Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa
File:                     9e945d0e-3397-3db2-8c77-78d048e45730.roa (raw, json)
Hash identifier:          V2o89CIaKUlZUpw3j2hEP07eFd28tqy20bu8U42fPE0=
Subject key identifier:   56:85:BD:22:88:7A:0F:A8:60:F4:B9:49:A6:51:EA:9D:8A:E3:0B:E2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CD4077D61273EFF6266E76040
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     9009
IP address blocks:        136.0.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:7d:61:27:3e:ff:62:66:e7:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=658256a2-927b-4c58-b7fd-a79d81c0f683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:bc:1b:ee:04:99:70:f1:cf:9d:7e:a9:b2:
                    8a:19:bf:58:fb:64:f6:1a:86:00:23:ac:8b:59:a7:
                    48:1e:29:8b:77:cd:2b:53:6d:78:7f:2c:c6:04:29:
                    01:5f:3b:11:9b:39:01:c0:e6:0c:b8:28:80:39:50:
                    49:89:93:3c:a2:d7:40:71:d3:9e:cc:fe:87:45:4c:
                    a1:8c:a9:04:ef:20:b7:8d:64:47:cc:69:7d:60:9e:
                    53:a7:f0:09:6d:26:f2:74:3f:a5:e0:eb:ff:3a:01:
                    52:8a:ba:9d:b5:d8:54:09:4a:e4:50:bd:5e:31:89:
                    d5:a6:e4:4e:94:bf:c8:63:66:41:9d:c0:00:e8:c8:
                    36:81:05:4a:fc:ac:c2:fb:b0:a4:e7:d8:9b:bf:a8:
                    6b:48:9b:d2:54:40:a4:83:8d:b3:c8:3a:68:0b:c0:
                    f3:62:cf:1c:8e:0a:cf:3d:79:d7:c6:d7:a1:fd:a5:
                    4d:9f:a8:cd:dc:9b:de:53:39:b0:0c:c7:bd:35:f5:
                    cf:03:d5:bf:de:80:04:b6:cd:d0:6b:83:7d:96:e7:
                    ad:ca:c4:66:94:38:6c:d7:ea:c8:56:78:5d:c1:d4:
                    67:bc:9c:f5:6d:f7:94:f7:74:1b:ee:17:a4:36:2c:
                    73:07:26:31:a7:08:ba:f6:9c:61:c0:cb:20:43:21:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:85:BD:22:88:7A:0F:A8:60:F4:B9:49:A6:51:EA:9D:8A:E3:0B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:00:2d:a9:07:6e:03:c1:7b:f3:32:a7:1c:03:c0:c7:04:c7:
         43:71:aa:58:bb:45:13:b2:63:99:9c:e8:19:f4:16:bc:f5:b1:
         09:22:c3:8e:1a:94:6d:20:9e:42:fa:00:8a:3c:b5:68:9d:c4:
         a4:a2:51:24:fe:7e:20:a4:35:4a:49:81:4d:46:3e:6d:cd:d8:
         c8:68:d4:33:a6:45:10:dc:b4:72:c1:65:82:dc:cc:47:06:c3:
         ca:36:be:f9:66:97:b8:2a:73:b2:bd:31:b7:b1:9e:25:cd:9c:
         11:bf:49:65:79:0c:56:a9:3a:de:c5:02:47:68:49:f5:bf:5b:
         38:d9:5b:17:8e:02:df:09:9f:90:8a:49:e6:a8:fd:7f:a9:01:
         d8:8a:4c:41:97:50:a8:eb:82:3a:7b:9f:7d:d6:a6:ed:e9:72:
         95:ba:85:a2:74:a3:c6:73:ae:85:7c:fc:91:b6:3b:91:52:21:
         a9:12:8e:57:fc:5b:cf:61:fa:5d:09:17:93:66:0f:81:b9:61:
         fc:89:05:a8:06:ca:e7:b3:77:d1:d5:ba:a5:d9:46:09:88:b1:
         c6:ac:84:16:33:a7:2e:23:53:d3:7f:b2:41:c5:ce:bf:47:97:
         4f:d7:c7:f6:12:0b:32:b2:81:51:cd:3c:47:3e:8a:f8:09:bd:
         36:3c:47:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:27:57 2026 by rpki-client