Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5dda0a02-8b17-3d91-9dd2-14acf9a9d852.roa
File:                     5dda0a02-8b17-3d91-9dd2-14acf9a9d852.roa (raw, json)
Hash identifier:          lEHWbTdbPCrRy61Y//RpG3BvZ4uIJwJFibU5NXYK8to=
Subject key identifier:   B6:8D:E4:9B:BB:DA:84:F4:05:68:99:C9:9C:E3:3B:17:5E:7F:A4:EA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EE38CA3646C85539674988840
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5dda0a02-8b17-3d91-9dd2-14acf9a9d852.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        136.0.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a3:64:6c:85:53:96:74:98:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=074f5561-5c55-4d34-a055-c3811aa601a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:fb:e4:65:d2:83:3d:f8:ea:ba:cd:0f:48:
                    69:60:82:f2:4e:78:0b:65:f7:1e:84:d2:78:78:54:
                    02:b5:a7:6a:31:64:c0:9f:5c:a6:fb:70:8f:4b:8e:
                    49:7c:22:18:eb:c9:06:21:a8:7b:05:62:95:bc:ae:
                    c4:fd:6e:6d:4e:4d:cf:02:2a:57:d5:53:03:1a:8e:
                    a2:db:3d:06:7b:5d:9a:9e:fe:02:16:87:8a:33:85:
                    1e:4c:3c:29:38:b3:90:95:39:f9:06:c1:f8:0a:8e:
                    e1:07:d5:47:ce:a8:d0:a7:c1:32:5f:12:53:98:4a:
                    1f:7e:42:43:7e:f3:c8:d1:15:d4:70:c7:89:77:9d:
                    c1:93:50:fe:10:4f:d7:dc:fd:01:69:36:64:da:3c:
                    6b:05:49:5d:dc:34:a5:66:2c:69:1a:73:2f:25:a8:
                    b4:15:c8:7d:88:9c:27:23:8f:b3:99:d0:72:62:4e:
                    f1:ab:fd:b5:0c:eb:0a:cb:bf:1d:f8:45:a4:23:c4:
                    14:fc:68:69:c5:37:54:16:83:76:4e:a2:e5:10:6f:
                    d8:2f:84:16:6d:f9:2e:32:b2:e6:ba:8a:30:0e:07:
                    b5:74:16:0f:ee:dd:1b:75:18:aa:9a:21:05:7e:0a:
                    f8:0f:9f:12:fd:63:68:94:78:45:2d:c4:ad:2e:d9:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8D:E4:9B:BB:DA:84:F4:05:68:99:C9:9C:E3:3B:17:5E:7F:A4:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5dda0a02-8b17-3d91-9dd2-14acf9a9d852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:ab:3e:aa:9a:23:bd:b6:58:98:06:ad:40:72:a6:1e:9b:
         e6:0f:97:5b:fc:5c:26:c3:95:4d:c5:04:40:1a:b3:de:2d:87:
         ef:e6:84:b7:1a:8c:07:2d:08:41:43:59:04:c0:9e:e8:9b:73:
         e1:ea:53:83:76:c2:a1:0a:00:4e:2d:90:9e:8b:a6:78:ef:d1:
         fd:ff:f8:48:61:1c:f5:b7:04:55:f0:bf:b6:d0:9d:44:ba:5a:
         6f:3d:86:d3:16:2a:cc:5c:3f:dd:c7:50:ad:1a:62:00:26:06:
         99:91:68:07:8e:dc:e0:6f:13:17:08:c5:e4:e4:14:58:3b:4f:
         c5:e5:71:bd:3c:ca:a8:51:47:ee:b6:6b:7d:23:95:0f:e1:03:
         5d:e5:14:7a:05:ea:90:cc:81:99:85:a4:82:aa:2e:82:5c:2d:
         ae:b2:5e:70:02:03:75:c6:3e:27:15:75:fd:d6:22:fc:bc:4a:
         b5:ef:cd:e6:fa:4a:7f:e3:53:d0:0c:07:2e:b7:6c:9d:95:05:
         20:5c:19:23:75:cd:a9:b7:3a:33:b9:82:05:f6:13:b7:79:a1:
         4b:0f:ad:04:f5:74:3e:9f:81:37:30:cc:de:bb:ca:09:3f:ea:
         2e:b0:4e:b6:d2:5b:d4:13:16:d1:fc:0d:d4:95:c8:67:b0:4d:
         96:fe:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:19:27 2026 by rpki-client