Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63a54a56-f7d7-3a61-9670-f72453b11c40.roa
File:                     63a54a56-f7d7-3a61-9670-f72453b11c40.roa (raw, json)
Hash identifier:          WP5M3Mt3PVfjVabFErus4LyOJRsnkYngj8vPzZwVRuE=
Subject key identifier:   29:34:B7:E9:49:16:59:3B:04:DA:32:CB:5A:CF:AC:F4:E9:E7:8B:5C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CAE5EB098CDD7B4D0D5AF4180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63a54a56-f7d7-3a61-9670-f72453b11c40.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     395954
IP address blocks:        136.0.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:b0:98:cd:d7:b4:d0:d5:af:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=612390b8-a197-4337-b413-b342ff575276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:b2:cb:d6:21:92:a8:d2:5b:fc:58:f1:47:
                    5c:7d:40:9e:0e:93:3a:73:7e:a3:3f:10:69:d4:7d:
                    97:82:ba:eb:30:76:2f:98:e3:86:f2:e0:62:48:22:
                    09:e2:9e:8e:5c:5c:0d:da:43:29:90:44:dd:ce:c1:
                    15:e8:9a:96:f5:9d:8c:f7:9d:dc:c4:a3:c9:11:b2:
                    d1:58:7d:8d:1f:c6:93:96:c6:c1:c5:68:9c:c9:c0:
                    b3:26:5b:93:e5:43:d1:d2:01:10:95:53:db:b2:9c:
                    1a:d1:11:d0:6f:c5:27:9d:10:93:11:f0:07:49:f0:
                    79:44:20:15:e8:ec:10:19:6a:b5:af:26:44:bd:54:
                    1c:0c:3e:46:f9:1b:b0:63:3c:ab:30:c4:f2:bb:47:
                    3f:f4:cc:98:d6:a5:d1:57:48:5b:96:a0:45:35:52:
                    95:0c:10:78:e3:d7:1c:a5:aa:80:e8:5c:a1:ce:d7:
                    b3:d2:2d:30:3e:1b:c2:8d:d2:0a:80:b5:70:34:dd:
                    c5:f3:05:2c:22:fe:07:51:89:a0:9f:67:c3:3b:a2:
                    b7:89:a8:0f:fa:14:6f:96:95:2d:d1:53:a7:78:d7:
                    82:24:db:87:9a:c9:dc:ce:70:06:25:18:e7:2a:49:
                    12:1f:ed:2f:49:e6:21:cc:e1:34:f7:30:e5:0b:60:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:34:B7:E9:49:16:59:3B:04:DA:32:CB:5A:CF:AC:F4:E9:E7:8B:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63a54a56-f7d7-3a61-9670-f72453b11c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:d6:b7:9b:22:1d:7b:e2:8e:db:d5:5e:11:71:bb:39:e7:
         fb:a7:f2:ed:31:88:5f:5c:ad:7f:f6:47:21:e7:52:87:96:68:
         19:4b:72:c2:96:22:3f:4a:83:da:31:e7:4b:ca:96:ff:73:ad:
         57:e8:26:5f:28:0a:7a:9c:77:26:b7:b2:79:8a:7e:1a:db:cc:
         fe:ee:21:c0:b0:ff:a4:42:54:cf:0f:f8:a5:0d:fc:d7:3e:69:
         7f:7b:6a:9d:d5:63:4c:8d:66:a0:94:d6:65:78:02:95:0e:8b:
         fc:c1:8d:fb:5a:6d:ae:bb:89:e5:9f:17:c5:7f:ab:33:80:a9:
         62:18:41:f7:7d:70:2c:72:a1:40:00:4c:90:f4:6b:77:1d:51:
         cf:17:76:fb:fe:ee:4b:fc:09:ae:cc:0c:68:89:8e:6e:20:6e:
         b4:10:da:32:35:04:ee:73:92:e1:04:7e:bb:13:48:8a:49:97:
         be:2b:44:fb:37:82:c4:ac:cd:cf:76:be:83:e2:02:dd:7b:5d:
         75:91:3e:ec:4b:67:15:ce:05:10:1f:d1:29:d4:75:81:47:83:
         98:e8:c6:18:8d:75:72:a1:bb:08:2a:51:85:19:07:89:0b:14:
         c9:ae:7d:1a:90:7f:9b:96:bb:f1:f5:1b:c7:e7:ac:99:b9:3c:
         d5:eb:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:54 2026 by rpki-client