Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa
File:                     df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa (raw, json)
Hash identifier:          kpODMleRrucengGALNR+pxd9Gtjs+gnbfycGsxPjWGc=
Subject key identifier:   21:B8:BB:34:68:8C:14:36:38:50:50:30:7C:A7:D0:F2:CE:AD:73:FA
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584E070089CA27DE8DD424AF9B80
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     401307
IP address blocks:        136.228.47.0/24 maxlen: 24
                          136.228.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:89:ca:27:de:8d:d4:24:af:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=dbeec945-7a8a-44bb-af9c-6db115c17315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c7:a8:57:6b:ec:68:2f:60:1a:b4:ca:47:99:
                    65:3a:f7:48:5e:4d:0f:b0:33:1b:cb:bf:9c:a0:f3:
                    6c:09:6c:fe:32:bd:86:9b:dc:a3:1a:77:91:8c:5f:
                    73:ae:33:21:27:3f:72:cc:86:6d:30:ec:ad:7a:68:
                    8c:19:34:2b:40:6b:cb:e1:44:fd:67:be:39:36:33:
                    32:0c:d3:3b:1b:be:78:95:bf:61:bf:c9:f3:74:ad:
                    95:47:07:2f:88:aa:b9:61:b9:df:74:8e:2c:1e:f2:
                    e1:e6:8d:0e:84:2b:c3:ce:90:08:af:ce:73:34:9c:
                    c5:3a:1e:e1:bf:bf:9f:e7:e0:da:77:7a:68:33:42:
                    b0:c8:29:05:8e:1b:f7:be:ac:ff:de:b4:1b:57:86:
                    41:88:37:71:87:9e:37:4b:93:c4:c7:6f:fa:ee:ce:
                    98:16:37:44:f4:42:59:fd:55:0b:30:76:04:96:a2:
                    ee:8d:14:c9:57:66:d4:65:5c:a7:3d:f3:64:b7:07:
                    38:09:01:a7:8a:7a:e8:ff:df:e6:d5:b6:9c:18:77:
                    a3:11:b2:8d:e7:8c:94:6c:ed:a5:fc:d2:71:1b:62:
                    94:18:1f:da:f9:26:34:f2:3a:50:92:c8:0a:7e:e0:
                    cb:86:c5:71:72:1a:a1:4a:8b:d0:99:a6:17:a3:22:
                    12:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B8:BB:34:68:8C:14:36:38:50:50:30:7C:A7:D0:F2:CE:AD:73:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/df1ffe2a-b939-303d-b875-b76f54cd6d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.47.0/24
                  136.228.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:82:f7:25:cb:a2:68:43:4c:48:f4:a5:7e:c4:47:f1:1f:43:
         9f:62:47:f3:7b:06:af:27:b6:82:4d:0f:fc:b6:74:e9:ca:0b:
         1b:0f:11:10:25:9b:96:7f:6d:53:30:54:17:32:3e:92:2e:85:
         8f:6b:a7:90:fd:49:dd:dc:bc:de:75:a4:47:cb:28:e7:be:26:
         f1:55:f0:f8:09:81:da:65:60:66:68:41:ff:06:d4:34:c3:2b:
         86:51:c4:48:3e:92:7f:c8:de:80:e3:6e:c0:56:ef:f7:b6:44:
         3a:43:77:51:e0:43:ee:ad:f5:c9:d0:c4:be:65:57:2e:4a:37:
         08:54:9f:90:6b:c1:5f:25:ba:ce:02:e3:b3:40:e9:a7:00:66:
         28:1c:16:1c:82:df:4d:7c:31:0a:bb:9e:fc:1d:b0:fb:37:a8:
         73:a0:07:16:ef:89:5e:12:ce:12:4d:f7:2e:c3:fd:48:27:78:
         59:10:24:c6:85:0c:01:60:c7:f8:5a:f6:18:3b:75:90:ba:e3:
         d4:63:a8:a7:31:ef:d9:59:d0:fe:22:6b:e4:23:f2:6f:c2:46:
         ff:6e:0e:cc:92:80:b7:cd:3e:70:64:58:86:92:f2:51:bf:15:
         f0:fb:5c:f1:41:0e:ff:ae:ab:42:bd:c1:99:b1:ba:ac:41:39:
         a1:b6:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:58 2026 by rpki-client