Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b912b2d-8dca-3a31-b77f-52aa979dac36.roa
File:                     9b912b2d-8dca-3a31-b77f-52aa979dac36.roa (raw, json)
Hash identifier:          buK0cvTBIB1FfHa8cy1AwZcLqEsvxNAdFjleZ3PD7k0=
Subject key identifier:   39:EF:36:31:80:CA:63:CB:C0:43:6D:8D:22:F3:14:E5:B1:7E:64:DE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F62931189B139749E14C23680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b912b2d-8dca-3a31-b77f-52aa979dac36.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     397423
IP address blocks:        136.0.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:11:89:b1:39:74:9e:14:c2:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=d0224df5-8192-4177-89ad-12f1b4cecb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:45:97:d1:b5:30:24:2f:97:dd:88:e2:c7:af:
                    6f:1f:a5:58:18:b5:54:62:41:f8:65:ca:1a:55:51:
                    f3:d1:1f:2d:ab:13:46:fd:d0:29:43:3f:40:85:1d:
                    01:5f:a8:11:3a:5a:a3:49:7a:78:9a:49:d5:49:70:
                    f5:04:72:f7:b2:f4:ba:74:42:68:74:95:83:ec:a1:
                    fa:22:12:49:a3:bd:cd:a7:16:fd:de:0a:f1:20:9e:
                    5d:22:58:2d:16:3e:89:38:92:8f:27:25:29:71:9c:
                    70:2e:b0:f4:ed:0a:f6:fa:12:ed:d8:f8:ab:36:58:
                    33:8c:78:f2:d9:26:2f:7a:d2:ef:2b:7c:ee:51:bc:
                    2b:1a:18:b1:3b:4f:39:b0:19:b3:a0:10:67:cc:ad:
                    93:ef:59:fe:bd:45:21:4e:6f:51:e9:4a:f6:2a:d5:
                    81:47:c5:5f:2e:80:d8:24:08:39:1c:cf:d9:6f:f4:
                    df:74:5e:c2:a6:9d:50:3f:4f:83:29:3c:b0:32:e8:
                    d2:6f:5c:9a:0c:31:b2:41:4b:3c:dc:68:11:5b:0b:
                    81:fc:d0:e2:70:42:19:2d:e5:6b:e5:41:f8:06:67:
                    17:b1:90:ba:2a:4f:04:c0:ce:a2:59:f2:99:bd:fa:
                    e0:1f:c2:6f:0a:49:36:f6:68:a4:20:f5:bf:ea:55:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EF:36:31:80:CA:63:CB:C0:43:6D:8D:22:F3:14:E5:B1:7E:64:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b912b2d-8dca-3a31-b77f-52aa979dac36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:22:76:87:d5:72:16:ec:a9:28:d5:ee:e9:c0:e8:48:77:
         61:bd:00:33:f2:44:42:64:b9:79:a6:ba:75:74:bd:24:ad:0d:
         85:75:5b:4b:20:65:36:e6:94:95:85:09:4c:5e:43:c4:da:60:
         7f:13:0f:72:21:b3:90:70:66:2e:d2:e7:ff:78:f5:3d:e2:62:
         bb:6a:41:e6:a3:71:25:51:fd:a6:7a:28:25:3e:82:73:64:ab:
         78:91:87:e0:6e:8d:59:b9:c9:54:7f:6b:d1:6f:7e:e9:b2:17:
         fb:9c:eb:05:0f:6b:01:3c:bf:6d:c3:e2:14:d0:58:d3:d5:6a:
         91:76:0a:42:9f:dc:8a:35:a6:e5:fb:c7:b5:04:96:05:33:52:
         eb:01:c2:79:36:8d:bf:17:0d:3e:04:70:f1:48:4f:71:c9:3d:
         cf:f1:59:6b:3b:fa:88:d3:2f:cf:b3:b6:46:43:04:94:e5:a6:
         6a:5b:22:4e:5e:4c:66:77:f3:d3:5c:e3:57:59:12:ec:83:4e:
         c5:4c:98:1b:13:37:95:b8:24:e3:01:6a:83:ae:4f:6b:f0:f6:
         39:e3:1c:6e:b1:d0:01:fe:12:20:2f:ab:f2:48:23:a7:13:bf:
         c3:e4:f5:bb:62:88:1f:35:f5:06:f1:13:5c:58:3d:c2:e4:7d:
         a5:cf:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:15:06 2026 by rpki-client