Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2be8a68-693b-3abf-82e3-e543875ef412.roa
File:                     b2be8a68-693b-3abf-82e3-e543875ef412.roa (raw, json)
Hash identifier:          rbpQXEcRcskUWyThxFOvty1xlm+ZO8wK1Bl5pRFALWM=
Subject key identifier:   3D:2D:2F:A9:58:9D:A8:65:DD:37:83:25:AC:F5:80:26:A1:88:1E:1B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EA2DFB88F005DA49ECC9CF8A0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2be8a68-693b-3abf-82e3-e543875ef412.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     53813
IP address blocks:        136.226.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:b8:8f:00:5d:a4:9e:cc:9c:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=9b3815c3-5d2f-4679-88a8-c4737ff27a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:6d:15:66:27:32:5e:54:b4:95:10:bb:76:
                    8e:ad:33:f1:31:09:69:fd:34:b6:ef:54:0d:4e:17:
                    ba:1e:8c:81:81:20:d1:d4:85:47:97:6e:0b:6e:55:
                    ce:4b:40:ea:58:1e:40:d4:d4:d5:65:8d:c4:cd:bc:
                    c6:78:da:29:e0:4d:68:ad:85:1c:3f:24:b0:ca:fa:
                    30:da:38:d5:96:ef:f7:ce:33:44:68:ec:f5:06:d9:
                    73:fb:59:cd:57:59:8a:55:27:9b:5a:51:21:02:73:
                    d0:d0:e7:3e:9d:32:37:ce:f4:3a:39:eb:35:3a:7a:
                    9a:66:b2:34:f7:cf:72:73:f5:00:fc:4e:45:74:35:
                    c9:b7:1b:74:52:02:08:cb:23:2d:05:af:94:c1:76:
                    f9:9c:d5:60:ab:16:05:82:af:05:d4:18:f9:66:50:
                    53:bd:73:a7:18:10:f6:f6:45:90:38:55:60:61:eb:
                    de:ba:ae:a1:21:1a:76:63:b9:c2:71:37:56:c8:3c:
                    cd:81:fb:85:1a:66:73:01:8d:63:16:a4:10:78:1b:
                    23:1c:9b:1d:ae:00:0b:b4:ed:29:8b:74:fe:d3:c2:
                    bb:62:a3:f5:fe:7a:bf:14:a1:b1:f5:8b:3b:60:a6:
                    8f:7b:bb:64:93:9f:8f:82:b3:21:33:33:fb:75:e6:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2D:2F:A9:58:9D:A8:65:DD:37:83:25:AC:F5:80:26:A1:88:1E:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2be8a68-693b-3abf-82e3-e543875ef412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d8:49:08:1e:30:ec:2f:70:00:9b:dd:29:77:1e:1f:e0:b9:
         e1:85:73:b3:af:35:a8:ec:37:b8:cc:9b:59:f2:dc:f5:f3:b5:
         61:af:1e:2a:e9:8c:81:59:ca:be:9c:b5:00:4d:b0:79:b6:32:
         a9:e0:3b:e7:ad:e3:36:99:78:ee:0c:29:44:fa:58:ab:bb:7a:
         ed:b7:ea:09:83:55:ce:d9:7e:3c:85:23:de:25:48:ad:11:bb:
         3f:28:b4:d6:4a:85:95:cb:c2:23:6f:73:2c:28:49:19:80:96:
         23:b3:db:52:d1:92:cb:6f:53:97:c4:11:b7:f1:0c:df:e4:80:
         ca:8d:14:e8:10:67:a3:d9:a6:32:82:be:31:19:ac:0f:7c:3d:
         cb:8d:6b:00:b1:4a:74:ba:13:84:ed:fc:56:ba:ea:b9:a9:e8:
         51:1e:b6:32:22:25:03:0b:db:b2:17:f0:5c:28:c9:ee:83:12:
         10:90:ed:23:a9:6d:06:ea:44:dd:3b:12:35:eb:13:4e:31:d2:
         09:1f:6a:a3:d6:7c:ee:19:94:d2:07:1b:46:2f:f2:a0:46:07:
         14:ab:e6:1b:77:ae:0b:35:47:37:cb:98:ec:a7:d5:e4:9d:bc:
         20:fd:94:f8:36:21:4c:20:88:6a:a9:f0:be:ce:c1:c3:9e:35:
         94:08:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:49:31 2026 by rpki-client