Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79c7a595-dc6d-3f7b-9167-e8e88dcbe40f.roa
File:                     79c7a595-dc6d-3f7b-9167-e8e88dcbe40f.roa (raw, json)
Hash identifier:          tmI6tdNQutR9QSM+BB8dw9VJ2tqJekDF3Q1A76gIq+Q=
Subject key identifier:   DA:36:8A:D6:08:88:34:87:31:F9:0D:AC:1A:64:B1:7A:58:52:16:CE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DEF45F139E068D7F5E19C6B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79c7a595-dc6d-3f7b-9167-e8e88dcbe40f.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     18779
IP address blocks:        136.0.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:f1:39:e0:68:d7:f5:e1:9c:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=872a7d65-d723-49f3-afd4-8d5fb3f11e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:a7:15:d3:a2:3a:31:4f:8c:59:28:50:c8:
                    30:be:ea:fd:2e:3b:ed:92:89:b9:3e:c7:4f:02:47:
                    a8:e0:83:59:50:49:3a:aa:40:96:73:8d:bc:8c:cf:
                    28:38:3b:6e:c8:dc:86:ea:13:32:b6:0b:93:1e:c3:
                    21:a6:67:66:78:e9:a2:42:c2:5c:09:8a:48:c7:8d:
                    c4:55:54:f2:e2:33:30:bf:3f:ba:7b:e3:47:ab:6a:
                    96:9b:81:52:50:2f:89:9c:37:5d:12:34:2c:e7:1e:
                    5b:21:dd:28:aa:92:88:0a:be:c7:a5:45:66:15:48:
                    15:e1:f6:6e:ce:34:6a:6c:8f:c1:1d:53:d2:95:d7:
                    20:df:64:76:af:f9:8e:55:a1:8b:f2:f4:f8:27:eb:
                    19:34:26:34:72:1f:d8:f2:05:3a:08:26:69:21:61:
                    9c:fa:7b:13:4c:c7:3b:4b:a6:44:f4:ef:ba:b7:0c:
                    8d:e1:f9:b5:60:19:ed:00:3c:b7:82:08:a9:54:9e:
                    f7:9f:ab:5e:0f:e7:af:30:d2:98:8c:86:f1:1d:db:
                    28:5e:03:a4:c0:5a:38:49:c1:93:0c:5b:5f:e2:9d:
                    ef:b5:bb:92:b7:a7:11:d8:3c:e8:70:a7:82:78:2c:
                    2d:dc:db:f7:b9:0c:24:97:ee:0b:84:17:1c:50:31:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:36:8A:D6:08:88:34:87:31:F9:0D:AC:1A:64:B1:7A:58:52:16:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79c7a595-dc6d-3f7b-9167-e8e88dcbe40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:81:de:31:85:0e:c9:84:66:dc:6f:3f:94:53:2c:17:b4:60:
         e8:d5:11:f7:55:f1:70:0c:96:73:99:a0:1b:f8:f7:61:d8:a7:
         24:41:58:ec:84:d3:eb:95:50:0a:26:89:dc:04:2a:01:f3:8e:
         9f:52:52:bf:47:eb:1d:07:8a:94:57:52:36:89:16:19:a8:c9:
         90:87:12:6f:73:3b:e1:4c:6e:a7:0b:9f:23:84:35:81:cc:08:
         33:95:41:ec:ec:40:97:1f:66:1e:3f:ab:76:ca:be:92:5c:d0:
         84:b3:b2:c6:46:3b:21:2b:4d:69:1d:e8:fa:d2:73:ee:69:b7:
         71:a6:6a:3c:1d:b8:6e:bb:96:3f:56:f3:b5:0a:f0:2a:0b:17:
         96:33:46:3e:3f:a4:0a:75:79:82:c1:49:ea:01:e9:70:1d:b2:
         1f:1d:6c:7a:bf:b4:2a:03:ab:ea:90:31:d5:56:db:dc:59:09:
         da:e1:c9:7b:16:40:b9:00:10:a1:f7:14:5c:4d:b2:47:69:af:
         48:7e:0a:36:3c:d8:0f:d9:c3:ca:94:10:a4:57:fa:1b:c1:36:
         7b:fc:b7:a0:24:04:9a:e4:76:0d:70:d9:cb:d7:ac:4e:6c:f5:
         c1:b7:70:7a:3e:77:53:9f:bf:0b:e1:66:86:5c:04:ec:55:c4:
         9d:90:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:13:32 2026 by rpki-client