Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16f2eff7-c32d-30e7-a2df-8ee2c2454ff3.roa
File:                     16f2eff7-c32d-30e7-a2df-8ee2c2454ff3.roa (raw, json)
Hash identifier:          JuKm+qGdFVAKtEMc6N12vfRe3q2xvmPArLQowBmWT+M=
Subject key identifier:   B8:AF:56:BC:B8:8C:03:60:04:AB:20:5B:42:B0:F3:67:D6:F1:4B:3B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DD625C9920A3A2CEDD46B5FC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16f2eff7-c32d-30e7-a2df-8ee2c2454ff3.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     7018
IP address blocks:        136.0.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c9:92:0a:3a:2c:ed:d4:6b:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=0f8b9483-150f-4949-8b8c-f8c21f1d943d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:20:5d:a3:e8:51:86:dd:35:8a:3e:48:2f:e5:
                    36:02:09:04:aa:86:3f:49:6b:29:63:1c:4b:e8:3e:
                    0b:39:6b:1c:8e:ac:1a:87:22:d9:d3:da:9b:26:8a:
                    39:a0:a3:93:13:89:8c:97:fd:4f:30:f6:45:7f:4d:
                    aa:57:1c:10:6b:49:0d:ba:a5:37:a2:a3:00:42:52:
                    fb:0d:b1:4d:a4:18:ff:21:b0:3c:bc:1b:56:76:a6:
                    50:7b:41:76:df:c2:47:84:3c:28:a1:82:a9:be:db:
                    a6:3c:fa:89:dc:51:31:8c:56:f7:2c:c8:4f:20:73:
                    77:1d:23:97:82:46:85:4a:8e:21:29:7f:74:e0:2b:
                    90:7e:7a:9d:d7:75:5b:dd:6c:fa:4c:47:60:53:39:
                    ba:88:c7:b2:ad:8a:10:a5:d2:41:2f:e1:30:cb:6d:
                    5b:2b:85:0f:18:b3:cf:8a:f8:0f:e9:20:56:97:65:
                    27:71:50:fa:ae:da:ca:f5:a5:59:5e:c8:9a:ae:21:
                    8e:46:2a:d2:50:9d:a1:08:b1:7c:ac:a6:e7:6a:be:
                    1e:75:0a:e4:f8:32:d6:24:8c:14:62:51:80:58:16:
                    46:07:ae:1d:70:a9:29:7c:af:a9:7c:1d:0f:8b:05:
                    f4:ff:07:fd:f7:d7:61:1b:bb:78:0d:e7:4f:ea:09:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AF:56:BC:B8:8C:03:60:04:AB:20:5B:42:B0:F3:67:D6:F1:4B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16f2eff7-c32d-30e7-a2df-8ee2c2454ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:00:d9:ae:e9:d9:7f:08:93:4d:15:a9:7b:76:96:c9:ed:78:
         c6:26:2b:03:22:59:66:e8:12:e3:9f:a5:17:ba:b6:81:aa:b9:
         f9:98:d1:e5:cc:0e:0e:ce:12:b5:32:e6:aa:1d:66:be:6a:b5:
         01:be:51:bb:6d:49:50:e2:b8:36:c3:1d:9d:2d:8b:52:07:e4:
         87:a5:c6:08:0f:ca:4e:71:86:c8:0f:7a:16:e4:a6:bc:4e:94:
         02:7e:07:be:90:db:7d:c3:d3:4d:28:36:0a:94:4a:72:3d:74:
         f6:db:1b:0d:68:bd:f8:2e:42:74:59:25:18:e4:75:a1:34:fa:
         a5:f0:c7:31:0b:c9:84:49:8d:59:83:be:18:cd:27:a7:7e:8f:
         be:93:b2:1c:b2:3c:78:78:d1:46:18:a6:4a:06:c2:6c:59:8e:
         c9:6d:bc:9f:16:97:96:40:45:a1:ba:e8:3d:d0:53:f2:53:eb:
         10:f6:8a:a6:2d:02:e0:ae:70:1f:55:13:fc:18:16:ff:b6:92:
         65:81:41:b9:5a:84:ce:89:12:c7:6e:45:32:a3:a2:ee:ed:4e:
         42:9d:4a:85:51:96:50:74:32:e9:c5:05:fa:44:5f:41:b8:0e:
         c7:d6:c5:f3:20:1e:db:f3:e6:3e:f8:8c:35:57:89:d1:4a:04:
         27:23:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:13:31 2026 by rpki-client