Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/d33ccbb3-807d-3989-ad12-645534f47c21.roa
File:                     d33ccbb3-807d-3989-ad12-645534f47c21.roa (raw, json)
Hash identifier:          GPvGGKa6MPHobm3aQ70CkWfb5fLRN1sr89HSjbD8q/k=
Subject key identifier:   57:29:08:3A:6F:D3:46:E9:AD:42:9D:23:14:7D:1A:8E:8C:75:B0:D6
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584CE7921CB8ADEDE908905FA000
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/d33ccbb3-807d-3989-ad12-645534f47c21.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        136.184.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:1c:b8:ad:ed:e9:08:90:5f:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=b87695df-3d71-402d-8819-9a02dd23dd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:06:45:cf:f9:48:9a:e1:5b:80:45:87:eb:fe:
                    fd:ed:66:55:dd:1c:69:43:1e:9e:e3:4a:ad:e7:5e:
                    8a:1c:98:c5:f9:b3:6c:7b:aa:b2:b9:09:c9:af:fe:
                    c4:b1:4b:a5:9a:fd:81:81:a6:4a:d7:12:2d:fa:05:
                    69:1c:2e:27:c8:0d:ab:aa:7b:87:b8:e7:b2:75:73:
                    a0:61:c4:e1:68:03:b2:96:f8:69:d6:0d:bb:bb:0e:
                    58:d8:f9:d9:70:3d:ed:1e:6d:e3:98:e6:dd:bd:d1:
                    5d:cf:5a:65:2d:c4:00:06:79:cd:da:0d:2c:9a:00:
                    24:c4:e9:44:24:68:d3:12:9b:56:4d:23:29:3a:5e:
                    15:1e:c1:64:99:55:2e:3b:90:32:d6:8e:01:8e:e1:
                    02:ad:3a:b6:bf:f8:6a:96:b1:fa:33:b7:b7:65:88:
                    54:a4:18:91:4a:61:6c:09:d7:ab:cc:4f:fd:5a:8c:
                    b4:76:c7:09:02:5d:93:0b:07:34:21:33:90:73:a8:
                    72:8d:58:d2:00:20:bd:f4:54:01:0e:95:ee:7f:7f:
                    38:f6:82:0f:3c:bd:95:4a:7b:e7:14:bb:1d:de:e9:
                    2a:6a:80:da:b4:98:d7:4a:5a:e5:df:03:4e:54:dd:
                    dc:58:29:99:01:f6:3a:f3:a2:3d:ab:d8:de:9a:2e:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:29:08:3A:6F:D3:46:E9:AD:42:9D:23:14:7D:1A:8E:8C:75:B0:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/d33ccbb3-807d-3989-ad12-645534f47c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:17:c2:13:ea:94:e0:5f:64:3c:c8:11:05:f5:1e:bd:4a:
         e0:6a:f5:b9:a5:4b:1d:53:cd:cf:f2:b4:fc:c8:ac:0f:19:03:
         c3:38:41:16:fe:6a:6e:38:88:d4:86:b2:70:22:1f:d6:ad:06:
         e5:86:93:ba:41:f2:77:a4:79:1f:35:d6:5d:8f:c2:2c:8d:b4:
         f6:06:cc:a4:77:b7:c1:4d:84:51:3b:41:ed:85:5a:8c:ae:71:
         ba:bf:fd:ac:1d:c7:2f:c2:c7:95:88:46:33:92:d8:b4:55:bb:
         cb:f9:68:7e:e7:5e:2a:bb:10:a8:c8:ad:bf:27:8e:9a:c7:0b:
         aa:d3:a3:78:f5:76:2d:ca:93:dc:ec:f7:72:3d:ad:cd:c2:ad:
         1c:2e:8b:d6:01:d0:6e:fe:c9:98:06:32:1a:56:41:e9:a2:b4:
         35:07:0b:5d:ae:57:26:35:7c:bc:a7:b0:ef:25:9a:43:bb:bd:
         a2:ab:eb:9e:11:da:66:dc:94:00:d5:16:dc:5a:b4:bb:73:ea:
         d8:64:af:fa:d3:72:a7:ab:b0:c3:08:f5:5d:d0:92:67:27:d1:
         1b:d1:2a:e8:12:5f:d2:b3:22:cc:a7:11:c9:e8:55:76:5a:9c:
         5b:0f:6e:57:17:56:4c:f3:b2:fb:81:0a:a4:8a:c6:64:a3:6b:
         43:78:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:35 2026 by rpki-client