Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/635c034d-6d0c-34f2-849b-d85c78053351.roa
File:                     635c034d-6d0c-34f2-849b-d85c78053351.roa (raw, json)
Hash identifier:          ZL3PoIQm0aiNz7KVBW4XDE8J1BQ13wIn3P9SRkU2Zv4=
Subject key identifier:   B8:7D:DE:6B:A6:0E:BC:7F:27:67:52:EE:96:69:48:8D:5F:30:D1:54
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584CE7921C73C97D523EDDCACB54
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/635c034d-6d0c-34f2-849b-d85c78053351.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        136.184.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:1c:73:c9:7d:52:3e:dd:ca:cb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=34252390-308b-4519-a2c5-df3bfe9bc19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:bd:c0:6e:ba:3a:0b:7a:e2:0f:85:28:65:
                    14:0d:5d:8e:cd:2b:8b:52:a5:e1:1b:ff:e3:40:32:
                    e9:4b:0c:92:04:b8:41:9f:d1:75:6f:94:1a:33:c9:
                    ca:68:6f:17:c6:09:72:4e:5d:a6:e2:7b:5c:42:2e:
                    c1:7d:e6:91:d9:cc:cf:11:c0:b6:98:8d:45:81:99:
                    56:2d:83:de:bb:59:22:9f:f4:71:46:67:52:d5:8e:
                    db:f5:35:60:d2:d1:96:08:96:dc:26:86:fc:67:16:
                    c8:7b:3d:aa:37:8c:a7:7e:15:43:3d:6a:1d:2c:15:
                    67:d5:1d:62:c2:fb:be:92:ee:d5:22:fc:89:70:99:
                    c4:58:64:7a:36:70:b3:1b:af:cf:60:e8:70:36:5a:
                    aa:50:30:04:e5:cd:d6:34:27:c2:97:84:a6:7c:0f:
                    9e:83:97:b1:59:c2:2f:ac:09:6b:ee:2d:b7:22:8c:
                    5a:14:82:aa:3b:30:2d:10:90:12:c6:8b:13:f6:fa:
                    b6:fd:5e:7f:17:8f:8a:43:4e:11:d8:37:5d:79:6d:
                    c3:13:a3:4d:82:33:6a:40:e0:07:a9:67:bd:46:71:
                    b6:f0:4a:e6:6f:e1:1f:08:a9:b3:b4:f0:d0:42:89:
                    29:0d:11:4e:0d:f7:b5:53:dd:2b:0b:d6:a8:5a:e5:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7D:DE:6B:A6:0E:BC:7F:27:67:52:EE:96:69:48:8D:5F:30:D1:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/635c034d-6d0c-34f2-849b-d85c78053351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4e:9b:30:88:2d:fc:95:65:c7:09:0e:df:7b:3f:6d:fa:bd:
         8f:c6:21:73:13:d5:fc:71:9f:64:41:ad:56:a9:c7:47:5a:5a:
         65:2d:db:2b:aa:68:94:12:ad:b9:28:ac:e2:f5:36:cd:fc:ab:
         64:fe:f7:85:11:a6:f3:a6:d1:cf:2a:66:61:ff:d8:cd:72:05:
         c7:4d:76:61:61:c4:05:53:21:af:1e:e2:36:5d:ea:e4:88:98:
         48:7d:06:82:de:b9:16:9d:54:e0:c2:33:95:1d:5c:c7:d9:48:
         f9:09:ca:28:4f:3a:9e:f9:1e:dc:b5:37:da:c6:fa:84:de:2f:
         cc:4c:c1:a8:93:73:b3:30:59:7b:73:f2:89:71:50:ce:ab:dc:
         bb:2e:8c:a5:7d:9e:36:72:97:61:94:a5:66:0e:71:d7:a2:87:
         1a:ed:7c:2a:db:dd:ab:56:88:4f:3d:17:73:28:86:63:93:e4:
         7f:c8:f7:4b:e7:18:85:a1:b7:49:09:a7:12:37:29:bf:fd:f8:
         21:8f:a6:70:d8:fb:67:36:01:e8:e8:c0:58:a7:59:fe:d6:0b:
         77:3b:63:93:df:69:7e:4b:d8:9f:40:74:fe:a4:df:85:55:5a:
         e9:70:d9:7e:05:11:07:c8:24:65:7c:99:2b:df:5a:b3:b6:b0:
         8b:c1:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:19 2026 by rpki-client