Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/236f9628-f80f-3f42-b7dc-40279bc30e8a.roa
File:                     236f9628-f80f-3f42-b7dc-40279bc30e8a.roa (raw, json)
Hash identifier:          3Cd18mxDdB3sRrUGoT2wabCQVXtm2NQUVx5Euj/UQXY=
Subject key identifier:   36:2F:AB:A9:C9:BB:C6:29:39:A7:94:D0:94:B8:DA:DF:ED:2C:83:05
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CE947AFB3BC4C2B95FA40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/236f9628-f80f-3f42-b7dc-40279bc30e8a.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        136.226.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:e9:47:af:b3:bc:4c:2b:95:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=89463e3d-ce4f-4032-a5d9-7e717685d47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6f:0b:af:12:cc:5b:24:d8:e8:10:37:b3:5a:
                    cc:62:8e:da:50:3b:3d:64:42:9e:f0:5d:cf:41:8a:
                    f9:e2:b9:d1:4b:f7:30:da:29:12:25:ba:af:9b:04:
                    d1:d0:7b:7c:b1:bf:8a:3f:e9:bf:13:b5:aa:ae:c7:
                    a6:ee:cc:25:86:02:04:f9:f3:8f:2c:49:7f:79:48:
                    65:8c:26:fb:63:44:8f:45:f1:bd:ac:97:cf:4b:5f:
                    3e:20:a6:fe:32:dc:e7:18:2f:9e:2f:66:21:75:02:
                    36:c2:15:a3:85:4d:97:b3:79:24:a6:f6:dd:ed:55:
                    e0:68:5e:17:f5:de:a9:4a:22:5c:7f:00:8b:e4:43:
                    45:f6:a0:b3:8f:63:61:37:9b:29:ed:2d:46:87:53:
                    64:69:0a:d1:27:be:1e:a3:a4:f0:b7:30:80:ee:40:
                    81:e0:fd:bf:9e:99:e4:9b:aa:f2:80:9b:ee:87:54:
                    39:49:ef:fc:55:10:2c:44:21:4c:fe:f2:28:4b:86:
                    66:0e:17:13:e3:a4:57:97:5e:d4:e9:5b:ee:62:bd:
                    d7:14:9b:8c:00:55:9b:2e:7c:e2:95:3e:f9:f9:75:
                    d9:40:27:97:0f:d7:a5:67:1c:25:26:f7:66:46:9d:
                    c8:8f:0e:b6:02:73:5e:22:75:25:82:9d:12:3a:0e:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2F:AB:A9:C9:BB:C6:29:39:A7:94:D0:94:B8:DA:DF:ED:2C:83:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/236f9628-f80f-3f42-b7dc-40279bc30e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f6:97:ec:b4:0e:9b:96:16:fa:9d:33:10:ee:50:05:83:c5:
         02:40:30:63:9a:59:b7:d7:18:e6:23:44:b6:7f:7d:23:97:b3:
         f1:24:32:2a:1f:90:96:1f:2f:de:da:2e:45:bc:c2:2a:e4:d1:
         0a:6e:69:f4:90:29:23:35:d8:ae:2a:b9:a8:7b:77:4e:b6:61:
         17:2c:90:4a:89:89:3c:ef:e0:7f:80:89:1b:ab:2e:78:1d:61:
         e8:43:76:8b:23:13:3f:0b:74:eb:9e:54:8c:cd:3f:9c:d7:65:
         2b:eb:b3:e3:e7:4d:b4:91:cc:c8:b2:25:00:ee:7e:d8:b7:1b:
         b5:67:28:84:1a:1a:9e:ab:17:ac:c3:5a:6f:65:4d:2e:a7:4a:
         14:d5:2b:3d:1f:d8:4c:a7:98:6a:9b:61:19:e6:ef:2e:2b:ca:
         82:82:b3:0f:96:5d:82:a5:33:70:e7:d2:e5:9f:7c:87:5d:8f:
         6c:27:4c:f5:d7:0f:6e:c9:2f:c1:d8:c9:27:2b:0a:4b:ba:f6:
         18:f4:a2:6d:c9:d0:a6:98:12:fa:30:93:d7:e6:8a:53:81:2b:
         44:77:6e:85:cd:a6:56:5f:5a:c8:01:5f:91:93:31:95:2f:76:
         ce:5a:7e:ee:79:b1:a4:98:32:07:20:c7:71:d5:1a:fc:de:76:
         ec:75:50:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOlHr7O8TCuV+kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
ODk0NjNlM2QtY2U0Zi00MDMyLWE1ZDktN2U3MTc2ODVkNDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W8LrxLMWyTY6BA3s1rMYo7aUDs9ZEKe8F3P
QYr54rnRS/cw2ikSJbqvmwTR0Ht8sb+KP+m/E7Wqrsem7swlhgIE+fOPLEl/eUhl
jCb7Y0SPRfG9rJfPS18+IKb+MtznGC+eL2YhdQI2whWjhU2Xs3kkpvbd7VXgaF4X
9d6pSiJcfwCL5ENF9qCzj2NhN5sp7S1Gh1NkaQrRJ74eo6TwtzCA7kCB4P2/npnk
m6rygJvuh1Q5Se/8VRAsRCFM/vIoS4ZmDhcT46RXl17U6VvuYr3XFJuMAFWbLnzi
lT75+XXZQCeXD9elZxwlJvdmRp3Ijw62AnNeInUlgp0SOg7W5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDYvq6nJu8YpOaeU0JS42t/tLIMFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjM2Zjk2MjgtZjgwZi0z
ZjQyLWI3ZGMtNDAyNzliYzMwZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK/2l+y0DpuWFvqdMxDuUAWDxQJAMGOaWbfXGOYjRLZ/fSOXs/EkMiof
kJYfL97aLkW8wirk0QpuafSQKSM12K4quah7d062YRcskEqJiTzv4H+AiRurLngd
YehDdosjEz8LdOueVIzNP5zXZSvrs+PnTbSRzMiyJQDufti3G7VnKIQaGp6rF6zD
Wm9lTS6nShTVKz0f2EynmGqbYRnm7y4ryoKCsw+WXYKlM3Dn0uWffIddj2wnTPXX
D27JL8HYyScrCku69hj0om3J0KaYEvowk9fmilOBK0R3boXNplZfWsgBX5GTMZUv
ds5afu55saSYMgcgx3HVGvzedux1UIk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:10:55 2025 by rpki-client