Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63e58fa3-29ee-336e-b6d0-c2268e3de40c.roa
File:                     63e58fa3-29ee-336e-b6d0-c2268e3de40c.roa (raw, json)
Hash identifier:          CYLIhiA9hR/3iol2/OtXSlb0y3M+1prpxu7u7vtgzRg=
Subject key identifier:   E5:00:BF:60:99:94:F7:49:30:4B:40:CE:DC:26:BC:84:C0:5F:A8:84
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EB57C67E317E203411CD3C820
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63e58fa3-29ee-336e-b6d0-c2268e3de40c.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     2914
IP address blocks:        136.0.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:67:e3:17:e2:03:41:1c:d3:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=a81633c6-8860-417f-8714-49189267754d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:7b:78:c0:1e:04:ad:1c:96:1d:07:70:b7:
                    ca:a0:26:f6:40:dc:f7:77:85:db:37:50:03:38:81:
                    06:71:ef:c2:39:6b:7f:ad:9e:54:dd:5f:02:ec:3d:
                    bc:ac:f2:9d:e3:3f:25:7f:d7:21:4f:ce:ca:a8:e6:
                    67:ff:72:8a:b5:5a:fa:03:68:b4:71:1c:a4:a8:42:
                    c1:57:18:86:86:25:9a:c0:57:e4:67:73:c9:1c:6a:
                    ab:88:14:77:fe:e3:da:3d:c5:92:2c:b5:f3:9c:38:
                    08:b4:e7:51:dc:cb:d3:5e:6a:5f:18:a1:89:4a:0d:
                    5d:11:60:44:b9:a8:eb:15:8d:e0:d5:2a:24:2f:77:
                    e6:57:0e:2c:0e:5b:44:9b:61:51:b9:c6:95:61:1e:
                    d1:c6:a3:77:06:3a:b5:94:15:75:7b:ca:40:fe:bb:
                    71:12:4e:ef:b6:22:7a:57:d3:b9:9a:9c:8b:a5:ca:
                    bb:2a:cd:a4:2d:f9:c0:03:3f:c4:6b:a0:a6:d8:bd:
                    0c:dc:7f:d6:39:51:63:8d:13:e5:4e:85:6a:84:22:
                    3d:18:97:6c:d0:06:19:9a:0c:60:cf:79:b8:b7:37:
                    28:26:08:f4:64:2d:51:43:29:ba:1f:57:a6:76:d8:
                    d5:73:1b:51:bb:3b:bb:c9:bc:a2:49:ca:34:8e:a9:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:00:BF:60:99:94:F7:49:30:4B:40:CE:DC:26:BC:84:C0:5F:A8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63e58fa3-29ee-336e-b6d0-c2268e3de40c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:44:cc:d7:6c:6a:9d:88:7b:a3:c0:9e:a0:1f:85:c5:63:8e:
         93:d1:fc:66:da:61:ad:9c:8e:49:03:ce:cf:f0:4a:fa:cf:cf:
         27:fb:b5:10:73:b5:3a:61:08:e2:2f:9a:3a:f3:1a:cc:11:29:
         f5:6e:4e:48:91:44:7d:ad:81:25:61:50:87:d5:de:fb:2b:eb:
         7c:04:42:64:ec:74:92:86:9b:2c:8a:34:02:0e:98:e6:59:ec:
         bf:8d:3f:7d:f9:de:6b:b9:ae:6f:e7:e5:4d:06:c3:30:ac:24:
         dd:93:59:22:e4:ee:30:b6:08:0f:b0:3d:1f:2a:d6:61:c8:e4:
         b8:2b:c0:6e:45:29:eb:9a:8b:da:7f:06:06:39:08:95:06:36:
         de:c3:cb:11:2e:86:38:e7:6b:d9:14:65:2c:90:65:4c:3e:6e:
         9b:c9:b5:24:6e:56:75:64:7f:d0:7e:26:af:df:39:83:c1:f6:
         2d:b3:9d:bc:ca:8f:37:55:3f:6c:c3:aa:11:e8:8f:67:61:68:
         c8:1d:06:b8:7c:b8:2e:03:a9:a8:8b:28:a1:db:f2:42:4a:9c:
         cc:3d:f6:cf:18:bd:6f:a1:d3:9d:cd:62:f5:20:75:f7:33:f2:
         43:2b:41:80:bb:3a:df:37:03:a6:fe:0d:72:b8:ba:62:9f:30:
         c4:72:71:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:04:59 2026 by rpki-client