Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ab8c63d-20cf-3864-9d91-c1a543b6f523.roa
File:                     1ab8c63d-20cf-3864-9d91-c1a543b6f523.roa (raw, json)
Hash identifier:          alBIpN9CGB3iYLt4Hxo2a0KVjnTyabQ00g4Al+Wf34k=
Subject key identifier:   58:D9:33:04:0A:8A:D8:AB:41:C4:E9:8C:1F:18:A0:F3:B8:8D:FA:47
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CDA0264D49A47ADCABA255000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ab8c63d-20cf-3864-9d91-c1a543b6f523.roa
Signing time:             Fri 13 Feb 2026 17:25:41 +0000
ROA not before:           Fri 13 Feb 2026 17:25:41 +0000
ROA not after:            Thu 14 May 2026 16:25:41 +0000
asID:                     40950
IP address blocks:        136.0.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:da:02:64:d4:9a:47:ad:ca:ba:25:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 13 17:25:41 2026 GMT
            Not After : May 14 16:25:41 2026 GMT
        Subject: CN=d82db6a3-2f9d-4b65-948f-2a03859c94af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:88:60:e0:e1:89:09:72:18:1d:3f:ed:9a:
                    17:be:2e:4f:2e:8b:dd:b6:22:4b:88:76:eb:b8:8f:
                    05:a4:3b:76:32:a3:c2:4a:d8:ff:dd:d1:9f:84:78:
                    33:0f:e4:2f:0a:c4:45:08:96:e9:a2:15:15:23:48:
                    29:17:ba:7c:04:2f:d2:7e:20:d4:bb:8f:f6:d5:64:
                    37:ef:26:11:92:c5:cc:1f:ef:a2:61:a4:80:7a:4a:
                    7d:80:aa:81:55:d7:04:26:cb:81:76:e8:9f:65:ca:
                    e1:be:7c:86:62:cb:af:fe:31:94:e7:0f:2c:e1:7d:
                    e5:67:ba:99:f3:ff:77:1f:37:30:8f:b9:01:7a:0c:
                    f2:35:d4:4f:86:a7:ff:f6:33:ac:05:0b:08:6c:65:
                    86:4c:17:1d:19:f5:62:0b:fd:fd:94:17:39:0a:2a:
                    6e:c2:fc:66:53:8b:97:52:86:59:01:f2:f4:c5:77:
                    63:36:c2:82:da:97:17:f4:29:cb:5d:21:62:78:94:
                    58:24:74:f0:a8:f6:f4:d6:1e:ce:a1:15:14:a7:4a:
                    0a:a9:e8:fe:24:73:0d:ad:45:e9:ad:5e:20:fc:1f:
                    80:ee:a4:0f:70:8b:e9:b6:7a:1e:8c:7b:34:8a:38:
                    12:42:4d:39:8c:b4:be:67:92:0a:71:73:b7:3a:cd:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D9:33:04:0A:8A:D8:AB:41:C4:E9:8C:1F:18:A0:F3:B8:8D:FA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ab8c63d-20cf-3864-9d91-c1a543b6f523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c0:51:9d:d4:4b:9f:5d:1e:60:fa:83:37:a0:bf:4b:21:02:
         73:1e:a9:6f:57:b9:e2:22:19:62:e1:08:03:31:d6:ce:93:43:
         f0:c1:10:8a:50:b8:61:3d:ad:6d:8d:15:e0:8e:bc:0d:4b:fa:
         f2:68:a0:ed:8d:e6:01:db:f9:b3:9d:41:03:29:ca:13:4c:3d:
         9d:28:7d:85:2e:06:ef:31:4d:f1:3b:f4:40:d8:48:bb:5b:a3:
         9b:70:20:61:f8:92:6c:0d:12:ae:c0:2f:ed:47:e7:41:88:cc:
         86:8e:f7:9d:45:17:6d:e7:44:0d:ea:97:e3:27:a0:21:9b:b2:
         b4:05:a2:8d:c7:ba:1f:4f:2f:03:a6:d5:a9:aa:75:01:7a:6c:
         04:32:a1:f7:6d:df:38:e5:d5:23:a2:57:fe:f5:c6:4e:cd:f9:
         1e:d3:11:66:73:d3:5d:93:7e:02:74:a3:44:9b:9c:02:cb:9e:
         fd:c5:e6:98:44:4e:62:2f:ff:3c:4e:71:31:b8:e4:76:cc:c2:
         2d:4e:fa:c8:ab:ea:70:23:fd:00:42:f4:43:5c:d0:2a:ce:c1:
         a2:1f:e1:7b:44:bc:21:63:ed:f5:a7:0a:29:ff:b1:7f:dc:f2:
         ed:c5:62:75:d9:a7:88:7f:63:a1:68:ec:fd:13:cc:45:02:1e:
         f6:f6:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:35:03 2026 by rpki-client