Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a5125753-3f3f-3c70-bcdf-4cf61ea0bb73.roa
File:                     a5125753-3f3f-3c70-bcdf-4cf61ea0bb73.roa (raw, json)
Hash identifier:          FhV5UBRSG8Kdnf/+zzequ6gVc6o+MaGUQf11DVHwMpU=
Subject key identifier:   13:3C:56:1E:DD:A5:4F:D6:D0:37:67:C7:4F:3A:B8:AC:A5:09:85:B9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E6ECEC7B30AE8635E1F219880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a5125753-3f3f-3c70-bcdf-4cf61ea0bb73.roa
Signing time:             Wed 08 Jul 2026 17:24:04 +0000
ROA not before:           Wed 08 Jul 2026 17:24:04 +0000
ROA not after:            Tue 06 Oct 2026 17:24:04 +0000
asID:                     401152
IP address blocks:        136.0.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:ce:c7:b3:0a:e8:63:5e:1f:21:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 17:24:04 2026 GMT
            Not After : Oct  6 17:24:04 2026 GMT
        Subject: CN=d2913724-eebd-47f8-a810-4f4ef23805b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:b4:28:d8:b6:12:6b:b3:60:ad:97:71:4e:
                    56:21:f4:67:92:6f:4f:8c:03:34:22:7c:8a:23:15:
                    f2:83:d9:1b:8e:0e:40:25:f1:6a:dd:2a:64:82:78:
                    38:1e:50:d2:85:f9:36:e1:b3:28:32:b3:f7:6f:75:
                    c3:d7:70:8f:cd:f1:02:8d:96:21:bc:83:42:50:92:
                    1f:fe:9f:01:cb:80:51:22:3a:82:0e:54:66:40:14:
                    74:8d:bf:4a:df:ca:c1:3d:60:13:43:e7:3e:9f:64:
                    1f:a2:d6:fc:cc:1e:57:1c:b0:35:be:7e:8a:b7:08:
                    70:e8:c9:de:2a:67:e3:a4:ad:c8:61:b3:eb:8a:45:
                    0f:5f:b4:15:a9:1f:72:da:1d:69:d1:b3:84:67:dd:
                    f1:ee:98:c9:81:85:c4:ad:64:79:12:03:59:58:ae:
                    1c:3e:5e:13:e7:fd:85:2f:50:0c:11:b2:fd:67:da:
                    5f:16:dd:ab:8d:59:76:78:5e:1a:34:8b:64:32:45:
                    aa:49:dd:77:37:6d:a6:d5:49:ec:b2:c0:cb:b9:17:
                    eb:21:c7:c4:07:fb:84:18:a7:74:bb:e0:6a:fe:35:
                    ec:88:9a:3a:7a:ca:12:e1:b9:14:23:59:cf:f7:a6:
                    f6:de:04:c8:18:60:01:69:b9:05:79:32:f8:9b:9f:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3C:56:1E:DD:A5:4F:D6:D0:37:67:C7:4F:3A:B8:AC:A5:09:85:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a5125753-3f3f-3c70-bcdf-4cf61ea0bb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:bf:63:5a:fd:7b:c0:bb:e7:81:6f:84:d8:b4:49:46:bf:
         21:f6:10:74:0b:41:64:48:46:c0:b7:45:0f:81:93:5e:6d:b0:
         e1:ad:ce:2b:39:9d:5c:f2:aa:23:3f:b1:78:01:08:b2:76:2d:
         76:eb:82:79:b8:d0:d4:3c:f5:88:b6:b2:fb:a4:db:3d:77:6a:
         3e:f5:62:28:af:c7:8a:68:e9:d6:c3:e3:3c:66:a3:f7:8c:d8:
         51:f3:94:26:6a:83:b2:5f:e6:51:4e:46:b5:73:f4:df:62:5d:
         cb:f7:05:c4:aa:12:1a:f1:85:2d:76:d0:99:d1:bc:db:0c:7a:
         2e:3b:37:7c:4f:08:db:e4:47:5e:d0:29:ba:14:03:55:e9:b6:
         b1:8d:07:ee:31:1b:85:b7:d3:25:b1:4f:1d:f5:52:98:4e:2a:
         79:51:b0:b7:64:c9:7f:7c:67:ee:cf:1e:8b:83:18:b9:8d:c0:
         2f:dd:24:0d:7b:1f:55:51:9c:31:0b:78:56:a3:a7:99:25:fb:
         85:a1:73:c8:f9:19:91:c9:da:67:3f:27:60:39:a8:bd:2c:56:
         33:44:df:9a:90:80:69:d8:6a:a0:94:ce:50:f7:28:74:67:ee:
         65:e0:a4:2d:87:09:ef:00:13:99:b8:2b:77:2c:6d:08:27:3f:
         1a:12:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:33:12 2026 by rpki-client