Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b77425ee-5ffc-3449-8273-f2d994133cf6.roa
File:                     b77425ee-5ffc-3449-8273-f2d994133cf6.roa (raw, json)
Hash identifier:          RZbDrILhAZYMUz/u7QXo4KD3NoRwznoX03iGU3YnElw=
Subject key identifier:   3B:4D:3F:75:BA:C3:AF:6D:6E:BD:33:26:40:28:87:E2:DF:46:B1:9A
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FA072A158EBAC81C85240
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b77425ee-5ffc-3449-8273-f2d994133cf6.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        136.226.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:a0:72:a1:58:eb:ac:81:c8:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=aeae7cd1-903e-4ea8-86f9-e8361361a0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:4f:96:32:3a:57:69:9d:25:21:0f:9a:2c:
                    e8:08:da:4b:96:8c:48:bc:37:e7:16:7f:50:76:b8:
                    1a:fe:57:14:a1:8e:1b:44:f7:0d:3d:65:d3:1d:da:
                    04:95:bf:a7:2c:15:c4:98:ea:da:88:13:10:21:fb:
                    65:9f:aa:ff:07:4f:fa:60:41:91:db:0f:3d:7b:d8:
                    02:68:fd:37:ba:92:4a:a1:c0:3c:4f:1a:2c:69:07:
                    ba:55:f6:3b:9e:cd:cc:9d:4e:07:8e:46:79:dd:e1:
                    4b:ee:a2:1a:9d:b3:0a:b9:6a:84:da:20:db:6b:91:
                    6f:f7:98:c4:fa:6b:48:fe:29:1c:45:eb:2b:51:18:
                    f2:0a:23:f0:e8:1b:a9:d7:19:84:79:22:a5:c8:3d:
                    b5:ea:8e:ab:86:a1:32:f6:bb:bf:43:10:eb:f0:fc:
                    e7:e7:6c:47:7a:cd:16:0a:09:e8:2b:ca:91:a2:73:
                    20:8f:14:d7:ad:c2:5d:ff:ca:0f:5f:66:54:9f:18:
                    d7:a9:4b:49:1d:ad:d3:10:73:f2:1d:f2:33:bd:c1:
                    8a:2b:b8:3a:55:d0:5e:1b:0b:bb:b2:65:27:20:67:
                    64:13:87:3c:fe:ce:06:d8:59:59:b0:ef:a2:2f:be:
                    37:59:d9:bd:29:d4:41:59:c0:86:c3:33:13:fe:83:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4D:3F:75:BA:C3:AF:6D:6E:BD:33:26:40:28:87:E2:DF:46:B1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b77425ee-5ffc-3449-8273-f2d994133cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:03:02:1d:d7:ea:09:41:e9:c8:83:d3:81:20:38:7f:2a:97:
         5f:98:b8:1c:fb:97:a1:13:ba:d0:10:02:31:82:82:2e:80:d7:
         0a:64:78:5c:a9:ce:41:d1:e7:2b:f2:7d:b4:02:18:65:01:c3:
         92:84:d3:41:0f:a8:21:54:69:20:27:04:b9:3e:c1:94:b2:6a:
         63:0a:f6:64:f4:fd:8e:f3:74:7d:1d:ed:b2:c4:22:74:ba:11:
         3a:7c:6a:a8:0a:a2:74:16:9f:17:68:c1:e3:6f:d6:c0:e2:8b:
         ae:f8:3b:71:f1:1f:79:99:fb:f0:43:2b:da:fa:47:0e:5b:be:
         fd:50:3a:99:6b:d3:19:9a:68:49:56:44:64:ed:55:d7:b6:69:
         7c:cd:bb:c5:9c:4f:55:d4:e1:b9:2f:6b:ef:c5:74:c7:9f:a4:
         1b:c8:4c:14:22:35:36:cd:fb:a3:48:fd:42:cf:dc:30:c2:d0:
         76:5b:7c:24:8d:92:88:c2:3d:c5:76:e6:9e:77:c7:e9:bc:1a:
         ad:94:95:73:88:70:07:43:7b:01:d1:e2:0b:f8:10:8a:5d:ab:
         c8:e9:0b:e6:58:75:ce:b8:7a:34:eb:08:52:c2:76:fa:b0:2d:
         1d:e5:56:16:be:f7:2e:14:a2:f9:df:ab:bc:76:fc:c4:5f:2a:
         35:b4:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:24:07 2026 by rpki-client