Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/635c034d-6d0c-34f2-849b-d85c78053351.roa
File:                     635c034d-6d0c-34f2-849b-d85c78053351.roa (raw, json)
Hash identifier:          OKeplp4AeFUwotNK4NNYnbnrRwCXER19s2nA9Idx7p4=
Subject key identifier:   D0:8B:42:5E:BD:E0:FE:68:69:38:0F:6B:72:AD:3A:7F:54:BE:C0:B0
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584EA786FDE35BC22051A07DFC80
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/635c034d-6d0c-34f2-849b-d85c78053351.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        136.184.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:fd:e3:5b:c2:20:51:a0:7d:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9812087f-fb1b-4b48-bdc1-d8724e71a506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:d3:d9:6d:56:07:c3:b5:ed:e7:d4:97:41:
                    de:14:c9:9c:7f:71:16:0e:30:76:f9:ce:05:d4:92:
                    3f:0b:f7:a7:51:8c:96:4c:88:f5:fe:f9:34:94:04:
                    f5:61:e5:54:13:63:82:44:6d:1a:46:b6:f7:ba:a4:
                    37:9e:cc:88:0c:0d:2d:f8:60:2c:7a:f0:95:a2:f9:
                    74:7d:7c:d7:eb:15:4d:2d:ae:fe:57:4e:91:d7:4f:
                    00:6d:9a:42:c8:2b:ce:c3:29:42:09:61:fd:c6:14:
                    4c:5c:e0:c9:9d:c9:19:13:03:0e:e2:be:dc:99:f0:
                    56:fc:d7:91:28:4e:f8:26:4b:5a:52:f8:72:70:25:
                    40:2d:ce:a9:95:ba:8a:2a:12:0f:ed:32:e0:8c:75:
                    ca:d9:dc:01:69:bc:d9:bc:91:24:d5:f2:44:91:18:
                    5c:5f:87:bd:50:26:00:b7:fa:61:f9:2e:c5:17:2e:
                    7b:4e:d7:57:ab:cc:1d:28:8c:7b:41:27:7b:54:9e:
                    73:78:23:18:54:2e:bb:4e:ea:d8:91:e8:09:77:88:
                    52:06:81:0b:ce:54:18:34:96:8b:15:1f:9b:ac:fa:
                    b2:01:c9:0d:fd:67:01:87:73:7a:fa:21:80:81:7e:
                    d5:ee:18:08:57:34:8c:d7:17:6f:7b:d4:3e:05:90:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:42:5E:BD:E0:FE:68:69:38:0F:6B:72:AD:3A:7F:54:BE:C0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/635c034d-6d0c-34f2-849b-d85c78053351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:af:43:28:5f:2a:71:c8:f2:b9:db:10:b6:39:7d:82:77:df:
         5e:5c:3b:c6:52:d2:85:be:9b:8c:ef:53:75:b8:2a:8c:33:9a:
         f8:5a:a9:09:d8:c2:92:f4:d8:6c:b7:9b:e7:6b:1b:f1:fb:e8:
         27:18:5d:3e:a9:33:09:34:58:9f:77:c7:3a:09:a5:7b:a6:b8:
         76:e5:ed:c1:04:80:cf:96:b8:d2:48:9f:ad:74:fb:55:02:a2:
         16:26:46:88:58:8d:c5:3e:eb:96:4f:5f:91:25:d6:43:39:27:
         8f:8e:5f:2c:27:a2:6b:fb:28:37:4e:14:b2:49:61:33:1c:ed:
         c7:aa:b7:42:01:53:4e:8c:40:af:bb:73:fe:c5:50:0d:50:6c:
         2e:0d:bc:9b:8f:56:7a:5b:a3:48:98:72:7c:2f:14:9f:5f:6b:
         ac:c5:4f:4d:46:e8:71:f4:a2:97:fa:c6:0c:e1:8e:a8:39:b3:
         4b:80:c1:47:de:d4:f3:27:cf:7d:38:53:08:11:8b:fc:59:5b:
         8d:8c:ca:58:2d:c9:61:0a:ad:5f:76:ed:a0:f6:67:d2:10:79:
         36:56:98:30:f4:89:0c:2f:db:c1:ba:33:93:c8:c9:15:b6:85:
         d2:78:61:80:33:b7:d8:60:d5:e4:44:ed:0f:d4:00:4f:bd:ee:
         e2:84:ef:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:19 2026 by rpki-client