Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa
File:                     58f97502-a21c-3db1-8649-e4de440334ed.roa (raw, json)
Hash identifier:          HOz/j1QxNW+dLrHqjxD0zDi2GXvnu/eM5ig+M8rKKJw=
Subject key identifier:   F7:47:59:0A:22:1A:C9:CC:73:BA:C6:4F:B9:35:C6:CE:C3:D4:C7:DE
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584DE1506E33006FF2B97A7FD480
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     19165
IP address blocks:        136.28.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:6e:33:00:6f:f2:b9:7a:7f:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=6dd2efaf-d483-450f-b5f6-1ee0621ab46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:c2:ea:2d:bf:1d:a2:30:a5:c1:72:6b:ea:
                    a4:ef:5b:7a:eb:5d:ed:b6:60:94:16:b2:9b:d3:ae:
                    ca:00:98:5a:db:1d:ea:e4:bb:17:4a:3a:27:81:ac:
                    ba:0d:f3:f4:2d:d9:e5:85:e1:56:e9:a7:4d:08:ae:
                    c2:60:90:47:6a:7c:52:47:b3:8c:5e:93:5f:cf:4e:
                    50:ec:2b:0b:c2:5f:e1:f0:7d:ff:11:a4:43:7e:62:
                    d0:fb:37:fa:9f:18:c6:75:75:a2:62:f8:0f:cc:09:
                    d5:61:f8:f5:65:65:05:cb:25:83:02:28:2c:2b:5f:
                    ab:03:69:2b:7e:28:f4:6e:cd:56:16:4d:21:ae:0c:
                    ce:5c:bd:08:37:03:8c:af:93:66:e1:0a:71:82:86:
                    af:5c:a6:bb:ae:8e:77:99:db:04:d0:2f:f2:40:8c:
                    fe:e7:12:5a:ce:7a:0e:17:f5:1a:65:71:1a:bf:33:
                    e3:96:17:b4:d1:f6:79:63:ab:5e:bf:5d:68:52:57:
                    a2:30:dc:cd:01:68:39:9c:4f:cb:6c:a6:34:0b:a4:
                    ee:01:41:da:6b:15:c9:1b:a7:43:7a:27:2c:54:24:
                    f8:73:fd:80:02:70:17:fb:3e:13:d4:3b:55:8b:c5:
                    e0:ea:8d:37:75:40:fb:af:e9:d7:d4:c5:90:78:2e:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:47:59:0A:22:1A:C9:CC:73:BA:C6:4F:B9:35:C6:CE:C3:D4:C7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.28.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:3e:70:72:87:ab:ea:31:26:ff:b1:18:17:8b:1d:97:75:
         5e:a3:9a:4c:38:29:dc:d8:e4:eb:1c:37:ba:1f:88:ef:a3:d4:
         05:e9:29:13:3d:4b:cc:89:4c:c9:f2:1f:4e:72:6f:03:10:03:
         93:79:e2:e6:2f:cc:b4:00:0b:be:b5:dd:55:c2:25:77:68:ae:
         b4:0b:a6:a8:1b:c8:5b:11:1d:00:4b:02:03:81:81:51:2f:6e:
         a8:c6:1e:da:93:69:4b:91:a0:0d:84:13:ab:fa:8a:26:2f:4d:
         c0:4e:f4:94:dd:c2:3c:1b:1a:24:48:33:c5:db:74:3b:aa:a0:
         d6:e1:de:f3:8c:4f:19:c1:f5:f2:9e:9a:c7:57:ed:19:e0:d7:
         f1:ff:49:d5:a3:81:cf:b9:f6:95:da:2d:75:45:4e:34:31:b6:
         94:b5:32:20:f2:f1:e9:60:ba:f0:a0:dc:e6:00:7c:0d:e7:f6:
         0e:8c:94:23:7d:17:f6:45:05:52:46:2c:e2:59:d8:00:4a:3a:
         f4:1c:84:14:cf:53:56:76:d5:2e:cb:27:4c:ef:ae:11:8c:08:
         9b:ce:bb:6e:07:e4:9e:d0:ed:1e:9c:58:0a:4f:fd:d8:7c:9d:
         53:d6:6a:4c:0e:ea:72:85:49:61:06:09:a7:78:2c:55:d9:ac:
         06:98:fb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 06:44:18 2026 by rpki-client