Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8ba2aa6a-5960-3989-8eb0-cd96033ec84b.roa
File:                     8ba2aa6a-5960-3989-8eb0-cd96033ec84b.roa (raw, json)
Hash identifier:          E31CaeP220Arhw3kbdWfiMRYy/qrOZH6YG1ERVDjb8o=
Subject key identifier:   BF:07:66:2D:0A:A3:4F:8A:AD:AF:A3:6E:97:5C:6E:F2:9C:04:E5:0D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF75137FAFC8B5F3C321180
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8ba2aa6a-5960-3989-8eb0-cd96033ec84b.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        136.226.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:51:37:fa:fc:8b:5f:3c:32:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=6d89732d-db45-4868-a481-c48c964c16c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:08:cc:c7:1c:1d:e1:9e:b3:c2:0d:16:e5:
                    e9:c2:07:5e:60:7f:dd:8d:49:ff:f2:6d:03:d1:c1:
                    df:50:2b:e7:9d:22:9a:5c:5b:92:f0:40:8c:d2:9b:
                    7e:1c:f2:a9:0d:0f:a5:f9:f1:34:18:4d:3c:44:90:
                    44:2f:ee:6a:31:7f:41:49:42:4f:c5:0d:0f:da:dd:
                    bb:05:ce:dc:6d:60:85:61:a6:69:cf:31:be:f7:9b:
                    08:7b:ca:7c:b2:10:e8:2c:b7:ac:58:0e:21:86:55:
                    f1:a9:28:00:a3:f7:e8:04:c6:37:48:7d:fa:ac:16:
                    a1:a8:8c:2c:7f:ad:ae:83:f8:c5:79:14:ce:db:35:
                    b6:4b:b1:02:8b:02:1c:ac:49:87:8f:52:07:a0:28:
                    59:35:02:a1:c9:e3:af:f1:00:0b:8f:96:e2:a8:5c:
                    69:b2:77:2c:e0:81:fc:5b:02:fe:05:7e:38:0c:1d:
                    bd:e6:2d:5d:3f:d4:da:0c:a0:82:71:1d:98:33:54:
                    f8:f2:17:eb:f9:87:5d:bb:fd:a7:bb:02:f6:c2:f7:
                    e9:b0:08:a4:83:ed:26:34:02:59:15:44:99:8c:86:
                    82:83:83:3d:6f:aa:6b:1f:6f:ed:8b:dd:0b:61:fe:
                    2e:f7:61:88:6f:8a:ed:59:24:f7:9e:19:9c:e8:87:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:07:66:2D:0A:A3:4F:8A:AD:AF:A3:6E:97:5C:6E:F2:9C:04:E5:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8ba2aa6a-5960-3989-8eb0-cd96033ec84b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cf:13:c5:04:46:a2:27:cd:d0:3b:a2:05:f3:7f:11:9c:47:
         c8:8d:50:39:c9:b7:28:52:49:20:50:ac:05:49:ad:23:7c:2f:
         8f:f3:3c:47:05:98:86:3a:d9:dd:0f:72:b0:05:85:8a:7f:1a:
         da:f9:0e:17:0e:eb:70:4a:c6:64:39:22:df:03:35:68:d1:e2:
         4f:27:38:65:06:44:f4:1d:fc:98:23:43:11:54:b6:99:33:53:
         a2:28:4c:de:4a:03:09:c2:4d:4e:21:7a:d5:4d:09:b5:0c:6f:
         8d:e6:04:fb:5a:1a:1b:2f:17:85:41:cc:d2:a7:0a:f4:11:ea:
         a1:7f:65:fb:a7:63:6b:3d:f4:42:ac:6f:76:b2:ce:d7:f6:2b:
         a9:a8:4b:db:0b:fe:bf:ea:06:67:72:a9:ca:9c:93:2d:b5:9e:
         d6:a0:f2:17:77:35:9b:b4:f8:49:be:bd:bc:3a:66:75:dd:bf:
         92:85:d4:b5:4c:7c:1b:37:47:fd:b1:56:1f:3b:e7:6a:8a:26:
         50:ef:db:d9:0b:4d:c1:26:08:34:ed:50:a9:11:cf:66:a9:c6:
         a6:a2:79:49:93:3b:99:2a:ce:b9:26:2d:dc:8e:30:c4:18:0a:
         74:41:45:8e:b1:07:ba:66:72:9a:9b:0d:1d:65:1b:20:c7:38:
         8a:ee:64:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:01:54 2026 by rpki-client