Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e4163ae9-06d1-3b53-8dbe-660f272db8b5.roa
File:                     e4163ae9-06d1-3b53-8dbe-660f272db8b5.roa (raw, json)
Hash identifier:          MBpwsNPlpSuDWQUk9Wfe8ELEF4j1Lv2LjNG4e6sai3Y=
Subject key identifier:   42:62:39:23:DE:2F:9C:44:63:34:66:3F:82:58:24:9D:3A:60:05:19
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7E7D98D4269C16C2B2589FC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e4163ae9-06d1-3b53-8dbe-660f272db8b5.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     22616
IP address blocks:        136.226.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:98:d4:26:9c:16:c2:b2:58:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=ee9dd9b3-2776-4db4-8e7e-49c22d247874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:64:76:c2:ca:00:11:5f:d0:2d:eb:8b:3f:
                    ed:16:77:ed:f0:35:6a:e6:5d:cb:4e:4f:a2:ca:53:
                    6f:85:ad:1b:2a:99:06:ca:d9:6b:bd:7a:0a:f2:b0:
                    a8:3a:be:e9:96:55:78:d3:29:b3:db:8c:71:f7:db:
                    9d:7d:c9:30:02:2b:1c:7b:9e:33:c8:bb:86:29:f8:
                    8c:36:7c:85:86:c1:87:55:21:a7:6a:a0:64:27:1a:
                    98:c6:7f:cd:70:ef:ef:b3:f7:57:b7:3b:a5:78:f9:
                    a5:eb:f3:e9:58:ff:e7:1d:27:41:85:27:45:c5:47:
                    a8:5a:3a:a5:8d:e7:2c:e1:b9:6e:04:8c:82:f7:27:
                    41:93:ae:67:fb:d5:85:52:94:02:4e:e5:06:fd:e7:
                    4b:56:94:db:d2:9c:38:d6:7f:dc:0e:75:0c:18:a0:
                    72:54:78:3d:19:db:d0:03:19:ba:f1:9c:ed:ee:16:
                    dc:18:9d:27:dc:3a:95:c1:9a:d5:d5:a4:e1:ce:e0:
                    87:80:30:e2:6b:01:70:3c:20:56:91:94:39:ea:f4:
                    f8:42:ce:cc:2d:54:be:0e:eb:c7:31:8a:f0:df:d3:
                    92:2d:dd:3c:8c:c6:c3:90:70:55:5c:bb:30:2d:80:
                    a6:75:85:a6:19:d3:f5:a0:54:31:e3:8e:a4:0f:b7:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:62:39:23:DE:2F:9C:44:63:34:66:3F:82:58:24:9D:3A:60:05:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e4163ae9-06d1-3b53-8dbe-660f272db8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a9:5d:8b:d6:82:6e:4b:3f:71:da:34:0e:f3:40:e9:95:4e:
         ba:eb:5d:76:f0:d2:81:bb:a6:d4:9b:9d:fa:db:82:48:90:b9:
         d1:70:b3:c7:c7:73:84:f7:48:71:1e:69:12:93:9f:b2:18:04:
         bd:f7:18:13:9a:28:35:60:2b:51:c3:a8:a5:23:fd:86:5a:3f:
         33:67:9b:5d:73:03:77:2f:bd:50:ba:96:55:45:0a:2d:bf:dc:
         e8:9b:c5:fd:a8:d0:f9:90:25:b1:62:b5:ef:c5:c8:a1:cf:b9:
         cf:95:ef:be:56:aa:2a:97:4b:b4:1c:8f:5e:95:e0:74:2a:cd:
         64:d0:e3:e4:ca:33:78:76:a7:86:40:d5:6d:49:45:b6:99:b1:
         5f:0a:af:c4:c4:4d:da:a8:35:a7:d8:34:52:3d:fc:83:44:24:
         a2:ba:08:ce:02:af:17:4c:df:0b:40:bd:c3:5b:66:80:87:03:
         e4:cf:24:2a:1a:17:62:06:fc:72:37:bb:97:8a:3d:55:fb:1a:
         75:44:55:93:62:f2:bd:e0:b4:f8:7d:e5:b5:d9:e9:b0:b0:18:
         0a:d7:f8:ec:ff:7f:92:e7:b9:6d:5d:41:f1:6d:d0:29:97:c1:
         a3:60:72:14:18:ae:08:c4:13:75:cf:cc:cc:72:25:dd:e8:04:
         29:ff:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:50:40 2026 by rpki-client