Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cbd8c3dd-8361-3050-8a7f-dcf9388710a5.roa
File:                     cbd8c3dd-8361-3050-8a7f-dcf9388710a5.roa (raw, json)
Hash identifier:          iMkNz5YMshhJcrshIuoMCO4WoXhRBt+AnZzjZF2nEjI=
Subject key identifier:   C9:E0:A1:8D:48:95:DE:9E:63:57:F7:5F:41:2B:73:E4:DD:83:9F:69
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ED2CC7C1B992EF6206BE05F60
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cbd8c3dd-8361-3050-8a7f-dcf9388710a5.roa
Signing time:             Thu 13 Aug 2026 13:00:12 +0000
ROA not before:           Thu 13 Aug 2026 13:00:12 +0000
ROA not after:            Wed 11 Nov 2026 14:00:12 +0000
asID:                     400402
IP address blocks:        136.0.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d2:cc:7c:1b:99:2e:f6:20:6b:e0:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 13 13:00:12 2026 GMT
            Not After : Nov 11 14:00:12 2026 GMT
        Subject: CN=9c5651b2-9be5-4a4b-9715-58cee3d3cf20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:5f:fb:14:66:f3:71:bc:a4:64:0e:27:2a:
                    5f:bd:57:27:7e:eb:9d:54:26:2e:52:b6:d3:dc:10:
                    99:cf:89:e5:37:92:b5:75:e2:1c:16:d6:f6:bc:8b:
                    f4:c5:9c:10:f4:ca:7d:f3:12:50:b6:e6:32:c7:6f:
                    24:e6:8d:3e:04:3e:b9:5e:30:1b:48:27:15:96:b2:
                    f2:48:f5:bb:a2:c4:a1:5f:a0:ce:a5:b5:35:75:c0:
                    3e:45:da:25:30:06:d2:de:37:d7:68:44:bc:77:15:
                    c4:1f:79:af:96:6f:54:dc:16:b2:55:28:95:ae:94:
                    1a:50:86:8d:dd:47:70:c4:86:87:15:31:09:64:d4:
                    0c:9a:70:d3:ed:41:b3:2a:b2:59:72:a9:1d:3c:9c:
                    df:97:db:8d:e9:d2:35:46:34:75:a5:ae:a9:bd:c7:
                    7a:92:18:1a:43:17:79:a1:a5:ae:72:ad:bd:ed:b2:
                    d8:6f:f3:07:e1:71:06:45:1b:a1:8e:94:54:56:7e:
                    d2:c3:15:8b:56:b2:78:73:12:48:46:cd:6b:98:62:
                    ef:fb:2e:a0:34:81:37:37:9f:00:73:4c:50:56:55:
                    bb:42:51:65:51:cf:81:9f:a4:ae:f1:de:e6:42:d1:
                    b2:4a:15:ba:91:de:97:c8:ab:d3:5a:ef:a5:e5:55:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:A1:8D:48:95:DE:9E:63:57:F7:5F:41:2B:73:E4:DD:83:9F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cbd8c3dd-8361-3050-8a7f-dcf9388710a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:da:f2:3b:31:6b:27:51:95:ff:05:26:4c:fd:29:f7:08:56:
         8c:e5:1d:e0:fd:6f:6c:44:4f:2e:cb:30:f9:13:e0:92:20:6d:
         f8:4f:0f:0c:4f:c7:25:2a:c0:93:8d:55:5b:e9:61:f9:fa:01:
         71:66:23:85:62:c9:1f:a6:e9:b5:7a:1d:d7:49:26:6a:33:e7:
         b8:ef:ac:a7:75:7a:99:b1:8c:7c:ab:0e:4a:b9:6c:07:fb:95:
         93:b9:87:44:dd:64:c3:29:a0:0f:07:e9:77:45:b7:6e:d5:d3:
         1f:27:be:8f:96:62:90:e9:03:be:80:97:f5:42:a8:79:90:c6:
         59:d7:00:20:ef:d0:64:24:ef:42:bf:48:e7:f2:9c:0c:92:eb:
         5a:3f:be:22:34:20:62:40:00:15:ed:bd:63:72:65:5f:9c:04:
         b8:6a:ae:91:f7:d7:35:87:2f:f8:05:59:9a:73:f4:00:8b:29:
         e7:17:96:50:b5:05:f3:06:05:00:2c:16:2d:68:9a:65:44:b1:
         5a:6d:93:db:ab:fc:68:05:2b:0d:3c:66:a2:65:3d:a6:0a:54:
         03:d1:e0:80:ef:0b:3e:9c:6f:7f:22:c9:86:e1:e2:fb:06:7a:
         1c:95:26:e6:28:0f:1f:1b:e3:a4:05:86:70:a1:23:60:86:5b:
         e7:00:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:07:54 2026 by rpki-client