Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/33e3df05-372c-349b-940b-5417023a241a.roa
File:                     33e3df05-372c-349b-940b-5417023a241a.roa (raw, json)
Hash identifier:          1V0zs5Bi1hNtyYZev/oOKFhGPWJgric5M3l39a6mwbA=
Subject key identifier:   05:81:F6:BE:A5:B9:00:B2:9A:5F:98:18:96:2F:E4:0D:ED:85:FA:FE
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584EA79CD68A2146A4E6CDF275C0
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/33e3df05-372c-349b-940b-5417023a241a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        136.184.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:d6:8a:21:46:a4:e6:cd:f2:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2c99e113-f4a0-4f21-8369-299337e2f150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fe:6c:c8:bb:dc:1a:76:d5:a8:95:98:db:1e:
                    79:ed:a1:06:01:84:10:7b:77:b1:9d:10:40:ae:8a:
                    aa:a9:fd:e2:1b:82:93:39:0c:94:fb:57:91:32:a7:
                    11:1b:9b:bb:d6:23:5b:fc:a0:b8:c4:d7:91:a6:8b:
                    aa:88:eb:20:3b:71:60:4a:2d:ae:c7:8d:a6:8b:62:
                    1e:b5:9e:38:96:9b:12:c2:31:e6:fc:07:a4:23:4a:
                    0e:5e:ac:8a:40:a4:02:00:c9:50:5e:a6:98:46:d8:
                    c9:8d:cb:a7:68:03:bd:c9:be:e7:6b:c7:a0:bd:10:
                    11:e2:2d:c4:47:37:58:79:14:a3:06:a8:6e:33:1a:
                    c7:5e:4e:7c:01:80:6a:c0:55:77:86:0c:85:ee:57:
                    8f:be:2d:1d:a2:5f:46:0e:b6:ed:c6:07:0b:76:c8:
                    e1:e6:c7:1c:66:f4:3f:cf:81:a5:57:a3:59:6e:34:
                    77:55:ed:2a:bf:bd:b5:40:e4:d0:72:2c:67:d3:ba:
                    9a:18:a5:96:99:9f:cb:64:2f:ec:f0:db:28:9f:10:
                    07:bb:5f:e9:4c:bc:1a:41:35:a8:0d:64:72:ec:f7:
                    47:3b:90:83:be:30:50:f7:a7:81:ad:ff:b0:59:48:
                    ef:07:69:72:bd:e5:ed:4f:d5:43:17:28:16:00:4c:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:F6:BE:A5:B9:00:B2:9A:5F:98:18:96:2F:E4:0D:ED:85:FA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/33e3df05-372c-349b-940b-5417023a241a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:27:63:b2:84:b0:af:90:5a:16:bb:2b:d1:4d:3e:4d:96:ad:
         c4:63:13:57:43:b7:35:19:42:4f:37:cc:60:2c:43:e9:4e:fa:
         e8:67:75:d3:64:85:25:bb:f9:8d:e8:f5:d0:c4:c2:84:ba:10:
         0d:af:2d:16:ae:50:5a:1b:00:38:e3:3c:3c:58:b3:4c:ef:c1:
         39:0c:b7:b3:7b:fd:a7:b7:fa:92:10:20:44:ff:2c:6f:0e:05:
         0c:ca:05:47:c8:29:b5:1d:a9:6b:00:95:0e:33:59:5a:01:65:
         57:bb:db:44:64:33:13:0c:2a:5d:25:5a:f3:e1:67:b1:20:ca:
         87:c3:1e:b7:2d:ac:bc:d6:2c:74:2e:7b:39:b0:66:ce:8d:cd:
         db:6d:2d:40:6b:59:a6:2e:a9:ac:e9:4f:28:21:f9:ff:12:0a:
         c0:1a:3e:f7:1f:3e:45:ee:ca:ec:6e:54:ce:39:22:a1:be:18:
         54:04:5e:aa:18:8c:fd:6c:44:5e:03:72:9f:1a:bd:55:8b:2c:
         ca:58:74:3b:d5:b8:7f:78:a9:57:b9:52:1e:5f:8f:25:dd:5c:
         c5:4a:e5:34:cb:f1:92:04:4f:1c:88:b6:77:c1:30:33:26:e4:
         1e:59:4b:a3:96:22:e8:97:4e:0a:c5:0f:aa:b3:2f:b1:14:e8:
         b7:82:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:07 2026 by rpki-client