Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f16411aa-9195-31e2-8b32-ffb4d9c323fd.roa
File:                     f16411aa-9195-31e2-8b32-ffb4d9c323fd.roa (raw, json)
Hash identifier:          dSLmd76k8VVt9RLaGtzUgzfxNJ3ZpRtNGDA238MFN1U=
Subject key identifier:   9C:D8:C3:DE:99:F6:69:3E:41:C6:89:AB:DF:95:E8:AA:22:14:AB:C9
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FA6DCAE64656B1957E200
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f16411aa-9195-31e2-8b32-ffb4d9c323fd.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        136.226.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:a6:dc:ae:64:65:6b:19:57:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=6830c54f-73c2-4a63-b67b-ae9076a41675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:9a:4a:93:e4:3d:22:a3:59:81:9d:64:5d:
                    fe:15:5b:2a:04:23:eb:7d:a9:4c:db:fd:37:18:4d:
                    94:7f:82:33:cb:5b:c9:90:7e:8a:47:cd:2d:14:b9:
                    10:13:a0:8c:3d:80:32:60:7f:b6:70:38:78:3d:94:
                    ff:f7:0d:72:ca:ab:34:52:c7:11:7a:99:25:04:a3:
                    be:ae:4b:2c:7e:8a:3f:d5:af:19:aa:7b:48:52:f7:
                    d5:5c:78:82:1d:4a:23:a9:36:88:b8:97:ca:79:c2:
                    5d:13:f2:9a:18:ac:c3:f8:fc:0f:da:4c:ea:84:03:
                    18:ef:06:d9:83:f4:83:a3:0d:7d:70:34:13:0b:0a:
                    04:e2:e0:2c:82:cb:36:ed:bc:54:66:6b:26:04:e2:
                    66:79:8d:95:3c:95:20:f7:f6:2d:ac:8d:a8:e7:0a:
                    9b:ef:6b:32:d2:14:a0:9f:22:95:23:71:8a:4a:f1:
                    26:18:c7:70:ee:f6:21:8f:0e:d8:07:da:44:88:80:
                    56:49:f8:31:67:d9:fc:82:fe:6b:0f:f5:0b:7c:b2:
                    e7:c0:13:e8:02:4b:c7:32:f0:ef:e1:8c:25:4d:c9:
                    7e:69:05:9a:b3:54:ed:08:08:56:14:4c:12:78:0d:
                    8a:47:63:50:4b:cb:5f:bc:3b:aa:6f:58:60:61:bf:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D8:C3:DE:99:F6:69:3E:41:C6:89:AB:DF:95:E8:AA:22:14:AB:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f16411aa-9195-31e2-8b32-ffb4d9c323fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:e6:6e:1e:a1:4b:d1:61:df:1a:ba:43:93:bd:bf:7f:60:74:
         50:b3:dc:9a:d6:9a:40:60:cb:b9:a9:e4:43:65:7b:84:5f:47:
         08:e6:6d:a6:50:3f:16:6f:e5:28:21:a2:31:6f:c1:64:4f:4f:
         eb:8d:f3:05:15:0e:50:36:8d:bc:1a:32:d0:79:2b:8f:a7:8c:
         41:71:67:32:25:43:50:7f:7e:9c:4a:79:c6:38:28:a4:2b:4c:
         5d:50:7d:c3:05:39:e3:4a:d6:df:b9:f1:b4:2e:ea:40:1f:38:
         bf:cb:c1:0a:7c:85:8d:0a:3b:2e:6a:35:1f:58:36:7e:c9:85:
         a8:3f:b2:e6:04:32:55:1b:29:fc:89:7a:41:05:7f:c9:5b:54:
         bf:12:27:b4:38:e8:8b:91:71:a5:12:8b:1d:20:bf:21:70:c5:
         cf:50:e1:cd:ff:c5:74:c6:8b:15:df:74:f9:0e:ee:8e:1c:ce:
         3b:7d:eb:ba:df:a0:7b:9d:bb:93:15:3a:13:60:90:96:38:f6:
         b9:91:2a:17:01:e9:47:d2:45:65:db:fc:82:50:7a:42:e5:0b:
         5f:42:17:ff:01:9f:0a:6a:36:b5:30:ab:5a:eb:d4:be:91:c0:
         b1:d4:57:40:fb:7a:1f:2d:87:f9:82:0c:3d:c0:87:02:70:8e:
         91:0b:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:29 2026 by rpki-client