Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/7828704a-08b4-3ded-82e1-2b5e0b420c43.roa
File:                     7828704a-08b4-3ded-82e1-2b5e0b420c43.roa (raw, json)
Hash identifier:          LRWdqdmZOCp5GwP9ky/XWxCPuy4dsp1U8/vBKJAFGRg=
Subject key identifier:   3F:70:55:21:9B:C7:D3:55:F5:F8:37:64:4D:AE:3B:4D:FC:11:F6:62
Certificate issuer:       /CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
Certificate serial:       010D0C9F4328584F4976DA6BC91D02FFDA60BA90
Authority key identifier: B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/7828704a-08b4-3ded-82e1-2b5e0b420c43.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399252
IP address blocks:        136.227.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:da:6b:c9:1d:02:ff:da:60:ba:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3ff0577e-a76d-44c0-a144-4a572f1f1ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:d6:f9:e8:e8:08:c6:be:66:20:0b:2e:68:
                    3d:76:17:0d:fd:5e:cf:80:14:c1:43:73:3b:8a:ee:
                    ad:12:3b:12:36:8b:01:6a:04:3d:4e:36:6a:71:45:
                    1d:cc:96:2e:c7:9d:e0:44:36:07:1d:06:80:63:02:
                    39:17:8a:11:f2:45:2f:37:fe:3b:e4:24:94:bb:7e:
                    ea:9f:71:8a:1b:a7:f3:1d:43:28:a1:20:b3:e1:0e:
                    86:7e:8b:39:32:9d:1c:76:e4:00:fa:50:e8:05:37:
                    ba:4d:cd:93:0a:b7:13:d7:e6:ce:54:b0:20:3d:f9:
                    7b:1c:91:4e:41:8a:a1:a9:72:31:7d:95:c4:b8:18:
                    5b:28:58:47:e5:4a:3a:30:c3:83:15:9c:03:d3:aa:
                    c9:98:da:23:d4:a7:49:38:50:43:96:5b:b1:31:f0:
                    16:13:18:c8:23:ac:72:81:f3:68:d1:4c:36:5d:b0:
                    4b:7b:97:87:0e:da:68:fb:0e:35:f3:3b:05:c6:fb:
                    7c:60:8a:f5:2f:b1:d5:1b:87:17:5c:95:23:3a:40:
                    98:22:ce:9e:09:00:3c:3b:a3:b4:ab:69:38:91:6c:
                    30:28:b2:e1:f1:6a:ed:12:fc:c6:c7:0c:23:ea:8c:
                    86:ca:e2:d3:3c:24:26:16:7e:4c:02:d8:e6:d5:f8:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:70:55:21:9B:C7:D3:55:F5:F8:37:64:4D:AE:3B:4D:FC:11:F6:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/7828704a-08b4-3ded-82e1-2b5e0b420c43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.crl

            X509v3 Authority Key Identifier:
                keyid:B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.227.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9a:d8:54:c4:32:16:62:af:ac:32:96:d4:41:38:f0:4a:df:
         7d:49:b8:20:93:1a:7d:c3:42:d0:84:ba:ad:d9:9d:30:0c:18:
         12:b0:62:9b:9a:a8:f3:f4:f9:5e:a9:dd:64:db:0e:ca:21:12:
         56:18:a3:47:8e:d4:61:e3:fe:ee:ec:cd:ce:28:eb:18:43:32:
         5d:98:1f:9b:fd:ee:25:d6:1a:09:8c:ca:4a:c7:90:68:f5:87:
         bd:e4:12:06:d4:c7:4e:8e:1f:4c:27:59:78:f6:e3:8e:cb:28:
         e2:a6:23:11:34:9b:4b:29:9e:88:87:c0:60:0d:10:2b:ad:7c:
         84:f2:54:1c:e6:d9:01:f2:1b:9f:b0:a6:c7:ad:8f:c5:3d:86:
         70:3f:f5:2f:56:28:c6:e3:89:cd:67:9f:f3:57:0f:f6:d9:f6:
         11:40:a2:86:0e:d9:27:09:57:68:fc:34:c8:ce:c5:2c:7c:7d:
         da:0d:a0:14:d2:5e:cc:89:df:fa:a8:c0:fa:69:ac:5a:95:fe:
         a3:47:8f:0c:c5:bd:2b:a4:a3:ee:50:64:dc:01:ad:83:dc:ca:
         08:1d:0f:ac:5c:e0:7a:10:3b:d5:f6:08:6c:22:2a:39:a6:7f:
         30:d2:12:10:7e:a6:e5:19:b5:18:cd:cf:9f:48:ee:bf:a7:f0:
         63:58:54:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:06:07 2026 by rpki-client