea:82:92:ed:2f:95:56:9d:bb:4e:66:
                    0c:c7:b7:58:f8:77:56:89:46:a4:3b:4f:29:87:84:
                    dc:3d:11:81:43:8b:b0:eb:5e:57:d7:ec:4b:a7:81:
                    ba:b0:d1:ee:d2:07:1f:34:93:10:1d:5b:b9:ee:6e:
                    bf:74:7e:fa:64:e3:7e:83:5e:69:89:ef:46:26:13:
                    21:22:3d:30:cf:ad:df:f8:fb:93:9f:02:73:f6:2d:
                    07:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:01:39:A6:74:FE:BD:12:D6:28:0B:0D:B1:ED:82:F6:14:9C:51:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/9ea4cf00-8a06-3820-829d-bc31538b7381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.38.0/23
                  136.228.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:05:65:0b:e2:af:50:66:3c:fe:db:3a:1d:63:7b:24:17:92:
         91:b9:5d:ea:07:e3:c7:c3:de:87:66:ff:77:ae:c1:7f:b6:a5:
         cb:e3:c2:b5:2f:44:a4:74:6a:94:78:81:73:74:ea:a0:d4:9e:
         2a:ad:8f:69:7e:77:cd:d7:6a:85:74:f3:c6:9f:61:99:ec:0b:
         68:bc:1b:80:0c:05:8d:94:22:93:e9:9a:51:68:c2:26:6d:52:
         63:3e:0a:57:d6:09:a8:18:86:16:a5:fe:7a:cf:69:9d:9a:de:
         70:45:db:6b:18:cb:7d:89:13:16:a5:ad:a8:51:d9:76:bc:76:
         2d:57:99:1d:af:fd:31:e2:f9:2a:45:87:e4:e2:18:e1:e1:1f:
         53:2b:db:c5:6d:fb:58:69:f2:8b:8f:e3:ee:62:af:d9:79:54:
         e4:1e:b4:d6:0b:a2:29:be:03:ca:2a:d1:b8:8f:9b:65:be:60:
         f4:e2:c9:30:93:65:63:6d:46:19:60:f3:1c:5a:a8:4c:17:fd:
         84:60:de:76:ab:a1:27:a1:5f:ff:e7:48:2e:0d:d8:c3:20:74:
         98:0b:2b:46:13:25:cc:44:0a:82:1a:63:7c:23:bf:1a:c3:57:
         92:ca:65:65:b2:db:c1:aa:9d:c0:71:09:96:95:c5:7d:1a:a2:
         46:54:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:39:07 2026 by rpki-client