Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8fd61c0d-07de-3677-961c-f5cd11ddd9e2.roa
File:                     8fd61c0d-07de-3677-961c-f5cd11ddd9e2.roa (raw, json)
Hash identifier:          tM6k6M1ruGvoJ8zBgnBTaNXLQ4+g9lz+66M832E+IO4=
Subject key identifier:   EE:91:C5:D1:0E:E9:D1:FC:30:85:AE:B7:50:74:50:1D:4D:46:73:7B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D709C7679F4B11D9E3B92EC80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8fd61c0d-07de-3677-961c-f5cd11ddd9e2.roa
Signing time:             Wed 08 Apr 2026 16:07:22 +0000
ROA not before:           Wed 08 Apr 2026 16:07:22 +0000
ROA not after:            Tue 07 Jul 2026 16:07:22 +0000
asID:                     812
IP address blocks:        96.126.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:9c:76:79:f4:b1:1d:9e:3b:92:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  8 16:07:22 2026 GMT
            Not After : Jul  7 16:07:22 2026 GMT
        Subject: CN=7afc0002-a7a6-457a-a1fa-7f8f7749ba17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:af:42:63:96:41:fe:bf:97:8a:f9:cd:31:24:
                    7f:48:4c:4b:1b:40:ac:94:16:90:21:0f:7c:98:a5:
                    09:8b:c6:bc:85:79:95:43:a5:f1:5e:27:f4:a2:26:
                    da:16:27:6a:b8:97:34:52:1f:53:27:33:2e:d0:04:
                    b9:ee:9e:35:0e:c4:1e:63:a7:e0:5f:c9:56:be:2f:
                    38:21:27:48:97:42:05:93:90:9f:30:30:88:03:16:
                    3d:b6:76:2f:15:cd:4e:2b:77:9a:85:05:4c:37:b8:
                    3f:02:ed:42:5c:83:b0:0b:65:f1:8e:b6:b8:28:f6:
                    a9:bd:77:26:c4:94:45:0c:77:1a:e3:29:49:35:e1:
                    e9:74:aa:1b:fc:fb:b6:31:ad:ec:81:ac:7d:cc:9c:
                    0e:21:fd:5d:0d:d1:8b:b0:6e:ab:49:cb:39:0d:15:
                    ea:5e:68:52:2d:12:b2:07:c3:06:1f:bd:c2:3f:ca:
                    b3:05:b5:ca:23:e8:4d:16:4f:a4:2f:8a:dd:b3:9a:
                    92:af:fb:ea:00:ec:f4:3f:60:34:17:97:d4:12:db:
                    be:5d:b9:0c:1e:e5:e5:0b:97:a0:1f:27:10:32:87:
                    dc:65:f2:eb:b8:3b:d4:a2:f2:99:8e:93:8e:a1:ca:
                    17:a7:24:eb:17:88:a6:c8:eb:29:a3:5f:1d:00:26:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:91:C5:D1:0E:E9:D1:FC:30:85:AE:B7:50:74:50:1D:4D:46:73:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8fd61c0d-07de-3677-961c-f5cd11ddd9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:70:b4:21:0c:ee:55:3b:79:02:e0:a0:17:f7:35:e1:49:91:
         3e:99:c7:66:67:a3:6b:bf:4a:03:7e:04:b0:98:3e:46:0c:47:
         4a:96:ec:73:b9:57:68:e1:6a:b9:65:c0:88:1d:22:37:1e:0d:
         b0:88:84:32:30:16:56:ba:4b:a2:eb:2d:c2:d6:33:c2:7a:7c:
         c5:f2:e4:05:d2:91:e1:3d:e5:a8:0f:1f:dd:d1:47:3f:98:3d:
         b9:3b:cf:79:14:3c:d0:50:cf:f9:ad:64:d3:0f:28:30:14:87:
         72:d4:f0:34:03:a1:cf:b5:e2:d2:15:44:e5:8c:fa:b8:ae:59:
         43:d0:05:ab:22:b6:b8:5e:8e:a1:9e:9f:27:80:a8:b7:6a:c1:
         1c:a6:4d:3e:83:2a:33:ba:c4:03:84:b0:32:58:d9:aa:7b:6d:
         bc:13:19:70:61:45:47:e1:2d:22:32:5a:5a:87:75:81:e7:20:
         d4:b3:5f:36:88:1d:70:52:fd:87:a0:22:64:3d:07:9b:b1:81:
         20:25:93:76:18:5b:70:96:26:27:91:f4:27:98:4f:99:42:19:
         d0:e1:02:dc:71:91:df:18:cc:aa:93:43:79:06:8c:77:68:ca:
         d8:41:9e:4a:4a:57:df:1a:62:6b:fa:49:90:d3:bf:ec:37:97:
         1a:a5:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:28:28 2026 by rpki-client