Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/546dbc1b-a648-31e3-bac4-be8a0ae816cc.roa
File:                     546dbc1b-a648-31e3-bac4-be8a0ae816cc.roa (raw, json)
Hash identifier:          fRSvbJBSEpDDysxirXuPK9OXyqlhFfYqy3mmy8dww64=
Subject key identifier:   50:66:98:25:86:E5:61:35:9E:B3:E0:FB:D9:56:D8:9E:61:6C:BF:59
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CF2BD0A000FCAA21D22DF3C00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/546dbc1b-a648-31e3-bac4-be8a0ae816cc.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     11404
IP address blocks:        136.0.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:0a:00:0f:ca:a2:1d:22:df:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=c3a4548d-f36c-4745-81f3-bc321558f924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:a0:63:c8:42:d3:9e:d3:cc:1d:5d:06:e8:
                    15:66:52:df:a1:ff:cc:6b:d5:e9:7d:1c:14:92:fa:
                    5d:01:05:27:81:6c:d7:0d:46:d1:36:22:5d:4b:cb:
                    46:a0:dd:eb:0b:53:b6:fa:45:fc:22:14:0b:ee:cb:
                    1d:ab:69:e7:23:eb:e6:3b:0c:91:93:0b:82:fe:b9:
                    12:5e:c4:9e:86:15:79:24:3c:73:4a:b9:cb:d3:99:
                    9a:0c:d7:34:55:06:68:74:3a:50:00:18:cd:d2:75:
                    17:64:2d:ae:67:03:2c:b3:e4:a7:8d:0e:85:70:cf:
                    21:d7:ef:0d:45:05:25:0a:d5:4d:df:35:3b:2c:b3:
                    41:d4:ed:7e:8f:5f:e4:90:7b:49:c3:46:b8:b4:99:
                    08:f5:31:52:93:f3:af:9e:8d:26:a7:33:56:90:63:
                    82:bd:a5:67:08:5f:51:32:9e:5e:74:89:fe:50:8a:
                    59:8e:4e:9f:bd:1b:df:49:b6:30:44:9b:21:7c:2c:
                    f3:b8:a0:82:5d:c7:cd:84:06:29:3d:3c:96:20:e6:
                    0d:8a:5b:ed:03:c2:41:36:21:81:27:9a:b4:db:ab:
                    ef:29:1a:c4:9d:70:96:36:aa:84:56:97:91:c5:c5:
                    f9:df:7f:d1:97:b4:ad:1a:04:d1:74:58:dc:f8:6e:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:66:98:25:86:E5:61:35:9E:B3:E0:FB:D9:56:D8:9E:61:6C:BF:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/546dbc1b-a648-31e3-bac4-be8a0ae816cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:72:49:7f:5f:04:6f:1d:58:f3:61:84:9e:55:73:6e:52:15:
         91:0c:82:dd:aa:c2:bd:82:5d:e2:a0:a9:6e:89:ba:20:f7:d7:
         d7:10:60:c6:64:22:eb:20:3f:e6:83:bb:3d:b2:32:bf:0d:fb:
         5e:af:22:2a:89:44:bb:d8:32:4d:d0:7f:85:a8:92:e4:7c:3e:
         35:f8:e0:49:01:71:76:49:96:bb:46:a7:2a:9f:c2:ef:75:a4:
         16:21:19:71:07:d3:b0:a7:6d:4a:48:fb:22:fe:a7:cc:dc:eb:
         9b:c0:d5:fe:a5:21:9e:66:76:a2:94:33:6f:ff:5f:18:d1:e0:
         6e:7e:cf:94:bb:66:0b:6c:21:1d:a9:01:d9:fd:ae:b2:23:13:
         52:3e:fb:5a:dd:54:94:7d:9b:68:69:8d:23:b1:18:8f:e3:1b:
         db:43:87:f4:01:94:22:de:a8:0e:c8:9b:b6:c2:55:d0:2b:3b:
         ca:03:d8:76:75:fa:0a:3c:b9:f4:46:32:0d:c4:00:36:1a:d9:
         d1:64:2b:58:fb:d0:d2:0d:93:58:f2:be:eb:0a:19:74:c8:99:
         d3:b9:0c:6a:d1:b3:1c:8d:bf:73:f0:e2:ac:f8:6d:79:62:24:
         27:c1:7c:4a:16:05:42:9d:e2:fd:69:32:d8:ff:02:87:db:32:
         84:80:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:10 2026 by rpki-client