Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/646a7dd0-ec2f-39ab-a271-3727305e3643.roa
File:                     646a7dd0-ec2f-39ab-a271-3727305e3643.roa (raw, json)
Hash identifier:          zr/CpcvH1O82f3KUNp2k4FB56TIAMVS1Hkk2tRibNOg=
Subject key identifier:   EC:DD:9C:E4:3E:97:8E:85:A0:C3:84:71:0C:EC:06:43:A5:92:E9:87
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F682813F697C8F2714C51D260
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/646a7dd0-ec2f-39ab-a271-3727305e3643.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     11798
IP address blocks:        136.0.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:13:f6:97:c8:f2:71:4c:51:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=86913694-39e5-4573-bd34-45ca0c10a01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d3:bf:0a:5c:e9:5f:e5:29:39:dc:9a:fb:84:
                    83:7e:d1:ec:ea:b2:1f:ad:59:db:a2:14:aa:e0:25:
                    be:2a:ad:f7:47:22:dc:30:5c:28:ae:db:2e:48:77:
                    8f:54:35:d1:19:ae:67:dc:bf:77:1d:99:db:b7:18:
                    91:30:36:9c:ba:40:ba:0d:4e:cb:7f:2b:61:8d:08:
                    68:42:7d:3a:a3:31:79:c3:10:8d:2a:df:62:39:7e:
                    6d:7f:4e:d6:24:bb:18:d6:34:94:28:ce:4a:79:3f:
                    ae:c0:5e:b2:e6:ad:15:9b:c3:ca:ac:e6:3d:a2:ee:
                    82:5f:d3:a2:fd:d5:d5:83:d7:04:c6:d4:52:5a:f4:
                    61:bd:0a:4e:97:84:99:a3:cf:a3:a9:54:50:56:4f:
                    86:8c:ee:41:ed:fe:3b:91:99:f2:2e:89:46:41:eb:
                    54:03:fa:2a:81:a4:8f:84:b9:ae:b0:3a:bd:a1:cd:
                    ee:56:6d:e9:82:83:fc:2b:e1:6b:c7:75:fe:35:e4:
                    a2:9d:1a:c8:70:31:8e:d1:89:a8:91:ef:29:9d:94:
                    e4:6d:b3:8e:fd:c3:95:d7:93:eb:3f:03:96:8c:10:
                    51:7f:56:85:46:d6:86:91:b4:9e:8a:f1:4e:32:bd:
                    3e:b8:2a:f7:29:ac:22:41:0a:16:56:ef:6f:d4:b4:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DD:9C:E4:3E:97:8E:85:A0:C3:84:71:0C:EC:06:43:A5:92:E9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/646a7dd0-ec2f-39ab-a271-3727305e3643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:24:59:71:42:75:00:d9:3e:fe:1a:b0:7f:45:1d:14:b5:53:
         40:cc:a0:e5:82:d2:7a:0c:36:3a:8b:20:c8:7b:70:db:90:27:
         ee:cd:1a:b0:b5:32:a6:62:ac:85:d9:79:a6:dc:01:a1:6c:64:
         4b:0a:e1:f6:e1:47:34:f9:ee:0b:0b:87:e4:60:00:26:a7:15:
         24:59:b5:ed:17:f5:a7:2b:85:08:a1:17:e3:66:8a:b2:7e:10:
         bd:18:91:13:98:cf:39:f6:29:2b:62:03:ba:bc:ea:e1:ec:5a:
         ac:fc:d9:c1:23:35:93:3d:f4:44:56:46:87:6f:31:2d:61:ea:
         05:dc:8d:6e:23:21:b9:4e:fb:96:8c:86:f5:2b:19:90:81:dd:
         cc:da:24:08:a6:56:25:d9:70:45:94:58:d0:78:39:24:fb:a3:
         3b:10:e0:0f:1b:ff:bf:24:d1:5b:b5:fc:07:24:af:57:e0:d2:
         0d:7c:6e:3b:53:5a:91:e4:48:bd:43:cc:5a:8d:ec:a7:07:be:
         3a:46:9f:1a:19:62:ae:10:bf:50:fa:80:c2:98:df:a5:5c:6e:
         4a:97:de:2d:8d:c2:17:e7:78:8c:0b:ed:12:d0:0c:ed:71:f0:
         ec:85:d6:ab:45:d6:2b:06:15:e1:e9:d6:1b:30:d7:17:25:48:
         f0:44:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:10:12 2026 by rpki-client