Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/88bcae78-a54c-35e1-b75e-3b469651fc7e.roa
File:                     88bcae78-a54c-35e1-b75e-3b469651fc7e.roa (raw, json)
Hash identifier:          vsYDNapjEVMuCvPlkOsdIFpRMUcrJgDQ9C4deDvVJS4=
Subject key identifier:   F5:AF:5F:19:20:30:C3:2D:8B:3A:95:F3:E7:A7:14:E3:15:C3:FE:2F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CB981E1CBDFC679D5E0DFCA00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/88bcae78-a54c-35e1-b75e-3b469651fc7e.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     5650
IP address blocks:        136.0.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:e1:cb:df:c6:79:d5:e0:df:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=b9812e7d-abce-492f-9c84-99a700e3b552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:5a:d5:44:29:51:ee:1d:67:05:a2:99:ad:
                    fd:dc:b6:ee:84:38:b9:da:9f:0e:fe:eb:60:02:ac:
                    ae:a7:5b:94:10:49:e5:50:3a:f4:ce:52:d9:d1:38:
                    91:17:56:d3:fa:b0:9c:5c:6f:4c:b0:65:c7:db:f5:
                    e7:44:86:67:42:bc:f1:62:ae:cf:de:d4:eb:b5:fa:
                    ca:ff:b0:bb:46:07:f7:2e:81:e2:14:dd:b1:88:9e:
                    80:4d:e0:87:3e:85:6c:96:30:ac:c8:73:47:0c:68:
                    6d:9c:b7:ba:a8:4f:7e:a5:5d:ab:22:3f:71:69:6f:
                    be:14:74:0d:0b:d7:bc:ef:ad:db:f2:43:3f:48:13:
                    25:0c:fe:4e:d8:82:16:df:7d:0d:cf:58:18:fc:ad:
                    16:55:4d:a2:fa:9d:8e:1a:75:b0:dc:63:42:3d:b1:
                    b2:62:16:b3:fe:c8:9d:05:21:39:68:21:46:33:b5:
                    82:dc:9a:c2:50:03:f5:48:a9:5e:0d:85:ec:fc:76:
                    a1:91:1f:6e:f5:6e:5e:75:96:66:87:26:f1:00:46:
                    3f:16:5b:85:b1:9a:49:0b:07:f9:15:e0:31:a1:4c:
                    3a:b9:6b:60:3a:22:31:0a:8c:c3:07:a1:21:f9:81:
                    c3:6e:c4:62:04:f2:ce:67:0e:6e:a0:db:37:1c:91:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AF:5F:19:20:30:C3:2D:8B:3A:95:F3:E7:A7:14:E3:15:C3:FE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/88bcae78-a54c-35e1-b75e-3b469651fc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:79:31:b7:00:b2:65:77:b5:de:16:de:e8:8b:d8:30:f5:09:
         55:42:8b:cc:14:5d:39:c7:dc:92:e0:d0:47:a7:1c:a8:26:26:
         86:7e:22:39:c0:2a:03:97:50:85:8d:91:42:26:6b:80:93:1c:
         05:45:76:86:1f:80:fb:24:89:88:15:14:d6:71:01:fe:a0:69:
         12:79:d3:fd:cc:8b:4c:70:bf:b9:e1:0c:64:a5:6a:4a:9c:91:
         0b:bc:3e:df:89:2c:62:2a:ca:ab:a9:a5:f4:5e:c6:73:50:1f:
         d6:1e:b1:f5:c6:70:3e:a8:9f:28:e3:17:ee:d5:ab:90:ee:32:
         fc:19:b1:99:83:ca:78:82:9c:e5:f0:66:2c:4d:ac:ac:32:9d:
         79:2c:9c:09:29:2b:ca:31:c6:79:33:ba:59:6f:56:bf:0f:ab:
         0c:c9:6a:0a:7a:e6:b0:cd:c2:a5:89:ae:49:fd:b6:cb:a5:a3:
         3f:46:ab:85:a2:72:52:52:6d:00:fa:f8:0f:8e:46:10:54:04:
         13:ff:3b:20:e6:8d:26:e6:e7:a9:a0:50:2d:2e:ce:7c:7a:64:
         1e:6f:df:d8:10:9b:64:52:4d:c2:21:75:d5:1e:42:0e:e6:0a:
         89:e8:ab:a8:3f:d6:9e:7f:f2:a5:10:82:dc:d4:36:ab:e7:7c:
         b4:33:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:30:44 2026 by rpki-client