Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be405e91-a36f-30dc-9d75-d9f50472b6ef.roa
File:                     be405e91-a36f-30dc-9d75-d9f50472b6ef.roa (raw, json)
Hash identifier:          SAkSefU6aHz0zvycT4Mkr39MGD06krkMYa5ymhs/xpQ=
Subject key identifier:   80:45:B3:62:4B:74:42:E0:F2:74:53:F4:C2:43:C3:AF:6D:1B:BA:C3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D97C2FA3C526D6C5AA78C1630
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be405e91-a36f-30dc-9d75-d9f50472b6ef.roa
Signing time:             Wed 22 Apr 2026 16:41:29 +0000
ROA not before:           Wed 22 Apr 2026 16:41:29 +0000
ROA not after:            Tue 21 Jul 2026 16:41:29 +0000
asID:                     199186
IP address blocks:        136.0.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:c2:fa:3c:52:6d:6c:5a:a7:8c:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 22 16:41:29 2026 GMT
            Not After : Jul 21 16:41:29 2026 GMT
        Subject: CN=ea6172b3-b88c-4c96-910a-60794d17f5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:b4:a7:56:5a:15:36:b1:16:ef:77:63:e0:
                    fa:cd:2b:b6:14:e1:1c:c8:c1:a5:1d:12:61:94:7c:
                    72:92:23:47:9c:51:24:e1:9a:73:1f:3c:ba:3e:16:
                    bc:4b:56:43:11:d2:cd:2a:09:fe:1a:0d:d6:dc:c4:
                    5b:3c:9b:b5:07:5a:22:a5:65:f7:f7:02:3c:a0:88:
                    e2:ce:a3:78:39:b4:15:ca:52:67:c5:42:61:63:02:
                    a4:99:fe:c7:bc:1d:30:78:4a:f4:6f:90:b9:2c:ab:
                    b1:bc:05:b3:b8:fb:63:84:14:64:ff:24:f3:7e:b5:
                    8c:7b:c5:19:90:3c:77:5b:01:d7:d8:da:06:a4:24:
                    c4:1f:57:8a:fc:26:a5:8d:e2:6c:2a:5e:df:cd:db:
                    b0:e8:b6:ee:b1:37:4f:23:c1:f0:c0:b6:bb:fc:bc:
                    0f:f7:4d:e0:50:43:4a:3a:5f:7c:95:43:2a:62:82:
                    18:b7:c3:6f:16:c1:e6:ab:ca:31:0c:f0:c8:8e:e0:
                    56:05:00:87:6b:52:ae:6d:82:b9:13:54:dd:35:11:
                    3d:49:96:87:2c:5b:63:ea:ee:7d:86:aa:1d:07:9c:
                    ca:11:d7:8d:70:66:94:e1:06:fe:4f:18:19:99:8a:
                    f7:81:da:dc:49:5f:df:21:87:02:40:e0:b6:9a:76:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:45:B3:62:4B:74:42:E0:F2:74:53:F4:C2:43:C3:AF:6D:1B:BA:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be405e91-a36f-30dc-9d75-d9f50472b6ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:29:23:ea:88:c8:a3:61:4a:1b:7e:6f:83:eb:31:65:de:
         f2:d1:cb:04:3e:61:c9:e5:b3:7f:b1:a4:f8:a9:4c:22:1b:11:
         99:be:1a:a9:e2:84:dc:d7:f1:dd:b2:aa:97:14:3a:5d:5d:1d:
         ef:c1:11:00:52:2c:c1:4a:be:00:a5:9e:03:2b:98:7e:ba:cc:
         fc:31:ba:f2:a4:0e:2e:96:e2:0b:d8:8a:3c:46:66:7b:58:15:
         b5:40:1d:35:91:da:bd:cc:20:37:33:03:5e:9b:3d:69:e4:67:
         34:57:f2:30:71:ce:70:25:f0:51:e8:5f:b3:79:34:f0:9a:9b:
         22:af:9d:b7:21:73:a2:ce:97:85:89:99:c9:f0:a9:7e:a5:72:
         13:38:89:67:e6:f6:5e:35:84:b2:e4:c8:53:cc:f5:3a:9d:28:
         43:0a:a2:4c:a7:c7:d0:4e:36:79:bc:41:b2:fc:11:0b:69:19:
         5c:4d:e4:f2:12:14:b1:41:00:c1:fc:95:67:0f:af:30:07:7e:
         65:33:2c:9b:d1:f1:d6:11:19:2f:17:22:f5:bf:da:cb:18:29:
         9b:fd:2b:c9:bc:83:fa:3e:b6:09:19:45:95:e3:3f:1c:8a:1d:
         0e:8a:05:0c:b0:84:aa:9a:75:5a:19:24:02:d0:7f:46:6b:d3:
         4e:06:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 19:13:45 2026 by rpki-client