Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/471d994f-4eeb-3cfa-9504-815a1c125f3f.roa
File:                     471d994f-4eeb-3cfa-9504-815a1c125f3f.roa (raw, json)
Hash identifier:          eMdOYdyHUmeQJwfV7Tr6DNtEUBJD57V48GMbeawrUfU=
Subject key identifier:   F4:27:BA:2A:C9:28:A8:04:C6:04:B2:0B:09:4E:8B:07:42:5D:0B:DA
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74E4C6F8A8B34739292C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/471d994f-4eeb-3cfa-9504-815a1c125f3f.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        136.226.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:4e:4c:6f:8a:8b:34:73:92:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=47b8b71a-bcca-49ce-bf48-254a6b34b5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:9e:95:36:a1:4a:e2:2d:21:aa:06:d3:81:
                    97:44:11:5d:fe:95:8b:3c:c5:fe:f6:c4:bd:32:71:
                    2c:dd:9d:d6:7d:36:bc:4d:de:5c:53:90:de:a2:af:
                    6a:67:36:2c:a8:f8:d4:92:f0:2a:01:b1:c5:ec:4a:
                    49:4c:23:27:e0:d4:89:a1:35:8f:01:57:ed:cc:60:
                    dc:d7:bb:ce:0c:d3:5d:3d:bf:95:97:cf:e4:04:18:
                    6a:ef:b1:c2:42:b2:f2:97:ea:ea:22:4a:7d:53:02:
                    69:2f:91:bf:60:76:eb:a4:00:14:f9:3d:af:5d:f0:
                    71:d6:07:af:a6:a3:bb:c4:12:83:84:02:de:ab:29:
                    20:b9:1f:82:94:95:6a:a7:52:80:f0:45:38:d6:18:
                    05:7b:65:98:d6:8e:b9:f1:f5:d0:1b:89:7e:00:cd:
                    95:94:d9:e3:4f:52:10:c1:c2:e4:2f:08:26:02:b4:
                    08:b5:e0:e0:39:55:fc:4f:6f:8b:cb:e3:c5:19:67:
                    c1:72:e2:3d:ea:dc:c7:0a:7d:6b:95:69:97:d9:c8:
                    37:61:03:75:2a:e7:08:9e:21:11:79:7d:5e:4a:18:
                    a5:c6:1f:5a:63:bf:e4:70:07:f4:51:c8:19:30:76:
                    b8:40:67:d3:b0:1a:e1:39:ee:24:03:be:fb:57:8d:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:BA:2A:C9:28:A8:04:C6:04:B2:0B:09:4E:8B:07:42:5D:0B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/471d994f-4eeb-3cfa-9504-815a1c125f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:5c:19:a3:fa:c6:58:37:ba:c6:a8:2c:3b:83:0a:26:c4:2c:
         26:0b:61:c2:45:6d:4a:7b:74:60:24:23:33:24:99:ad:14:aa:
         cc:4a:44:03:95:00:07:9a:fe:c4:d2:cd:d5:da:0c:af:d7:0c:
         92:c5:7f:08:9e:9f:98:2f:92:25:e7:71:0c:11:78:1d:19:43:
         bd:df:c1:73:64:8e:4c:2e:e1:5e:bd:98:0a:8b:21:37:d1:4c:
         82:4a:bc:a3:26:3c:48:00:9a:b5:2c:d4:70:09:92:a9:6f:d2:
         7f:d2:aa:f2:e0:d8:5c:39:93:f2:15:a9:9c:94:d9:5f:28:95:
         c1:30:10:4c:47:44:d4:17:7c:bc:ae:a3:c5:98:18:19:26:3e:
         d3:13:6e:e3:4a:ed:02:9a:68:ad:a1:eb:2e:57:71:6b:35:d2:
         82:1c:71:1b:01:86:35:32:52:78:17:dd:63:9d:1c:2a:40:f4:
         fb:af:73:73:2e:5d:69:0e:d8:d9:e8:05:25:42:7f:c8:8d:ef:
         15:26:d2:1d:89:72:46:84:e9:d9:38:77:31:af:b7:90:8b:f5:
         87:86:06:0a:c4:d2:80:45:41:6e:de:00:0b:2d:82:71:66:6b:
         bb:cc:a5:94:cd:41:57:09:f4:bc:4e:45:7b:f8:fa:f9:fa:9d:
         9f:fe:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:23:08 2026 by rpki-client