Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa
File:                     35a3d056-2c42-3007-9cfa-92e09d07c46e.roa (raw, json)
Hash identifier:          dQECnR/5C4hQ1M4/W3UGn+PKE7fn+I1gA5AOuhnOdd0=
Subject key identifier:   DC:42:BE:A1:E6:BB:76:5E:F8:6A:5E:DC:D7:98:16:BB:6C:67:87:75
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584E253EFBA02CB34D80DA98BC80
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        136.184.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:fb:a0:2c:b3:4d:80:da:98:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=d5805799-dd8b-48f6-b2b4-fa283cd3ba49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:7b:9e:2d:aa:0e:c6:40:4e:f2:2a:61:a2:
                    41:91:3a:fd:70:ec:95:0a:c0:40:e9:55:03:25:2e:
                    f5:03:d4:06:78:2a:b1:b7:30:80:8b:c4:24:11:91:
                    b2:d4:d5:a6:fd:0a:12:f1:1e:88:e3:c6:70:07:b7:
                    12:43:37:d4:59:b5:06:6c:89:76:4f:80:ad:0e:d2:
                    d1:62:26:c0:64:d6:9c:f3:a4:83:01:b1:56:67:cc:
                    6c:4c:88:7f:0f:5b:c2:2a:74:be:ad:de:4d:48:84:
                    4a:f3:87:9a:02:b3:f6:43:69:34:05:1b:c9:39:92:
                    93:21:34:46:02:aa:d0:70:c7:7e:87:98:60:14:21:
                    c8:a9:f8:9a:9a:65:f5:3a:ea:30:eb:7f:8f:36:e8:
                    61:d6:61:ec:dd:51:fe:0e:a5:37:de:e0:65:cb:f7:
                    94:18:7a:ae:ca:d0:06:46:b1:d1:f9:93:71:ef:8f:
                    e4:b1:3a:43:7f:f0:79:9a:94:c8:d5:61:12:6d:c9:
                    5f:42:94:84:dc:58:4d:20:16:a0:48:84:07:6e:05:
                    9b:85:7a:0e:4f:e3:2e:c4:b6:83:6a:52:e2:89:e5:
                    be:92:be:24:10:75:55:76:bf:be:63:58:6e:cc:3a:
                    df:7a:bd:70:51:05:e1:c8:21:d7:78:02:c5:f0:6e:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:BE:A1:E6:BB:76:5E:F8:6A:5E:DC:D7:98:16:BB:6C:67:87:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:56:95:a0:e3:e2:30:65:cd:2b:96:89:59:3e:af:15:66:a7:
         ef:cd:55:2b:06:1f:fb:00:9c:38:a9:45:5d:a6:19:e5:ea:67:
         2e:7c:db:72:da:2e:96:44:44:13:da:6f:c4:7e:1a:ed:2e:99:
         63:44:7a:04:38:55:27:2e:15:89:1c:2f:67:17:9f:d8:b6:dc:
         99:0c:9a:2a:c3:e1:bc:12:13:ad:82:83:59:a5:7a:fc:04:11:
         ec:33:54:42:22:eb:5a:8b:f6:a7:af:6c:42:eb:e6:6c:c8:53:
         eb:6b:f3:93:1d:48:26:21:96:94:89:1d:6f:e6:90:e7:6c:1a:
         3e:6a:9b:1a:02:69:e7:69:68:ce:72:ce:f6:d3:46:e8:3f:56:
         5c:49:f0:9c:0e:36:36:9e:7c:b0:00:2c:6a:d4:d9:5d:13:f5:
         98:ae:c9:ea:d9:09:1c:a2:02:b8:03:f6:36:43:08:c4:90:af:
         a6:1c:c7:6a:86:e7:1c:1a:5a:16:22:9a:30:d9:3e:7f:d7:2d:
         fd:14:f5:8d:b1:af:91:5b:46:98:bd:b3:71:5b:2a:19:fb:e6:
         a3:5c:07:9c:f6:48:8e:77:30:c1:68:3e:10:00:98:19:bd:e5:
         81:f7:c8:88:05:ff:d6:be:b9:4a:07:8f:35:b5:60:d6:0e:bc:
         2d:1f:fb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:18 2026 by rpki-client