Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa
File:                     31cbf703-1c8e-324a-8b08-26fde1392750.roa (raw, json)
Hash identifier:          GNXc7xdAkNld/Du9U/OOr8xcHn/dg1dFkJmw1Y4rcak=
Subject key identifier:   28:EF:56:D2:E8:AC:37:63:D0:45:7F:C5:51:76:56:AB:7E:48:A7:7F
Certificate issuer:       /CN=3f36b13d-55d3-434f-95fc-91af494e0add
Certificate serial:       010D0C9F4328584EB2B1C3412D215D6942039208
Authority key identifier: DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     32225
IP address blocks:        136.228.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c3:41:2d:21:5d:69:42:03:92:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f36b13d-55d3-434f-95fc-91af494e0add
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=1c560342-d2b5-4e09-92a5-b506b013df8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f2:26:15:e6:ba:8a:6e:01:80:53:b2:30:c3:
                    ae:20:a5:cd:db:9f:f2:a8:71:5d:86:d8:d8:cd:b6:
                    60:02:e4:9e:ae:32:8f:96:88:0e:85:ff:f9:26:e7:
                    fb:66:f2:94:6f:50:d2:e1:2a:52:8b:f9:65:91:28:
                    98:65:a7:c4:fb:89:dc:fb:40:94:03:6e:e7:ff:0f:
                    ea:17:37:2e:e3:5a:66:7d:fe:34:cb:2d:05:10:90:
                    81:70:c0:0a:c5:cd:65:64:0c:1c:ce:c3:dc:9f:96:
                    18:8d:44:4a:90:1f:6f:ba:fb:dd:72:66:5e:f9:2a:
                    92:44:98:56:f0:dc:59:48:6a:7d:06:44:a1:ad:b5:
                    70:37:86:5c:6d:9d:6d:cb:fd:09:90:36:68:92:0f:
                    56:1c:06:92:20:83:e5:e3:64:f5:0e:95:54:54:67:
                    02:80:77:7f:b7:96:1c:8d:c2:aa:b0:0a:63:c2:db:
                    9b:6b:33:09:57:2d:82:04:4c:7a:17:fb:7d:bc:54:
                    a3:8f:9f:af:7e:0c:38:4c:7c:d7:7b:02:a0:a2:cf:
                    9b:4d:a1:29:31:e6:46:ea:0c:9e:bb:21:10:1b:11:
                    33:7c:18:ba:ed:56:59:fa:71:58:51:f9:c7:ad:01:
                    9a:79:fa:12:62:e4:9b:3e:b6:0c:38:cb:fc:c6:80:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EF:56:D2:E8:AC:37:63:D0:45:7F:C5:51:76:56:AB:7E:48:A7:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl

            X509v3 Authority Key Identifier:
                keyid:DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:89:18:90:e9:92:7d:8d:6c:b3:17:bf:78:a6:a4:7c:bf:
         b6:ac:10:16:e8:3f:ca:a8:59:54:d0:e8:b2:14:ce:7a:95:14:
         aa:52:ce:54:5b:7a:d3:c0:dc:7d:ba:c4:3d:16:ad:09:16:42:
         ba:16:8f:31:28:07:80:ee:bc:11:29:d6:f5:f3:1d:c5:c1:49:
         fc:bd:93:7b:a0:e8:6d:2a:a2:4e:2d:0c:e6:25:cc:1a:67:c7:
         cb:1d:b6:62:83:60:2b:ff:f4:63:8d:f8:65:bb:41:14:21:93:
         00:1b:02:aa:ee:b4:68:c8:af:65:71:e8:c3:21:73:be:18:56:
         48:b3:41:e9:f0:1e:50:d5:0d:1e:20:32:f8:80:16:18:f0:6d:
         2d:9f:72:57:03:d2:75:41:5b:28:c3:e4:7b:4e:48:6f:c8:42:
         8e:47:16:92:cf:59:7d:c9:a6:67:ef:f6:97:e4:da:12:37:d7:
         fb:b7:4c:35:ec:24:34:4e:ac:ad:c2:73:af:0b:e2:25:e3:1b:
         07:a7:82:4e:88:ef:50:73:b6:99:03:cc:e1:fd:00:10:22:11:
         4b:94:e6:af:bb:7b:f4:1d:b6:b5:3b:08:1f:98:e6:d2:47:6b:
         f8:6e:9f:73:6f:5d:f1:c8:ea:e2:e6:d6:85:39:e1:d6:cf:9a:
         36:a0:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:58:23 2026 by rpki-client