Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e236ec4c-34f7-319b-8984-8e6716ba8a2b.roa
File:                     e236ec4c-34f7-319b-8984-8e6716ba8a2b.roa (raw, json)
Hash identifier:          S8yIT8UfkFvJv3hezCZ2iPyZwA1PxGsilLfWNzm+Ji0=
Subject key identifier:   47:9A:3E:05:A0:EF:FA:0B:2A:EB:DF:D3:C3:04:73:0E:A0:F7:A9:BB
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584D00B276C2B751C42876779B00
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e236ec4c-34f7-319b-8984-8e6716ba8a2b.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     19165
IP address blocks:        136.25.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:76:c2:b7:51:c4:28:76:77:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=955a0292-391a-41cd-94ab-4ccd5140f72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:67:34:86:31:ad:fd:20:2b:46:2c:c6:f3:
                    dd:8e:25:80:ec:35:99:49:e5:b4:4a:ef:84:90:2c:
                    e3:b8:d8:a7:8d:cd:d8:33:01:9b:d2:05:e7:c2:00:
                    0b:fc:ab:85:bd:c9:32:88:ac:1e:0e:d4:3e:0a:b7:
                    bd:66:55:3e:fb:e9:3f:2f:4f:6c:49:f6:69:6b:66:
                    ae:23:4c:25:33:45:12:a2:14:83:34:d0:ed:1c:5a:
                    d7:b3:55:2d:ea:67:2b:56:73:93:a8:b2:ed:b6:16:
                    94:08:43:04:34:c4:4b:70:46:d9:f4:59:5c:fe:ba:
                    1a:11:67:15:72:37:49:2c:5f:c7:f7:03:4d:bc:0b:
                    75:83:9e:cf:e3:50:82:af:b6:78:25:53:bf:c7:35:
                    de:cc:3e:2b:da:1c:42:ae:11:96:b8:39:6a:e2:87:
                    15:52:84:4d:79:a6:25:51:bf:dd:9b:72:7e:eb:2c:
                    bf:f0:f9:65:6f:ed:85:ba:e1:a7:4d:fe:c2:f9:53:
                    1d:77:15:43:ca:50:4a:56:fd:e7:c1:c5:47:f4:54:
                    35:55:60:56:a7:3e:4b:ef:c7:f1:cd:fc:3c:ae:68:
                    b4:c0:14:59:37:80:52:23:93:7b:c8:61:29:01:6d:
                    8c:cd:0f:eb:27:72:10:aa:53:41:0d:f5:e4:ca:e5:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9A:3E:05:A0:EF:FA:0B:2A:EB:DF:D3:C3:04:73:0E:A0:F7:A9:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/e236ec4c-34f7-319b-8984-8e6716ba8a2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.25.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e5:7f:40:c1:45:77:23:46:1f:fc:c5:3c:28:b6:a3:8f:a0:
         18:4b:26:8b:00:34:16:3a:a0:77:89:b1:2a:5f:b6:c2:dd:96:
         cb:48:12:b1:66:8d:fc:3b:3c:f8:6f:8b:f2:d2:ad:d0:50:7f:
         18:45:c0:dd:e5:fe:3a:7d:7a:d3:7e:a8:e0:72:f1:6b:09:ba:
         b1:27:36:9b:65:e0:bf:2f:ad:8e:78:d3:82:89:99:52:5a:01:
         02:35:ab:83:4b:00:a0:5f:10:28:0c:64:1e:b6:0f:2f:5e:48:
         c0:5d:73:07:ee:7c:ca:1a:12:13:cb:47:86:50:8d:29:10:39:
         b5:f4:11:4a:7b:d9:b6:7c:a9:dc:5f:66:1b:1f:d7:d3:ee:bd:
         9f:17:f8:e3:9c:e1:20:6a:3d:95:cf:f4:38:83:6e:d7:85:6e:
         d8:d1:75:09:93:17:77:6c:68:e3:c1:e8:45:00:dc:c2:bb:b2:
         cc:85:5f:a8:94:d3:45:c7:2a:40:a6:d4:52:19:93:3b:7c:69:
         23:a1:4c:d0:d4:ff:91:98:37:18:ef:f9:da:a3:44:2b:ae:71:
         c6:95:fb:6c:77:57:56:5c:dd:e8:08:af:ae:88:61:aa:02:9e:
         ee:8a:3f:b5:f1:42:51:81:9d:93:3a:c2:3e:fc:b5:33:b8:1d:
         14:5a:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:45 2026 by rpki-client