Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa
File:                     42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa (raw, json)
Hash identifier:          RhWSx1AiAVdNMCWKDmrKsJzhMxIIKWzrR3Y58YwHllo=
Subject key identifier:   9D:89:5D:CE:38:F7:67:7E:4B:00:A4:C6:7E:19:7D:29:DA:32:B2:EA
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584E253F00035F9F07C68CD3E340
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        136.184.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:00:03:5f:9f:07:c6:8c:d3:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=79bd9d1a-c042-401e-b71e-98aa0cb18014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:98:aa:fc:3a:7b:17:d2:77:4a:ed:9c:da:
                    ae:04:67:0f:6e:c7:e6:cc:53:27:1d:31:37:86:76:
                    67:ce:4b:fc:21:c1:bf:c9:be:69:e5:5e:81:3e:53:
                    ce:fb:a1:ce:13:ee:d3:c7:19:8a:93:2a:30:51:5b:
                    71:cd:45:ca:f0:f9:29:c3:75:17:b6:58:a2:2a:45:
                    c0:a7:80:69:d8:af:41:a1:b0:44:50:a6:e6:a5:8d:
                    6b:d7:58:fc:3d:c2:b7:eb:b4:b4:17:ed:60:13:bd:
                    01:7f:f7:ee:7a:8a:e6:59:31:cb:16:de:1d:c3:3c:
                    82:8d:36:b8:e4:22:7b:4c:87:dc:37:bc:36:8f:02:
                    e8:aa:18:2f:cc:f7:bc:a4:3b:bf:6e:79:1a:f8:b7:
                    d2:1a:03:da:82:9c:05:d8:7c:40:8d:3e:40:07:d9:
                    1c:95:82:86:47:d0:35:48:03:70:78:5d:87:ab:7f:
                    bf:f5:53:a3:bb:35:36:d9:dc:c1:34:28:58:29:f9:
                    79:79:14:b6:e7:71:8c:d6:4b:ff:0b:78:5b:e4:35:
                    cc:ef:92:a5:b9:35:4f:52:e6:bb:22:74:0c:09:20:
                    ad:a7:35:3c:ff:fa:ca:f7:f3:ef:6e:3e:e6:b5:13:
                    ec:e1:30:ef:82:a4:f8:12:cd:9e:48:d7:17:7a:3d:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:89:5D:CE:38:F7:67:7E:4B:00:A4:C6:7E:19:7D:29:DA:32:B2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/42781bb7-cb5b-31f8-9841-b39bfd52c6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:eb:0d:7e:97:f0:11:28:f0:55:e4:bd:03:98:45:b9:11:39:
         18:58:56:6a:1b:e8:0e:98:c3:ff:f7:2d:5a:b1:93:3c:ae:74:
         fe:55:29:49:b8:cc:b9:23:70:e8:65:d4:74:02:92:dc:35:56:
         6e:55:2e:01:5e:11:f7:b5:ce:1a:2d:54:c8:fc:8f:12:ed:62:
         63:d6:2c:44:f1:7b:d8:0c:fe:50:fd:51:ff:c4:03:6b:d7:72:
         af:c6:dd:b3:86:fc:ed:1b:54:ad:b6:58:40:75:29:7f:3a:6d:
         da:af:92:74:ff:94:66:d1:92:11:bd:1c:26:fb:83:2b:c3:ff:
         7e:61:62:74:e7:36:8a:97:e8:37:3a:73:10:94:ad:75:75:79:
         1a:5b:73:f2:1a:ca:53:bd:fa:d0:bc:d7:62:de:95:71:59:31:
         1a:30:d5:42:42:29:69:2b:40:5a:64:80:ec:4d:d3:c2:cd:39:
         47:d8:08:e9:a4:35:d1:f2:d4:cf:00:de:91:94:06:55:c1:4d:
         4c:d5:06:b8:2f:0b:07:94:3d:b2:2f:4a:13:b1:69:8f:eb:13:
         29:f7:77:7d:1c:67:b3:b4:48:62:1d:4f:b8:f5:6d:3e:b8:19:
         53:bc:ec:3f:d2:3f:8d:c3:12:f0:6d:04:ae:ab:be:78:1a:81:
         de:a1:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:00 2026 by rpki-client