Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/74276fa4-b9f9-3fb8-86a2-bbd4817f200c.roa
File:                     74276fa4-b9f9-3fb8-86a2-bbd4817f200c.roa (raw, json)
Hash identifier:          bzrO9pYF0LDoaHNNBywrbb3VclcR7m+WU98dCcHblNY=
Subject key identifier:   C6:A5:71:44:F7:BB:CB:9E:18:7F:12:6C:84:B0:26:0F:FC:44:D2:C0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EC0A70B32586833B3B7ECC000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/74276fa4-b9f9-3fb8-86a2-bbd4817f200c.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     834
IP address blocks:        96.126.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:0b:32:58:68:33:b3:b7:ec:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=0a3a237b-753c-4972-afd9-513df4979db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9b:e7:69:89:71:5b:93:24:b9:05:c1:3e:6f:
                    67:a3:b6:fc:7f:83:8b:59:3b:98:ef:e6:e2:03:3b:
                    44:36:52:01:ae:bb:38:cc:da:44:72:af:b6:58:f3:
                    c8:b5:cd:6c:b9:9e:f0:7f:e0:31:d7:a5:5b:6b:5c:
                    7e:ca:c6:26:e9:ce:b9:95:2a:58:3e:01:9d:70:91:
                    e5:46:fd:78:c6:a4:04:27:d1:58:ad:74:d7:9f:9d:
                    6e:39:6d:14:c0:85:24:9a:de:85:8f:c5:f0:9e:3d:
                    6e:96:48:db:ff:db:8a:cd:09:78:55:0c:2b:3a:a1:
                    3f:14:72:e3:66:09:11:44:0c:31:9d:56:ce:91:76:
                    4d:b0:fd:31:7d:3d:8e:0e:36:84:a3:f0:ed:64:b3:
                    17:69:ee:43:1f:76:46:0e:7b:c8:7d:e6:87:84:2c:
                    f1:06:69:87:30:34:ec:1e:d1:95:3a:1d:8f:70:aa:
                    71:04:13:0e:90:72:37:ce:9f:08:6f:ce:74:dd:4e:
                    69:bf:57:58:f4:4d:70:8c:8a:51:d3:0e:6e:73:82:
                    57:29:1d:e5:2a:79:a3:af:79:bb:3b:ca:7c:54:92:
                    15:ad:0f:68:f5:c1:7b:28:9a:1b:05:56:9c:f2:c0:
                    83:48:9b:22:93:56:7e:76:3d:7d:6e:57:48:3a:26:
                    92:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A5:71:44:F7:BB:CB:9E:18:7F:12:6C:84:B0:26:0F:FC:44:D2:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/74276fa4-b9f9-3fb8-86a2-bbd4817f200c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ac:3c:b9:fb:d9:77:d0:6d:87:3b:a3:92:3b:4b:90:69:5e:
         88:0c:ba:51:b7:73:f8:5a:ca:a2:ab:e0:9a:e9:46:a6:4b:f3:
         33:d7:37:e5:4b:be:50:89:2d:20:bc:92:77:87:f7:8b:04:eb:
         a0:ea:45:fa:fe:80:9a:02:b5:da:7e:50:5a:57:e9:51:9c:29:
         d3:77:95:f3:e6:43:28:e2:0b:1b:ee:8b:f3:dd:e5:a9:ee:2b:
         ab:64:4a:42:b2:02:33:2b:c7:e6:ca:36:b4:6c:1c:e3:08:32:
         2e:59:1f:69:79:d7:23:44:14:0e:fb:02:e0:d9:c0:96:03:0e:
         24:1f:9c:82:0b:f4:7d:ff:e3:3d:a1:61:9a:04:f6:38:bd:22:
         6b:78:b4:9a:8a:27:13:f5:c8:e1:36:cb:54:d4:dd:11:86:3c:
         e4:31:9d:f1:2e:4b:cd:86:8a:5d:c2:c6:f1:48:b3:3b:59:1f:
         e0:a3:30:85:5f:bb:25:16:68:5f:a8:eb:6b:6e:49:81:98:ef:
         e8:a4:83:ba:04:46:7f:8d:63:35:15:48:99:56:64:38:0e:8e:
         4e:54:9c:c2:e8:a1:12:bb:98:2c:be:30:52:da:d2:d1:5f:9a:
         18:b3:8a:ff:6c:02:d7:8c:5a:58:e0:4a:55:48:d1:c5:b6:57:
         45:42:ea:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:21:02 2026 by rpki-client