Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e57d35c-436f-36da-9268-071790ff1ac8.roa
File:                     3e57d35c-436f-36da-9268-071790ff1ac8.roa (raw, json)
Hash identifier:          Co1j1ibZ6XpxWiRgYddVKWMVRdWOi9uLFIo6k2P8YpY=
Subject key identifier:   71:4B:8D:D4:36:49:EC:F4:0F:48:C7:5E:07:8B:D3:7E:63:E1:2B:96
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CED6C0C4566E6DE3A6080
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e57d35c-436f-36da-9268-071790ff1ac8.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        136.226.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:ed:6c:0c:45:66:e6:de:3a:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=957e072d-e5e2-43f3-bb70-a03641071a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3b:97:6c:83:7d:7c:23:2f:ba:85:ef:e7:18:
                    7c:d0:55:c6:d0:b3:28:b7:7c:6e:5d:6c:83:57:ae:
                    0c:25:ad:00:7e:76:72:83:0e:0f:5f:f4:1a:74:ab:
                    7c:d4:bb:81:f1:d2:40:ed:bf:93:1e:42:dd:3b:15:
                    9d:08:a5:7c:b6:20:8e:b9:98:b4:33:41:a5:7f:fa:
                    6a:25:6d:11:36:ff:50:74:77:56:2e:73:ad:0a:be:
                    64:a3:ef:da:be:43:af:61:9a:33:f2:85:60:c2:8f:
                    28:b7:67:9d:66:8c:b6:4f:ab:47:80:14:10:3a:00:
                    5e:81:10:bc:32:12:e2:af:4e:d5:82:a5:3f:98:ff:
                    08:d9:1b:f7:85:51:2f:30:38:93:08:e1:53:d6:e9:
                    3a:bd:a4:dc:79:b7:2b:df:b6:2a:7a:05:8f:fe:29:
                    ac:66:0c:a4:49:60:0d:85:26:64:81:ec:83:5c:ff:
                    1a:3f:51:b9:2b:ee:83:ca:b8:c1:af:df:62:17:f9:
                    06:b7:1a:84:d9:1c:f5:bb:eb:60:c2:4d:75:4d:32:
                    1a:99:01:c4:22:9f:74:2b:09:e6:ec:ef:e4:0a:97:
                    42:22:78:14:9e:0e:57:58:c7:92:36:6e:d3:cd:82:
                    d4:6c:c3:13:f4:1f:0b:2c:f8:4d:ce:70:59:5b:41:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:8D:D4:36:49:EC:F4:0F:48:C7:5E:07:8B:D3:7E:63:E1:2B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e57d35c-436f-36da-9268-071790ff1ac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:2c:25:72:90:f4:56:0a:a7:83:20:10:8c:74:c4:19:3d:
         40:f1:c3:98:b8:52:8f:dd:b7:22:21:ca:32:0e:dd:92:bf:16:
         c1:be:e3:ef:70:ee:2e:ea:ff:8e:ae:51:b7:80:fb:69:86:03:
         46:6a:66:2a:c6:50:07:8c:8e:f5:ff:26:ce:98:47:64:a2:a6:
         04:78:a8:64:2a:94:2d:1c:09:7c:9b:53:fe:d2:be:c6:61:22:
         f8:13:d9:9b:3d:4f:fe:0b:15:01:82:fd:b9:ee:0c:5a:2d:62:
         75:1e:99:ea:bb:56:08:be:92:a4:fd:a3:d8:98:55:9e:ca:a0:
         7a:3e:be:25:03:a5:4c:29:0d:28:14:ca:c7:b4:18:a4:dd:34:
         8f:88:44:66:df:07:d4:13:33:ef:98:4e:64:b4:58:e2:39:42:
         1c:dd:a8:fb:ce:9f:f3:bf:0d:5f:51:1e:43:d1:ce:9a:51:f2:
         7d:de:95:29:48:da:98:fc:b3:17:a6:57:dc:b0:7f:74:50:1b:
         e8:64:4f:3a:72:09:7e:27:4e:81:18:e1:41:49:23:c9:d6:cc:
         cf:a6:86:14:55:09:79:40:94:da:dd:96:00:73:16:b2:86:67:
         ea:d7:12:70:13:58:15:e4:db:a0:18:12:eb:a0:d7:30:a8:25:
         cc:b4:41:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:46:44 2025 by rpki-client