Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a50e04d-adc3-37b8-ae2b-282b6eb79f01.roa
File:                     3a50e04d-adc3-37b8-ae2b-282b6eb79f01.roa (raw, json)
Hash identifier:          97LMDvggaYyVH/ejG+oACOAsiBoZj1j+RPbSINS2xvI=
Subject key identifier:   E3:D0:29:17:6F:3C:7A:F7:4F:EA:E8:DD:6D:52:FE:AE:E1:EF:94:AD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DEF45F1169DD20CC86716AF70
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a50e04d-adc3-37b8-ae2b-282b6eb79f01.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     18779
IP address blocks:        136.0.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:f1:16:9d:d2:0c:c8:67:16:af:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=fd085058-eebe-42a6-a039-0d64feeb90e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:24:50:90:60:19:e1:4e:5d:fa:ec:ec:35:
                    a4:63:b4:ad:c3:00:c9:84:56:49:48:58:5f:e9:1c:
                    bd:4e:ad:d4:7c:f3:d6:e8:03:d3:f5:56:5f:21:86:
                    81:17:92:83:87:f6:4b:40:b0:ba:8c:d5:58:c4:16:
                    54:ca:74:df:e1:f7:6b:42:90:a4:f7:9e:a5:9a:23:
                    65:6c:75:6b:87:83:cb:83:32:e9:9c:ce:5d:d0:7a:
                    47:ad:3e:2a:1e:32:10:1d:fc:4f:4b:47:32:11:8c:
                    09:08:85:b1:63:7c:9e:9e:43:9e:9f:4f:0d:83:67:
                    5b:76:59:77:52:8e:80:87:09:cf:12:6f:24:f2:51:
                    83:18:b0:d9:a3:83:c8:55:98:41:93:b1:db:29:36:
                    71:a2:ef:c9:2f:db:e2:62:05:7b:62:33:2a:e5:d9:
                    5d:d6:54:f6:83:91:50:af:14:2d:82:f9:e9:16:bb:
                    e8:5a:00:ea:7c:bd:2c:08:58:15:b5:fc:61:cf:09:
                    12:b9:5c:3c:3e:07:8f:c4:35:70:ce:af:27:73:00:
                    a5:d7:30:6a:2e:07:d4:43:b8:6a:88:2a:af:ae:8a:
                    80:56:7d:e5:70:c8:3d:3a:93:65:96:35:8c:1e:2d:
                    c6:a4:72:b1:53:22:b2:9d:bf:c4:ff:c8:71:c5:01:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D0:29:17:6F:3C:7A:F7:4F:EA:E8:DD:6D:52:FE:AE:E1:EF:94:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a50e04d-adc3-37b8-ae2b-282b6eb79f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:19:fa:ae:22:e0:2d:c3:df:da:30:32:c9:ec:f4:11:fe:10:
         66:59:d3:96:a6:f6:e3:64:81:34:c8:e0:41:07:d7:c2:d7:c3:
         8a:9a:af:19:51:ea:ad:b2:b8:c4:4e:02:22:4a:29:88:d4:49:
         6f:cb:f2:05:b1:e1:70:9c:44:f1:05:3a:89:19:3e:69:b4:c9:
         5e:a4:31:00:14:be:25:3a:96:b1:be:1b:9a:5e:b9:fb:42:ea:
         07:fc:77:ea:3b:17:17:2e:1e:16:df:f7:cc:8f:20:69:35:cc:
         e4:8e:86:54:9e:91:6c:de:b5:ea:11:d0:88:9b:b9:a7:08:62:
         13:0d:ee:61:6b:14:b0:8d:eb:27:19:eb:9f:18:70:fb:67:61:
         f2:3b:2e:08:a0:0f:cf:95:2e:34:1f:9c:5a:4d:96:4d:9a:8d:
         cb:49:39:ab:b7:d0:9b:b4:93:29:bf:bd:75:12:4d:a1:53:fa:
         03:40:70:9d:66:46:a5:f6:dd:cb:ef:75:91:7c:d0:59:9d:8d:
         55:d9:1f:0d:21:89:53:58:98:91:a2:9c:71:46:af:c8:14:bc:
         56:4c:99:b2:f7:4f:51:36:37:d8:ab:cc:39:35:fc:06:87:7e:
         04:a5:46:6c:43:97:0b:3a:2a:18:db:da:34:18:88:01:db:a9:
         aa:a5:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:13:57 2026 by rpki-client