Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1395ca45-b32a-34c7-aed4-d41c2a5a95a5.roa
File:                     1395ca45-b32a-34c7-aed4-d41c2a5a95a5.roa (raw, json)
Hash identifier:          cKnK6EBLzQ0CLw/SfkhfHH767VNvV7zpe5mS20mC1/I=
Subject key identifier:   8F:C0:F5:5A:86:FC:34:B8:5A:81:AC:D0:EC:33:11:D7:99:53:03:22
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF87CB8D47BE502369A66DA40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1395ca45-b32a-34c7-aed4-d41c2a5a95a5.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     49770
IP address blocks:        136.0.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b8:d4:7b:e5:02:36:9a:66:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=204c573b-f4a1-4aa5-acb1-8308f6ae5756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:78:5d:28:37:d6:69:09:1d:1c:2b:60:83:15:
                    83:fd:b7:20:3c:9f:93:5d:e0:20:f1:01:53:3a:06:
                    d5:1a:ef:d6:0f:4a:33:d2:98:80:4c:8a:fe:63:13:
                    be:ad:0f:d7:7c:91:60:df:78:63:59:1a:90:08:24:
                    1b:a1:76:d9:e8:90:e1:3a:65:4e:d1:a1:b4:d2:33:
                    02:7a:90:c4:1e:e9:e5:98:44:3e:8a:af:79:1b:fb:
                    e5:75:65:d8:f5:69:7f:68:0a:e8:c8:36:3a:08:81:
                    ab:bc:92:66:16:cc:b6:c9:86:20:85:bc:1b:8d:82:
                    9c:c0:00:a8:68:bf:58:dc:a7:29:c5:89:8e:27:45:
                    5f:ba:a2:14:17:3e:00:e3:06:55:08:08:44:ba:7d:
                    3f:f0:82:13:f3:89:7c:14:87:f8:b3:67:bc:17:45:
                    f0:4a:ff:a3:63:be:e5:3d:72:52:e7:3e:27:dc:94:
                    fd:c7:29:b3:3a:0b:72:c5:77:56:34:65:5f:b8:07:
                    42:26:d6:69:15:04:62:52:a1:55:2c:19:7c:34:10:
                    c6:33:a8:ff:e2:a2:70:b1:7e:c2:ba:58:cf:c6:fc:
                    eb:6c:06:4a:48:a8:f3:46:92:6f:18:1b:2c:ad:f4:
                    c1:e5:c9:b8:84:e5:ce:56:ba:84:4e:5d:38:41:d4:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C0:F5:5A:86:FC:34:B8:5A:81:AC:D0:EC:33:11:D7:99:53:03:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1395ca45-b32a-34c7-aed4-d41c2a5a95a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:35:79:a6:3e:2a:3d:4a:83:3d:2a:e5:f2:3a:16:2a:f6:
         e3:04:3a:70:11:85:89:15:cd:6a:9d:4a:50:63:af:68:af:4f:
         6c:86:ad:fa:bd:9b:d0:9c:f0:b9:bd:87:b1:9c:65:0a:fa:e7:
         e6:18:50:ac:7d:84:7b:2a:f2:4b:fb:9a:55:19:74:a6:33:ae:
         c5:bd:cf:ac:ba:af:5d:11:21:39:af:0d:f0:a5:f8:3d:30:c0:
         68:08:70:28:ec:95:e7:f0:86:5e:3a:3a:1b:10:c4:5f:51:3d:
         72:2a:90:65:6f:61:8d:3d:d6:99:57:e9:85:04:14:f4:ab:93:
         7d:dd:3f:1d:eb:da:e2:de:14:b0:fb:86:93:34:bd:e5:fb:e1:
         84:73:c4:9e:5c:d6:a4:d8:80:63:ce:fd:9b:0f:63:f3:2e:d6:
         43:b6:a6:bc:82:28:60:9c:ba:53:e9:fd:37:ca:e5:fe:97:f6:
         79:d2:38:49:8d:2d:37:a5:63:01:15:92:2e:d6:57:9c:4f:87:
         c9:93:04:66:b3:b9:05:a1:0c:9d:b7:6f:c2:a0:69:e0:33:29:
         57:b2:db:f5:02:c1:d6:5a:6d:68:b4:75:08:06:60:05:b3:05:
         14:e9:cb:86:68:fd:30:8d:2a:54:80:0a:a0:fe:b3:49:e0:5e:
         05:83:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:16:24 2026 by rpki-client