Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/490ce204-77bd-331a-8935-0cd50cc85c8c.roa
File:                     490ce204-77bd-331a-8935-0cd50cc85c8c.roa (raw, json)
Hash identifier:          tZo+rvoIDarFP/MqylqYNswgL2nf888xONjSKy7U04s=
Subject key identifier:   6D:68:D1:A7:25:2F:D3:0F:58:EC:A9:FE:1B:A1:D3:C2:1C:CF:AD:AF
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4F9243A6335B2EC3A1AB80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/490ce204-77bd-331a-8935-0cd50cc85c8c.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        136.226.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:92:43:a6:33:5b:2e:c3:a1:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=16e097a0-007a-4177-b5cf-daec61d7baaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f7:26:b6:fd:22:e9:9b:4a:12:a5:3f:f3:2e:
                    5e:4b:2a:b5:4b:68:cb:74:ee:bb:7a:86:9e:91:02:
                    37:bd:04:4d:73:a0:74:38:cd:c4:bd:0e:9f:0b:8b:
                    00:d3:c7:15:de:6c:17:15:ce:47:1c:cf:48:f0:67:
                    3c:5c:73:7b:97:f2:94:27:c3:95:5e:a3:57:6f:91:
                    6c:d6:0e:b5:2e:bc:e9:21:e2:fb:fd:e5:f8:70:80:
                    67:b0:69:e9:22:23:1e:8e:8d:8f:73:a8:a1:d4:eb:
                    1f:17:ae:3d:57:cb:80:27:51:4c:ed:88:04:1f:1e:
                    b2:b8:f3:cd:85:ee:7c:f1:27:ae:62:64:45:74:6e:
                    d4:27:82:78:09:7a:84:15:eb:0e:dc:4e:d5:2d:d3:
                    1d:40:4a:0f:a8:a7:bc:2b:d5:b9:54:71:12:53:b5:
                    37:c0:d0:fc:ac:bc:b7:63:11:8e:6f:67:84:fa:7c:
                    e1:99:99:3b:85:57:c5:cc:38:0b:52:49:9c:25:11:
                    be:06:82:a8:74:32:53:29:57:64:bb:a9:eb:00:c4:
                    29:c8:72:35:82:ff:75:5d:9a:11:05:bc:46:7d:6d:
                    c1:47:59:c1:ba:95:8a:95:3a:9e:a2:3e:a8:f4:9a:
                    98:3f:79:8b:a8:6d:1f:81:c4:5e:4d:f3:8c:e2:c0:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:68:D1:A7:25:2F:D3:0F:58:EC:A9:FE:1B:A1:D3:C2:1C:CF:AD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/490ce204-77bd-331a-8935-0cd50cc85c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:dc:03:c9:59:c7:b6:5a:58:e7:f5:2d:d4:f3:ea:7a:3b:d5:
         0b:6d:1e:00:fc:55:08:e5:19:ec:fd:1e:e0:72:28:ff:b2:24:
         dc:60:ea:b7:ce:a8:a0:08:c0:9b:18:46:ec:ee:06:6f:b6:36:
         b8:7f:70:2f:e0:dd:d2:b5:66:e9:8b:df:0f:14:5f:91:3a:cc:
         11:72:1d:48:f7:c5:09:90:78:78:98:7d:55:ec:20:af:f6:35:
         64:68:16:dc:61:71:df:bf:0d:26:05:97:c8:c9:b5:79:d0:33:
         62:4a:ca:17:dc:2f:11:70:75:2a:b2:52:26:fa:e1:b9:ef:76:
         e0:58:d2:b7:ea:a6:2f:e0:07:28:84:5d:45:bd:0f:5c:37:f0:
         67:4e:f4:f7:d6:7d:17:df:fd:63:a8:a8:c3:37:a4:dc:cc:d0:
         eb:ad:26:e4:d2:6b:50:c1:b9:73:03:e2:19:dd:b3:bb:5a:b9:
         85:d3:10:e2:f0:f3:07:18:1b:0c:29:a3:db:d3:89:ea:04:86:
         ac:91:4a:f7:91:d7:38:2c:c0:b7:a7:d9:d3:dc:3e:5a:2a:af:
         f5:5c:c7:3a:90:66:e6:5a:69:ad:77:9f:93:b0:aa:fc:be:80:
         52:fc:14:a0:1f:9e:1d:4f:bb:84:51:90:3b:b6:c1:9d:e4:f8:
         5c:71:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:41:17 2026 by rpki-client