Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa
File:                     5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa (raw, json)
Hash identifier:          H6jtpgTIVa1Fu+gfR8jE2ev92FzluVfrjOBMcDU3E7o=
Subject key identifier:   D6:42:A8:89:22:9A:2C:2F:24:EB:73:4F:A5:2F:7D:93:DF:AC:2E:FF
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584D07ACEFD2EE747BC210ACE378
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396253
IP address blocks:        136.228.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ef:d2:ee:74:7b:c2:10:ac:e3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=2d6b9dfe-8995-4063-b2b8-a4813f1b8026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:75:98:5d:46:28:3d:84:8b:b0:77:1f:ac:
                    71:1d:c7:c9:00:66:f7:57:a1:f0:66:82:38:e7:74:
                    f2:6f:5e:17:ec:e6:ef:cc:38:e7:2a:4a:57:79:79:
                    73:f4:c5:07:93:f5:50:b8:6b:e7:07:c9:69:93:18:
                    df:94:39:ed:04:3d:62:35:1d:28:fd:d0:7c:78:2c:
                    39:0b:45:75:43:5e:ba:68:6d:f9:21:79:99:23:f3:
                    c1:e2:1c:57:dd:26:44:17:54:0d:31:9d:31:ab:2a:
                    57:66:2b:02:27:0d:c3:db:c5:21:eb:0c:c7:14:eb:
                    69:c6:eb:a9:f2:e0:ff:6f:1b:05:6c:e7:9a:85:7b:
                    c9:f4:59:05:5c:12:08:94:45:73:b0:bf:5d:d8:a2:
                    e8:ea:5d:1f:f9:34:96:fe:a5:81:b0:f4:b7:ff:cc:
                    fc:8e:6d:25:aa:20:0c:bf:17:1d:d1:87:86:d4:ce:
                    29:95:cf:7c:85:a5:81:93:84:44:9d:53:05:fa:85:
                    16:e5:60:87:89:87:34:9e:aa:ca:b2:63:5c:78:44:
                    e9:70:b6:4e:b0:d0:fa:4d:e7:76:a7:48:7f:de:18:
                    97:bd:f6:d5:ec:2f:97:c1:2b:0e:e4:41:d2:ae:95:
                    da:fb:e4:f2:c3:12:77:ef:30:64:41:89:39:67:92:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:42:A8:89:22:9A:2C:2F:24:EB:73:4F:A5:2F:7D:93:DF:AC:2E:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2c:b5:be:56:4e:e4:af:ba:7b:7f:bc:7a:8d:38:61:3f:d5:
         51:9c:6b:76:ba:36:b5:52:18:1f:81:fa:17:ff:f5:de:14:69:
         a2:4e:15:a5:da:33:5d:57:13:9a:f4:b8:1e:83:4a:02:54:ca:
         e7:e9:c6:1c:1f:e8:e2:25:43:85:49:e6:87:bf:e9:e8:e3:81:
         70:c0:ab:8d:41:34:5e:cd:45:4a:59:d5:b8:49:b8:ee:90:08:
         da:34:ec:94:80:8d:50:b2:66:5a:7a:c3:4f:19:fb:4d:03:eb:
         77:f0:7e:c7:d7:b2:94:56:ca:d6:94:0c:d9:6a:68:66:8d:f5:
         21:67:12:93:0e:bb:97:f3:ea:8c:b1:e8:db:1a:77:8d:8d:61:
         10:27:f8:a0:46:f6:98:8e:36:7c:db:d3:50:76:57:f6:77:dc:
         cd:b7:ea:c5:ff:b7:c4:85:bf:2f:05:c9:87:2f:60:4f:36:fe:
         77:c7:9a:1c:22:c7:a6:16:c1:0e:43:f5:95:94:22:32:7a:78:
         d2:26:a3:00:18:c7:c5:73:d8:3a:a6:20:38:5a:55:c2:04:6b:
         5e:02:84:cb:f2:ad:a1:d2:e2:6f:b1:b1:da:aa:53:4b:00:17:
         5a:f4:e4:82:57:f5:0f:c1:85:a9:71:aa:26:f4:30:fb:e3:c0:
         51:15:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:25 2026 by rpki-client