Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/f2fb0593-eff3-39ee-9b06-ef95d7683049.roa
File:                     f2fb0593-eff3-39ee-9b06-ef95d7683049.roa (raw, json)
Hash identifier:          In9ijPctdWrvo2yCfP/n3RTMVPt8j1LiwNJrEGWWZsY=
Subject key identifier:   69:AE:F6:0D:F1:30:36:AD:9E:08:9A:D5:82:06:07:CB:83:B1:29:6B
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584D56E47DDDAF496EE0F3BAF440
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/f2fb0593-eff3-39ee-9b06-ef95d7683049.roa
Signing time:             Mon 30 Mar 2026 11:01:29 +0000
ROA not before:           Mon 30 Mar 2026 11:01:29 +0000
ROA not after:            Sun 28 Jun 2026 11:01:29 +0000
asID:                     394946
IP address blocks:        169.145.136.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:56:e4:7d:dd:af:49:6e:e0:f3:ba:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Mar 30 11:01:29 2026 GMT
            Not After : Jun 28 11:01:29 2026 GMT
        Subject: CN=8ee6e511-db82-4f9e-b337-d5dca9dab604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:b6:2d:14:db:c5:6b:b5:47:bd:11:2e:74:
                    f5:b8:d6:1c:aa:9e:0d:cf:dd:cc:19:d7:23:f0:a1:
                    3b:04:e6:1e:8e:23:97:94:6c:b7:bc:12:95:a0:b8:
                    15:10:b4:23:fc:2c:3e:7d:7a:33:01:29:eb:cf:cd:
                    0c:b0:f9:b6:93:77:f1:64:52:e8:9e:01:1c:5d:86:
                    8d:41:68:12:2b:95:76:7b:48:e2:2e:9b:6e:89:bd:
                    b0:6c:1c:80:fb:5d:42:55:ba:93:04:6d:ac:1a:01:
                    a1:e6:78:20:8d:02:ac:56:cb:3f:02:dd:a7:d6:c5:
                    67:8a:de:c9:47:42:1c:67:ab:b3:b2:db:9a:0a:03:
                    86:8b:a5:3f:2c:c0:d0:9b:20:03:75:9a:f0:89:16:
                    fa:d7:08:3d:7d:62:f0:11:8d:7a:fa:14:c1:75:6c:
                    a2:6e:0f:2e:5c:34:5a:a5:12:ce:e1:ae:28:9e:d3:
                    0c:6a:be:1c:35:f6:10:26:57:12:c7:97:8a:53:8e:
                    0f:51:5e:c7:af:30:e8:9c:0a:2e:f5:4e:f6:04:17:
                    ba:7f:64:e9:f9:ae:c7:87:fb:7f:42:5d:46:0b:0a:
                    45:db:4c:1c:e6:dc:1d:58:c0:5f:1e:50:44:dc:e6:
                    12:80:4a:da:bd:4a:df:1d:51:dd:61:e5:0f:31:dc:
                    fd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AE:F6:0D:F1:30:36:AD:9E:08:9A:D5:82:06:07:CB:83:B1:29:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/f2fb0593-eff3-39ee-9b06-ef95d7683049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:87:ba:00:19:19:31:20:c8:70:31:27:1b:b9:4f:41:39:
         b2:97:44:4f:1a:67:6b:34:9c:aa:f5:c8:35:53:57:e8:1b:19:
         39:66:0c:c5:7d:33:7a:38:62:22:b9:49:8e:d6:ef:a0:d7:c3:
         fa:80:a5:60:96:ab:f6:9d:43:ca:b8:f5:1a:b3:60:6c:58:ea:
         80:dd:37:97:7a:03:0b:dc:38:d0:b6:8c:81:6a:19:c9:34:01:
         59:c5:81:15:ec:10:3f:1b:f0:f2:ac:8c:4b:74:5f:9b:50:39:
         37:19:13:14:c2:c4:92:69:2f:ab:80:16:39:16:26:05:9a:f1:
         3c:41:3f:f0:bf:11:c9:95:f9:76:67:d2:b6:bd:d0:97:ad:3a:
         02:30:82:bd:7b:dd:f1:7b:3c:a0:96:46:2e:f6:16:b1:b3:5e:
         9b:0a:ae:f3:2a:23:08:f6:c5:a3:22:07:80:d3:c9:f9:b2:0b:
         43:2a:2b:62:db:3d:b4:2b:01:9a:30:51:a6:e4:43:86:59:93:
         85:22:79:a9:f8:f9:1f:ce:e0:de:dc:85:0b:c5:23:f8:47:24:
         e1:27:4e:da:3c:53:77:1a:35:ad:55:a3:b5:2a:c8:4b:21:a5:
         07:e6:fe:e9:00:a4:2d:f3:29:20:f1:03:7f:78:e5:de:e2:c7:
         70:18:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:49 2026 by rpki-client