Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/de85a73f-1d08-3816-aca7-a12eeb518f49.roa
File:                     de85a73f-1d08-3816-aca7-a12eeb518f49.roa (raw, json)
Hash identifier:          yuDjooFyyVStNz6KptOSBLOzJobwcPjV23CS7B+aUGE=
Subject key identifier:   A3:41:3C:66:01:E4:78:62:B1:B3:2C:19:11:D6:BA:E9:39:BF:C1:50
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74D23E80A0932AE359440
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/de85a73f-1d08-3816-aca7-a12eeb518f49.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        136.226.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:4d:23:e8:0a:09:32:ae:35:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=4c2befdd-43b4-40ee-8110-7ec063c3b901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:81:bf:05:85:06:ea:f4:de:9e:8e:85:e4:
                    53:82:95:27:d2:b1:e6:6b:f1:92:39:03:19:41:8b:
                    7a:f3:64:45:50:c5:24:1a:d3:4a:6c:11:5a:df:4e:
                    74:f6:6f:53:e4:00:2c:41:a9:0c:3b:6f:0a:c7:cf:
                    ea:3d:6a:e6:67:67:99:f5:36:03:15:36:e7:55:46:
                    41:2c:28:40:58:5f:ff:6d:40:6a:ee:14:2e:b9:ff:
                    fb:f0:28:40:69:4f:86:35:c5:57:73:18:b7:30:61:
                    11:3b:2b:71:9f:de:cb:7e:00:12:e2:4e:45:83:5a:
                    90:b3:27:07:03:87:13:5d:56:3f:2b:3b:08:90:cb:
                    f0:6e:be:45:c5:56:98:30:54:f0:ed:3e:f1:f5:42:
                    78:57:d5:a5:52:32:36:0c:a5:6b:0e:1a:0d:6a:da:
                    3c:89:8f:85:e9:c1:3b:06:d4:0a:a8:46:77:e9:a7:
                    c0:b9:46:fc:af:f1:3b:94:5e:dd:15:ad:91:f1:81:
                    a3:f0:fe:7d:93:0b:09:4f:36:e7:1b:7e:9d:f4:ae:
                    96:93:01:13:7f:67:6b:d2:aa:6d:ef:4c:a3:af:b6:
                    7b:ad:2d:bf:e9:b9:9d:c0:ef:71:bf:40:d2:a8:b4:
                    b7:55:35:ab:1d:71:6a:95:53:2f:5c:d3:e3:fd:1f:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:3C:66:01:E4:78:62:B1:B3:2C:19:11:D6:BA:E9:39:BF:C1:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/de85a73f-1d08-3816-aca7-a12eeb518f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ea:25:d5:4d:c9:6a:b0:d6:bd:19:1f:72:ea:86:67:a1:d5:
         cc:9e:aa:81:d4:42:9e:10:81:9f:6c:2f:67:99:66:de:31:49:
         66:fc:e4:95:ad:5d:6e:5d:33:10:29:7c:b4:54:f0:36:f7:bb:
         16:ee:e2:5a:98:db:dc:d3:fa:8b:db:62:43:4d:f2:5d:99:fa:
         d4:d8:19:a7:27:03:95:4b:91:45:4a:ce:ae:95:35:3e:dc:3a:
         27:b9:56:74:66:2d:cc:10:95:b6:51:dd:a6:1e:c0:05:28:1f:
         52:1e:f1:ac:c1:c1:ed:70:23:e6:be:c7:56:1d:5c:2d:96:0d:
         b5:06:e8:42:a7:83:64:0f:a9:a8:52:90:e9:b2:5a:71:b2:40:
         24:73:35:af:06:3f:26:21:80:84:9b:3b:7b:d8:df:f0:de:65:
         49:72:b5:dd:95:a1:ab:52:65:2f:58:97:d2:bd:24:b1:42:92:
         e5:8f:80:f9:6b:74:85:92:78:27:ac:19:5f:45:75:07:8e:2d:
         cc:29:35:bc:66:f8:db:d2:cf:91:b6:1b:28:a7:b7:57:57:65:
         86:75:c1:4d:3d:5c:00:16:ab:f5:ad:a2:2e:25:af:c0:8c:65:
         f3:1d:03:49:44:05:1d:39:e5:a1:30:f0:65:3b:b4:b0:2c:4f:
         e3:45:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:40:03 2026 by rpki-client