Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ac2c178d-d305-3196-8322-24867f79e011.roa
File:                     ac2c178d-d305-3196-8322-24867f79e011.roa (raw, json)
Hash identifier:          /cV8r3Hm0iPIVXx7EwwuzapHFKcqim3qBx8mQ0zTZPQ=
Subject key identifier:   68:22:61:5B:0E:F0:83:CA:D6:53:01:72:4D:4B:67:60:32:62:8B:F4
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584DFA707440C98F578B5433F7C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ac2c178d-d305-3196-8322-24867f79e011.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     53813
IP address blocks:        136.226.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:74:40:c9:8f:57:8b:54:33:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=d1cb342e-e3d0-4007-a0d6-81e2d285c3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ac:c1:bf:cf:3a:35:c6:4d:92:9a:a1:cd:57:
                    60:51:d3:13:1b:04:5f:4b:72:f6:ea:71:57:9c:b7:
                    6f:0c:90:03:06:8c:c1:3f:0d:4c:f6:ee:ba:a8:97:
                    0e:d2:c3:93:8c:b6:08:00:3e:2b:85:76:fd:53:db:
                    e1:ef:7b:d7:82:f9:64:fa:c0:0e:24:a9:18:d4:08:
                    c9:af:92:ef:1f:68:0d:47:58:1f:8d:71:96:01:e0:
                    29:18:58:17:77:55:d8:54:98:96:55:7e:75:e0:e0:
                    6f:74:17:30:71:c6:58:e5:64:91:ad:a0:3a:5b:bb:
                    fd:1c:e1:9d:93:ec:23:bf:dc:89:75:f4:96:ac:fc:
                    ad:3c:56:97:8c:91:4e:6e:15:f4:ec:a1:de:fa:8c:
                    43:a8:87:3d:32:99:11:9e:7a:6a:a5:f2:a5:97:1f:
                    8b:91:5c:a8:b7:a8:ac:de:da:1f:97:17:5a:9e:54:
                    65:6a:f6:36:72:2e:c1:77:8b:04:e7:ed:e9:70:ef:
                    e6:9d:0a:30:19:b4:74:a4:c0:8a:a4:85:2e:3a:63:
                    d7:22:4a:fe:7d:be:a0:c0:8f:da:24:97:96:ad:c2:
                    85:3e:b7:09:c6:66:8b:18:9a:b3:41:b5:b3:67:ca:
                    a5:22:e1:2c:d2:7b:fa:9f:4a:3b:29:c6:00:f1:e4:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:61:5B:0E:F0:83:CA:D6:53:01:72:4D:4B:67:60:32:62:8B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ac2c178d-d305-3196-8322-24867f79e011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:98:36:77:dd:3f:88:51:21:7b:2e:2b:c5:27:01:11:b4:69:
         ea:61:92:78:1e:f9:2d:39:78:00:e2:cd:b9:8d:e9:a3:c0:db:
         36:d7:9b:20:35:ae:71:51:8a:d2:b2:f0:65:40:5a:32:f8:83:
         ef:0e:c6:93:29:10:ed:fd:9a:ad:70:84:57:a4:98:4e:18:dc:
         86:b8:a7:bc:22:79:0b:76:3f:05:f4:b0:b7:f3:8e:b8:b3:70:
         ad:41:41:cd:03:62:69:eb:6d:03:c0:5c:b9:86:a0:cf:30:fa:
         75:96:07:b5:91:9e:f6:68:4d:7f:f1:2e:dd:6a:2a:fa:a6:fe:
         92:9a:92:b8:06:0e:f8:26:c1:f3:4e:82:e7:77:b9:1e:4b:d0:
         34:2b:f3:b7:62:5b:66:ff:cf:56:82:fc:65:7d:e4:d5:ea:7f:
         b3:37:f9:dc:80:8b:63:d1:c5:56:9a:20:8c:b3:94:33:e7:20:
         ed:1c:78:40:97:0a:06:35:99:8a:df:d2:da:80:d2:c6:8f:8d:
         29:68:d5:0a:a0:4c:f6:cd:cc:05:06:e0:6f:7e:93:9c:f2:4c:
         e9:45:ba:7b:f5:66:b2:3e:70:bd:0a:9e:bb:09:80:df:5e:80:
         27:be:ca:55:37:1f:1a:c3:8e:0f:04:80:76:e2:fc:54:7d:30:
         db:ae:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:13 2026 by rpki-client