Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/9b932496-8617-3782-b323-f91a6e65e5ac.roa
File:                     9b932496-8617-3782-b323-f91a6e65e5ac.roa (raw, json)
Hash identifier:          h7yWCWAwi8SG7rBhk4mHMASz0f7w4YYzI1zyHChzBUk=
Subject key identifier:   D9:73:07:48:1B:BD:4C:FD:BD:EB:42:32:A0:92:C9:81:7F:EA:05:0A
Certificate issuer:       /CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507
Certificate serial:       010D0C9F4328584E35FF188BF37712E0D1BD5000
Authority key identifier: 31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/9b932496-8617-3782-b323-f91a6e65e5ac.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     13447
IP address blocks:        136.227.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:18:8b:f3:77:12:e0:d1:bd:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=59e0e875-edba-49ca-af53-aa55f7853364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:3c:c7:e0:f5:b3:34:18:d3:51:bb:6f:3d:
                    6d:80:b2:54:f7:f9:b8:14:45:4f:c0:6a:a7:d4:20:
                    90:a2:bb:e0:22:82:28:4f:35:d4:bd:28:83:d1:5e:
                    8f:a5:fa:f6:d0:21:72:6f:0d:67:24:2b:ff:69:6e:
                    ea:3e:7f:fa:0c:a7:57:c0:c0:39:62:1e:97:d1:14:
                    fd:e3:5b:34:eb:96:c4:5f:ec:08:68:40:7b:19:be:
                    e6:3a:71:e9:0f:23:da:12:9f:e1:09:11:ac:70:1b:
                    56:fb:2c:f1:4f:1f:80:22:6c:7e:0e:41:02:f2:23:
                    5e:e8:cf:64:fa:4c:ae:69:f8:b8:46:08:a7:40:1e:
                    db:5b:c7:39:d0:8a:3a:7c:c1:db:71:d8:6f:7c:88:
                    32:05:d0:e2:38:44:b2:4b:3e:d5:11:3b:30:56:2c:
                    eb:1c:f2:40:40:e4:15:58:df:00:b7:30:12:0b:58:
                    2b:e7:fc:44:e5:1e:2b:fd:72:c0:3b:31:f4:0f:c1:
                    9f:2b:d3:e9:04:98:c8:34:ed:29:0e:17:eb:84:30:
                    a7:7f:61:ce:82:ca:13:36:48:04:9d:2a:2f:7d:e7:
                    43:61:a6:04:77:d0:3d:5f:1c:e4:d5:da:fe:d1:35:
                    1d:b7:cb:9e:16:1f:ee:10:96:44:cd:5c:24:c9:dd:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:73:07:48:1B:BD:4C:FD:BD:EB:42:32:A0:92:C9:81:7F:EA:05:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/9b932496-8617-3782-b323-f91a6e65e5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl

            X509v3 Authority Key Identifier:
                keyid:31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.227.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:be:cd:d7:29:bc:56:4f:45:2c:51:30:c2:fe:fa:3d:c7:cc:
         c9:a2:0b:ee:78:5b:1d:76:ee:d0:77:be:03:77:d1:c2:d6:62:
         67:7b:f7:ff:07:fc:bc:9c:8f:ed:76:1c:c9:27:20:23:48:e5:
         2a:e0:85:88:39:cb:27:d7:fb:b6:bf:68:16:2f:f6:d1:5b:1c:
         6a:26:56:44:ed:3b:88:9c:69:7b:d2:53:4a:0f:df:c4:ae:2a:
         70:55:b7:58:21:7e:f1:37:a6:dd:1f:db:e1:9c:8c:2a:39:a4:
         1e:0b:dd:10:e2:2b:a4:1c:cb:de:1e:e2:de:d1:dd:69:d9:99:
         2b:fc:e0:f1:8b:45:88:9c:07:e8:aa:e9:26:ce:b7:c6:a5:94:
         5d:1d:63:88:43:98:2f:e4:0f:2a:f0:24:23:f7:e5:3f:af:21:
         fc:0e:fe:b4:1c:a6:43:70:34:bf:8a:b7:2d:2f:9c:5e:c5:1b:
         17:b3:f5:b3:5f:4b:15:30:f5:76:a9:67:10:e0:55:b0:2d:d3:
         3e:77:55:cf:9b:8c:f1:44:94:b6:27:8d:95:8e:0e:c0:a5:6c:
         4e:f1:d3:79:0f:b0:45:a1:57:11:53:a1:99:d0:e6:46:30:80:
         91:82:ed:3c:de:88:ca:b9:5b:12:aa:7d:e9:3f:8f:9f:00:43:
         61:d5:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:56:35 2026 by rpki-client