Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa
File:                     7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa (raw, json)
Hash identifier:          whUeifBaZ2kiwJ60+i9AXogONtjKu4NU5yTRzn4e4TI=
Subject key identifier:   3C:58:D3:09:4D:37:FA:F0:51:2D:BB:EE:1E:81:75:43:C6:4A:DE:FB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CD4077D0E3360EF45AE411ED0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     9009
IP address blocks:        136.0.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:7d:0e:33:60:ef:45:ae:41:1e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=314e9ddb-a9f2-4dd3-b0f9-33189e9ce28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:ca:c2:89:93:ba:35:ca:cb:c6:1c:1b:6f:
                    e0:9e:b1:44:06:34:78:ef:5e:bb:be:04:c2:90:51:
                    44:77:db:38:5e:23:b7:2a:53:d6:59:52:5c:f0:37:
                    37:f9:b0:22:32:d0:90:8b:25:21:08:99:f5:a5:78:
                    01:58:ba:2c:6c:cb:1f:8e:32:40:62:dd:5b:1e:b4:
                    5b:91:97:87:06:c2:bc:ac:af:9b:cc:ab:a3:2d:61:
                    69:79:f5:ed:ce:1b:67:83:69:72:f8:de:dc:99:b3:
                    b2:13:7c:31:85:a6:ea:ad:15:9f:cf:7c:08:60:0c:
                    b9:be:70:6a:76:58:e8:d5:21:f9:ed:d9:21:49:cd:
                    b3:a4:4d:4e:a3:d2:3b:ac:c6:a2:eb:36:a8:f4:ce:
                    b4:18:ac:63:3b:e4:c5:00:ee:67:c9:62:ba:fd:ab:
                    48:c9:8f:7f:64:a3:fe:df:1b:eb:77:07:ac:0d:af:
                    05:c2:4f:85:1f:56:72:9c:75:8a:a4:0f:16:22:5a:
                    e4:1a:a3:15:ef:82:3e:2a:b9:83:2f:fc:11:60:e3:
                    ef:c3:f5:17:d2:9d:c6:69:9f:f3:42:31:47:28:14:
                    53:80:a5:e0:d0:4b:f9:b7:2c:e4:d7:f2:d8:a3:06:
                    a8:6a:b5:9f:1b:28:f9:b5:70:aa:fb:ba:16:db:70:
                    de:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:58:D3:09:4D:37:FA:F0:51:2D:BB:EE:1E:81:75:43:C6:4A:DE:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:80:65:94:3a:2f:05:c6:26:b2:54:61:a1:5d:56:a9:94:f7:
         ed:fb:48:24:ea:04:61:7b:b7:33:17:a2:95:04:1a:c7:4c:40:
         99:08:73:4a:30:d7:29:8b:3e:7c:92:87:97:4c:e0:a7:b9:74:
         fc:e7:9e:ef:65:a9:30:2d:6e:9e:3d:1f:87:03:00:97:4c:d8:
         15:e7:10:ff:af:d5:e4:c7:8b:2b:16:64:7f:e7:e4:e2:bd:b7:
         df:8c:4f:a3:7e:5e:5f:5c:4a:8b:f0:84:f0:0d:92:32:86:a9:
         f2:d1:a4:35:f6:b5:18:83:ad:29:84:e0:76:05:5b:72:45:95:
         36:3c:c1:1c:32:0e:2c:48:c8:3a:34:69:6e:45:d1:f6:55:e4:
         2e:f1:87:06:cb:2a:f0:be:96:bc:f5:89:b6:6e:97:7c:e9:9d:
         08:90:fe:42:c3:6c:08:18:be:a4:35:ef:7c:68:cf:1b:2f:fa:
         85:af:0a:1b:69:59:5c:16:06:83:f6:26:41:b0:94:84:c2:c8:
         7e:ab:bc:d9:be:5b:91:31:91:5e:2e:de:1c:65:8e:9a:db:33:
         77:c6:eb:d3:ce:f4:6a:c8:ad:c2:27:d8:32:99:79:f9:36:f1:
         a7:c7:b2:65:c0:13:d7:f5:a8:b7:46:65:3e:56:67:08:bc:0f:
         2e:9f:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:27:05 2026 by rpki-client