Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c105c9a4-b78b-3156-8c04-e82fd1c6407f.roa
File:                     c105c9a4-b78b-3156-8c04-e82fd1c6407f.roa (raw, json)
Hash identifier:          b5L3L/WmV/I6CGiMGg5Mc6EFk3RKw/9Bzfu9JZ4eRuo=
Subject key identifier:   C7:AC:B4:CA:2C:EC:66:BF:7D:0B:21:2A:C8:BA:B2:33:6B:0C:B9:6A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E360174B26D42EBAB2743D5E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c105c9a4-b78b-3156-8c04-e82fd1c6407f.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     3356
IP address blocks:        136.0.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:74:b2:6d:42:eb:ab:27:43:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=a156c1e2-7c61-4490-9692-a8236179986b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8f:0a:5e:03:91:17:75:5e:69:89:2c:ba:e0:
                    a4:9d:37:52:8b:55:e2:0b:f0:2f:bb:6a:1b:83:c9:
                    fc:26:6a:c5:d0:51:0e:36:96:42:0d:6a:a7:9b:9e:
                    1f:50:f5:45:4d:20:7e:6e:d1:0a:87:24:b6:8d:b7:
                    75:ed:35:b8:fc:f5:50:6e:93:df:7e:1b:a2:87:03:
                    65:0f:9c:9a:db:7b:87:da:94:d8:80:b6:50:2d:f3:
                    bd:34:92:5a:d6:22:fb:c8:fb:dd:24:37:b2:14:6b:
                    56:95:22:5f:db:9f:5c:08:b6:14:93:0e:10:6a:14:
                    c0:9f:8c:4e:5d:9e:49:3e:dd:f9:43:66:64:59:36:
                    5b:81:e3:16:80:dd:2a:9d:a7:9c:03:74:04:28:db:
                    79:73:4d:cc:b0:79:70:10:f4:a2:8c:cc:bc:9b:fa:
                    78:ec:50:f8:06:80:39:14:53:71:4a:00:d3:10:ad:
                    5f:fe:50:28:36:35:62:6a:6e:e7:b9:ea:21:f6:0a:
                    d3:8e:42:4a:6f:b2:27:92:84:9d:e6:d3:3c:1e:c0:
                    6f:b0:39:9b:96:04:a2:0a:ae:53:7d:32:0a:7e:66:
                    82:ad:9f:29:f8:b2:e9:86:9d:73:c3:ef:f7:d6:34:
                    6c:34:a8:b1:63:ed:ea:98:91:54:61:13:20:1a:44:
                    ea:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AC:B4:CA:2C:EC:66:BF:7D:0B:21:2A:C8:BA:B2:33:6B:0C:B9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c105c9a4-b78b-3156-8c04-e82fd1c6407f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ca:17:86:06:1a:18:14:a0:9a:36:74:1f:5d:8b:80:aa:9a:
         bf:23:32:9d:83:b7:6b:c4:00:3e:1d:ee:33:97:cf:da:15:41:
         d1:29:fb:c2:51:0b:7c:7f:25:ec:23:1a:4c:94:c2:01:bc:61:
         a0:34:74:89:e7:fc:be:15:9c:60:17:83:e5:b8:bb:8f:23:87:
         f5:48:53:66:a7:32:ce:70:18:d6:d0:8d:1f:6d:9c:d1:e2:a4:
         05:c5:43:7c:95:e4:e5:16:79:87:cf:b5:c0:ec:b5:00:91:25:
         92:9a:40:d3:33:08:7a:dd:bc:3e:8c:12:79:09:69:e7:35:02:
         03:f6:ae:f0:cd:eb:58:ab:d5:3d:a3:b9:ee:cf:d0:e4:e6:6d:
         a1:58:50:d3:98:21:c2:da:64:af:62:31:47:0f:df:be:ae:ea:
         8a:6e:cf:f3:ae:8f:b4:2d:f5:50:fb:55:b1:49:91:5d:7d:9d:
         9c:00:68:88:69:fe:70:d7:8b:aa:5d:e7:b8:0c:f5:d9:d1:66:
         71:aa:2b:12:6b:95:66:d3:9e:7d:71:04:01:07:99:be:85:d9:
         3d:30:86:45:e1:94:cb:4c:e0:c2:e6:cf:7d:b7:1f:82:12:b8:
         8e:45:13:3a:71:b3:a0:e4:bc:3d:bb:c6:60:28:3c:c5:1e:1e:
         9d:ae:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:39:44 2026 by rpki-client