Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/63b641e1-cbcd-38a0-8522-a2fac45100f3.roa
File:                     63b641e1-cbcd-38a0-8522-a2fac45100f3.roa (raw, json)
Hash identifier:          Lfk69auBP/WZbbh00Ghm+rCjEXkgQ4QUrk6WWF/cB9c=
Subject key identifier:   23:C4:D3:A8:68:D2:6E:1C:E4:F7:F8:F3:85:79:D8:A1:0A:5D:01:0D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF741C80F814FDC718CBE60
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/63b641e1-cbcd-38a0-8522-a2fac45100f3.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     62044
IP address blocks:        136.226.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:41:c8:0f:81:4f:dc:71:8c:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=1397ddff-b2cb-4eba-9137-773c8f8948c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:ca:64:06:78:b2:e1:c9:27:b8:a6:64:84:
                    22:14:e4:1a:95:fd:6a:db:42:6e:c8:a1:0a:f2:24:
                    56:57:f2:ff:5c:26:f3:e5:27:a6:89:94:be:c0:ff:
                    dc:3a:1e:b4:df:6d:54:af:69:82:86:d9:a9:9e:c2:
                    97:92:d3:59:fe:ef:08:fa:9a:e4:b2:21:23:f9:f6:
                    18:8d:73:48:6a:e5:8f:91:47:75:e4:f5:c2:69:58:
                    89:ae:13:dc:fa:b6:eb:05:e9:66:08:ce:4a:b3:f5:
                    de:59:07:31:bd:da:e2:d8:53:af:ad:3f:39:8e:65:
                    ef:fb:69:a6:2d:9e:1d:b8:c3:d3:1c:7a:ed:4f:33:
                    bb:4a:43:86:9b:70:3e:53:25:45:31:0c:73:b4:56:
                    78:fd:66:f4:fc:47:30:b2:23:df:5a:e0:be:91:8c:
                    cf:29:d9:b7:39:c5:1c:26:34:a9:ca:c8:59:14:13:
                    fd:e1:0c:a4:46:e7:37:44:a9:f4:ec:b1:a1:9d:f9:
                    50:1f:4f:44:e4:48:d1:eb:3d:ba:91:cb:db:bb:04:
                    66:3f:e5:2d:8e:8a:31:34:82:40:01:1c:be:ff:ff:
                    77:c0:b7:b8:b0:af:ac:5d:2a:15:cc:b7:06:17:c3:
                    c9:4f:11:53:de:83:e8:38:40:fc:cd:46:bd:1b:8e:
                    a6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:D3:A8:68:D2:6E:1C:E4:F7:F8:F3:85:79:D8:A1:0A:5D:01:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/63b641e1-cbcd-38a0-8522-a2fac45100f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:74:ef:46:33:97:a4:65:f9:1e:fd:a4:c3:eb:88:8b:72:f6:
         23:66:27:96:f8:1c:38:6e:df:29:23:56:51:f3:a4:b8:54:aa:
         f2:be:04:30:9f:8b:7c:45:29:69:70:af:c7:2d:8c:ba:29:80:
         f8:5f:2d:f2:31:7f:e9:45:90:bd:78:25:1e:23:83:c5:66:d2:
         c2:d2:1c:0b:f5:9d:fb:04:7e:1d:e6:fc:de:8d:dd:0f:ff:0d:
         27:64:a4:2e:51:03:da:3d:28:e8:a0:3a:7e:08:ea:ee:9a:17:
         9f:66:7f:7c:19:06:69:b4:c5:44:b1:50:51:8c:20:28:eb:6f:
         31:e1:e5:c0:4f:97:04:29:b1:e4:45:49:0a:67:55:61:3d:6a:
         ca:82:79:77:8c:55:3b:bc:92:e8:3a:4d:6b:ea:b4:d8:b8:9c:
         c5:8f:8f:74:23:0b:60:ea:58:ed:75:78:83:d1:3f:71:3d:8a:
         24:96:eb:f7:10:ad:c5:a9:1c:18:20:c5:f8:87:6a:3c:63:fd:
         58:46:cd:86:2e:b9:fc:25:cb:8e:08:7b:58:3a:12:ba:f4:6b:
         d2:56:a7:98:55:22:d8:72:96:dc:18:5d:28:91:59:7a:e7:da:
         94:88:62:d3:3d:0e:a0:8c:77:be:89:0a:43:8f:6c:7e:91:1f:
         e2:a2:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:02:31 2026 by rpki-client