Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0e4ec8b7-8c87-3122-a2a1-5d056bc998ab.roa
File:                     0e4ec8b7-8c87-3122-a2a1-5d056bc998ab.roa (raw, json)
Hash identifier:          L4sr2CwS7yPH81jXZTGFjGjG1GNVtbzw9Cbz7UxyQ/Q=
Subject key identifier:   55:30:40:20:D8:B6:F5:1D:79:20:35:C9:0C:4F:86:E3:6E:71:C8:10
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D5A7D71BA5D615C73EDFBB900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0e4ec8b7-8c87-3122-a2a1-5d056bc998ab.roa
Signing time:             Tue 31 Mar 2026 17:57:05 +0000
ROA not before:           Tue 31 Mar 2026 17:57:05 +0000
ROA not after:            Mon 29 Jun 2026 17:57:05 +0000
asID:                     401152
IP address blocks:        136.0.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:7d:71:ba:5d:61:5c:73:ed:fb:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 31 17:57:05 2026 GMT
            Not After : Jun 29 17:57:05 2026 GMT
        Subject: CN=cac7ad2b-2ffb-422e-b662-13a93dd7b541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:e6:2b:b4:95:c8:7b:38:af:5d:eb:56:d7:
                    a7:74:8f:c0:0c:34:aa:ad:a4:44:b7:39:86:ce:9d:
                    5e:3d:d4:f0:ee:ff:47:dd:c1:72:f3:bc:33:c9:8d:
                    3d:d2:77:ed:a3:c5:db:cd:c8:53:b7:e8:5d:5c:7f:
                    28:96:03:6d:61:d3:1a:bf:f9:66:9f:e4:60:54:66:
                    53:99:d7:e0:37:19:92:c9:d1:6c:04:90:fa:0b:97:
                    9a:e1:01:3f:a7:cd:8e:e8:bc:f2:1b:fa:33:65:ca:
                    d9:e0:cf:52:e9:a4:b6:2a:ee:c2:cd:cf:49:b2:69:
                    44:75:0c:18:f5:0a:94:f9:fe:1c:50:ed:e3:82:72:
                    69:17:40:77:21:6e:a7:b9:d6:05:8e:d1:08:c2:49:
                    ab:7b:c0:0a:c9:88:b3:f5:1d:ec:a3:ab:b5:4d:4f:
                    60:d2:6e:53:22:4c:e3:57:f7:c6:0b:5e:15:aa:87:
                    7e:42:cd:15:60:6c:1e:6e:4c:93:65:6b:b5:b0:97:
                    ce:78:81:f6:80:dc:a3:a0:a7:b6:0a:43:16:bc:d4:
                    d1:82:97:da:97:46:e0:b2:4c:a1:be:d4:5b:86:b6:
                    cd:4e:8b:43:a3:a2:49:b2:c7:3e:b8:3c:8b:c5:5a:
                    84:78:35:18:ba:d5:ea:de:77:43:90:f6:8f:57:7d:
                    4a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:30:40:20:D8:B6:F5:1D:79:20:35:C9:0C:4F:86:E3:6E:71:C8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0e4ec8b7-8c87-3122-a2a1-5d056bc998ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e1:1f:09:d4:b2:60:f0:fc:6f:23:54:3c:fe:8c:a4:50:8d:
         34:64:df:14:ed:1c:3a:27:af:f9:c8:d8:8b:43:bf:3b:c9:c3:
         4c:be:6c:5a:4d:b1:73:f9:92:b6:3f:4f:e1:c2:b6:3b:dc:b9:
         b6:38:6f:da:a2:33:8c:56:bf:81:6a:9f:88:d7:9e:9e:74:87:
         2b:69:d2:c3:86:17:28:66:31:39:7a:4f:7b:77:89:ae:7d:25:
         48:bf:4a:ae:55:26:c7:79:b0:75:74:ee:b7:67:3a:f7:cc:4f:
         c3:ea:a4:d0:fb:2e:8e:75:9c:e7:07:e4:27:b4:43:92:1f:d6:
         70:29:cd:50:87:e3:52:be:eb:e7:65:e7:18:5c:39:69:36:aa:
         d5:2b:8c:c6:c2:3f:a4:c0:67:d1:a5:f9:c3:e2:f8:77:7f:92:
         7f:94:70:21:4d:bd:04:2f:89:e8:c5:cd:c2:3f:b2:31:d6:76:
         8f:56:49:24:a0:d3:76:47:fa:a6:ac:77:00:b2:bc:d9:0a:11:
         87:45:81:da:7f:b6:ee:62:36:48:30:39:5d:a5:6e:ff:ca:32:
         d3:33:d6:64:7c:20:af:98:e1:c0:c6:63:dc:3e:c7:e2:48:d1:
         8a:58:af:c2:eb:bd:14:50:94:a3:72:da:74:30:96:1b:3e:b6:
         de:c1:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:33:05 2026 by rpki-client