Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c60ed1b-f85c-322e-8601-fbe9f8a4c16b.roa
File:                     8c60ed1b-f85c-322e-8601-fbe9f8a4c16b.roa (raw, json)
Hash identifier:          GO5DzLU6OI40tCv5g3dqoLnR8L82m5roCS23HbPpmP0=
Subject key identifier:   AB:41:A3:83:FF:E4:30:E6:83:76:6C:27:7B:DA:4B:07:20:41:0E:8D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D11D885A98C6AB879E1FC3DB0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c60ed1b-f85c-322e-8601-fbe9f8a4c16b.roa
Signing time:             Thu 05 Mar 2026 17:26:35 +0000
ROA not before:           Thu 05 Mar 2026 17:26:35 +0000
ROA not after:            Wed 03 Jun 2026 16:26:35 +0000
asID:                     397373
IP address blocks:        136.0.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:d8:85:a9:8c:6a:b8:79:e1:fc:3d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  5 17:26:35 2026 GMT
            Not After : Jun  3 16:26:35 2026 GMT
        Subject: CN=202efebc-a77a-414e-8876-61ad7780cb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:72:41:83:b9:34:80:2c:bc:58:cd:6f:ce:bf:
                    3c:c4:94:32:cd:95:31:8a:6d:c8:21:52:d5:18:b3:
                    62:ab:ad:25:50:d9:6e:a5:59:9d:fe:b6:d1:4e:a3:
                    6a:f5:41:bb:55:7e:9f:fa:95:31:f2:9f:04:3f:0c:
                    6d:f6:81:7e:ac:56:25:22:38:51:ba:bb:ea:c1:62:
                    32:ad:c2:8a:1f:b4:2d:5d:02:72:93:c5:28:dc:43:
                    61:ee:23:a0:71:90:50:5b:90:25:6b:4c:02:19:7a:
                    0a:65:4b:3c:c5:37:c9:0d:7a:39:fc:7a:f5:7a:36:
                    60:3a:e8:bf:7a:03:32:ca:ae:8b:84:82:d9:29:6d:
                    bb:dc:74:f0:ff:36:fb:a4:fb:87:09:d6:6a:5b:d3:
                    75:57:4a:8f:0f:7d:e8:88:75:2d:58:e0:d7:d4:07:
                    f5:7e:42:9f:97:d6:fd:ef:b5:2a:e1:db:ab:8f:74:
                    b4:ce:1f:24:de:1b:f8:28:f6:1c:f8:60:bd:53:47:
                    32:29:68:54:fb:d7:f3:09:a2:2b:4b:bd:95:32:ed:
                    80:c5:48:6f:4f:ce:55:9a:f4:f2:24:e6:9d:3b:31:
                    00:da:53:f3:28:65:ff:4f:33:2d:e0:d4:c1:4c:b4:
                    8d:41:19:b9:df:df:fc:2e:2e:27:54:5a:bc:73:8c:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:41:A3:83:FF:E4:30:E6:83:76:6C:27:7B:DA:4B:07:20:41:0E:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c60ed1b-f85c-322e-8601-fbe9f8a4c16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2f:ca:e7:fb:1d:fb:ba:bf:6a:be:50:35:c8:eb:9f:fe:1a:
         1e:a4:81:83:f3:6d:aa:49:02:b5:e0:cf:06:33:73:4d:80:35:
         5d:bb:68:ee:88:52:83:3c:61:ff:02:8a:7b:ea:96:57:94:57:
         ab:bb:13:6f:ba:d9:d4:f6:f8:6f:8f:81:13:a0:1f:47:cd:78:
         ad:64:f2:71:77:16:e7:41:85:2f:db:b6:b2:ba:bf:65:ba:a1:
         4b:0d:be:13:2d:f1:b8:25:1b:43:61:8a:8a:c6:52:05:55:6a:
         69:25:56:de:42:78:ef:2c:22:1f:eb:98:aa:ea:fa:b6:ad:4c:
         5a:0c:2f:36:8c:85:2c:b2:6b:10:f3:6d:df:5f:1f:78:2b:f1:
         9e:5e:6d:93:91:35:7c:56:f2:82:0c:72:57:e3:82:65:0e:f3:
         b2:a5:67:e7:2d:15:aa:4b:7e:42:5b:35:5e:65:3a:87:9a:49:
         26:ee:d6:fa:8c:dc:5e:9f:d3:b3:d6:f2:3e:6a:f4:a7:8e:46:
         2e:35:9e:62:78:fd:48:c5:fd:12:30:36:5d:11:26:55:96:35:
         fb:2c:50:63:af:9c:9f:40:4b:e7:a4:8d:76:23:6a:9d:4a:f7:
         1d:36:a3:e8:da:f8:8e:8c:ff:04:d6:9b:64:6f:1e:bf:df:a4:
         1c:76:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:02:13 2026 by rpki-client