Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa
File:                     c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa (raw, json)
Hash identifier:          Xtf7eiYjFlRlaLJo1LEzKJVX/FKD2RZt/gML2ITHnvM=
Subject key identifier:   01:54:94:89:CF:66:FC:AB:94:D9:1D:E7:18:39:19:2A:32:98:EF:F9
Certificate issuer:       /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial:       010D0C9F4328584ECD371ED5785B7482F4872540
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        136.228.0.0/19 maxlen: 32
                          139.60.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:1e:d5:78:5b:74:82:f4:87:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=40190fbc-688b-469f-a829-4b231fb895f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3a:fe:92:d8:0e:01:ea:f7:4f:17:22:22:4f:
                    e1:f0:83:62:25:5d:23:be:f8:0c:c9:39:9f:20:e1:
                    32:24:a5:84:3e:0e:db:d4:21:30:92:26:4f:69:3e:
                    53:bd:b6:8b:5f:70:76:2e:04:0e:6f:71:1b:b0:b4:
                    7f:52:5d:e6:74:fa:7f:b5:91:4a:8c:83:87:ba:92:
                    5d:8c:5a:42:c0:bb:78:6f:0f:64:8b:c7:07:83:4c:
                    6f:af:6f:3c:d6:2a:5c:0f:de:d7:6e:8e:7b:6e:4f:
                    67:98:91:de:84:2b:4b:5f:e9:d3:51:50:cd:8c:a2:
                    c1:c3:08:6e:4e:ab:f3:67:4c:5b:9a:ff:38:50:88:
                    dd:27:dc:ad:a2:94:1d:ba:fd:a4:4a:dd:72:60:dd:
                    6f:bd:62:eb:1a:8f:88:c8:8e:ca:3b:25:55:19:e2:
                    2a:ea:8c:66:92:0d:84:8f:db:39:37:d7:cc:41:cd:
                    25:d7:fa:d6:7d:a0:7c:8a:df:8b:ac:8b:be:65:63:
                    42:9f:dc:d4:cf:f1:48:f4:82:28:fd:38:91:f6:c7:
                    93:ee:8c:a8:ba:c6:60:5c:33:4b:0b:33:14:cb:16:
                    7a:5c:82:c0:e7:54:ec:9b:d3:89:a2:b6:a0:5d:6d:
                    70:9e:1c:82:c3:0a:61:eb:8b:40:23:2b:cc:32:74:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:54:94:89:CF:66:FC:AB:94:D9:1D:E7:18:39:19:2A:32:98:EF:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.0.0/19
                  139.60.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:47:2a:42:3a:87:7c:c2:14:b9:c0:9c:c0:27:5f:4b:34:10:
         fe:f0:2d:dc:58:e0:dd:36:5d:ea:0e:fd:64:13:5b:64:33:c8:
         71:da:13:5b:f8:20:fe:c1:23:83:ab:39:75:56:27:b0:c5:36:
         32:43:de:51:94:09:c7:5c:62:10:21:b5:86:60:12:1c:ef:2c:
         fc:fd:10:04:1e:7f:ef:1e:e3:ce:a1:df:61:11:01:87:f7:ef:
         8b:91:ca:f2:c3:da:38:d5:54:99:ec:f2:50:7f:d0:1b:2f:01:
         4d:c0:76:a1:45:34:07:c4:c0:15:b4:a7:c0:14:d9:39:39:9b:
         b5:6b:12:25:38:dc:ad:eb:c3:ad:b0:9d:3e:34:0c:0c:fd:a6:
         03:51:e7:43:7c:cf:56:ae:f4:a5:cb:8e:2f:90:00:9a:30:ff:
         8b:94:d3:65:3c:13:14:0e:40:fb:04:7b:33:bd:c4:2f:c8:b4:
         af:4f:ad:81:25:12:66:3e:59:98:e5:94:34:09:47:8e:d4:6d:
         7e:10:a3:df:02:43:56:fd:58:14:af:cd:06:86:8f:f1:4e:c4:
         f6:75:c3:5f:02:95:f8:a4:59:82:47:7f:1e:4c:ec:75:83:c1:
         64:68:10:96:68:28:77:c1:5f:85:9f:54:40:71:ba:a7:1e:b7:
         6e:bb:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:24:50 2026 by rpki-client