Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/891c7df0-cd7f-3bb4-a53c-7da29cc42376.roa
File:                     891c7df0-cd7f-3bb4-a53c-7da29cc42376.roa (raw, json)
Hash identifier:          rjkfmJs1dOMo+51tMuwgSQBzRK+PmizKgKyjhoImtlY=
Subject key identifier:   3E:95:6C:EE:4C:6F:A8:BC:67:D7:20:5C:EC:63:E5:42:01:6F:C0:A9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D11D885C312B84245E64B5280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/891c7df0-cd7f-3bb4-a53c-7da29cc42376.roa
Signing time:             Thu 05 Mar 2026 17:26:35 +0000
ROA not before:           Thu 05 Mar 2026 17:26:35 +0000
ROA not after:            Wed 03 Jun 2026 16:26:35 +0000
asID:                     397373
IP address blocks:        136.0.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:d8:85:c3:12:b8:42:45:e6:4b:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  5 17:26:35 2026 GMT
            Not After : Jun  3 16:26:35 2026 GMT
        Subject: CN=60978a3b-d97b-45a2-986d-496ee034885a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:24:1c:32:74:8d:a0:a8:85:30:e2:88:14:a5:
                    8f:54:af:60:51:c9:43:44:fb:7b:3a:b8:5a:7c:db:
                    cb:56:ac:c1:6d:0c:c2:db:f1:8b:cb:d7:df:80:54:
                    12:f6:bf:66:e4:56:1e:fd:01:38:b1:99:48:ee:82:
                    a2:8c:15:2b:be:7f:ef:ed:7d:ff:87:f7:57:ff:7e:
                    2f:a7:51:eb:46:56:8b:f7:a5:a8:8d:07:af:e4:d2:
                    ab:27:1d:ee:e7:72:80:d9:11:53:31:70:71:2a:a1:
                    d3:d6:ab:ca:92:11:97:a6:96:5e:76:bd:a4:33:d4:
                    24:da:0b:5f:7c:4c:cf:a5:ca:f7:7b:c7:0f:9d:29:
                    bf:7e:77:5a:46:8d:dd:33:4f:8e:7d:79:90:7a:f5:
                    60:fe:dd:83:ae:c1:5c:1f:7b:5a:ef:4c:c9:c1:31:
                    11:20:db:82:27:33:fa:0e:49:3c:26:88:ad:56:b1:
                    78:28:25:d0:9d:46:58:96:15:e3:f1:f0:c7:70:36:
                    dd:7a:1b:40:c9:1b:13:1b:95:ac:7d:3b:c9:35:8c:
                    df:f1:5d:f5:fc:09:9e:eb:0a:e8:d6:15:7b:ab:59:
                    9a:a5:29:7d:76:d8:30:78:de:5e:fd:aa:86:21:a2:
                    a1:e8:a7:b5:ca:46:56:9c:a1:84:bd:e7:8d:a6:23:
                    07:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:95:6C:EE:4C:6F:A8:BC:67:D7:20:5C:EC:63:E5:42:01:6F:C0:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/891c7df0-cd7f-3bb4-a53c-7da29cc42376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:10:3a:d8:b2:c6:58:96:f0:75:48:00:2c:4d:92:d5:cd:90:
         34:0f:4e:88:70:e1:8e:b5:0e:cb:72:8e:42:f1:43:00:e4:a2:
         e8:65:d5:7c:cb:ed:b0:28:61:6c:d6:6f:20:ff:f0:a1:9e:79:
         e1:61:4a:c7:46:f4:8c:21:c8:32:21:ea:7a:f0:08:4c:82:e1:
         2a:55:d2:67:0e:68:12:ad:b1:9f:78:83:c2:59:c3:1a:12:7f:
         24:b5:02:8f:75:e0:85:d9:e9:90:55:dc:ad:6c:b0:94:e8:7b:
         45:a5:01:22:03:95:f9:12:3f:f7:ac:46:af:3d:26:9e:2d:3e:
         93:dc:86:a8:62:7d:80:b9:13:d0:2b:c9:f6:5a:3c:1d:03:02:
         02:7c:41:02:9d:cd:44:45:ab:b0:b2:9b:20:80:51:d0:7d:8d:
         06:e1:72:7f:ab:3e:25:d9:b5:3d:80:19:8d:bf:cd:4b:44:f9:
         09:c3:d9:4c:ea:a4:c1:16:39:05:84:d4:e3:e9:ea:49:f0:47:
         f3:6f:80:9b:d1:42:79:2a:13:51:f0:07:41:35:66:d4:08:b8:
         7f:41:26:c8:7a:da:7c:71:fc:2a:4d:30:9b:d7:d7:c2:9b:ea:
         86:7c:87:cf:7f:8a:ef:89:52:2d:d7:38:a2:fc:95:3d:33:66:
         c2:ea:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:02:29 2026 by rpki-client