Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d27c92e8-3b50-3c83-8127-e2f585b61f00.roa
File:                     d27c92e8-3b50-3c83-8127-e2f585b61f00.roa (raw, json)
Hash identifier:          L+bdQhZufY6S0vh4s7TuPMS5KPag3Lbh8OH0/1xPTrs=
Subject key identifier:   4E:5C:13:77:2E:0C:66:0B:5C:CA:34:CC:11:30:3D:12:7A:0E:23:81
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D764E0DC9DB8DB1C637FD6B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d27c92e8-3b50-3c83-8127-e2f585b61f00.roa
Signing time:             Fri 10 Apr 2026 17:04:14 +0000
ROA not before:           Fri 10 Apr 2026 17:04:14 +0000
ROA not after:            Thu 09 Jul 2026 17:04:14 +0000
asID:                     14080
IP address blocks:        136.0.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:76:4e:0d:c9:db:8d:b1:c6:37:fd:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 10 17:04:14 2026 GMT
            Not After : Jul  9 17:04:14 2026 GMT
        Subject: CN=67086f66-0897-4005-8221-6c73deeb98dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:0c:c8:79:2e:c4:48:80:b1:55:e9:f2:e6:
                    c6:91:e5:60:a6:40:93:69:c8:74:4f:6f:21:a0:b8:
                    51:d5:cf:21:a9:52:53:7d:f5:64:dd:49:84:48:d9:
                    73:c2:67:35:2b:78:00:ea:43:f1:d7:c8:75:8a:74:
                    5b:74:07:a8:3d:d6:ef:ec:bb:d2:a3:ff:53:1c:e9:
                    0b:bc:77:96:12:76:e6:67:e5:97:cf:18:82:95:17:
                    bb:3f:38:8b:3b:66:5a:9f:8a:e9:a4:82:ea:3a:4a:
                    80:6b:77:a9:53:e5:fb:3d:89:fa:8a:17:04:34:7a:
                    a9:fa:fa:1c:60:be:12:2c:c7:7c:95:f7:bc:ee:af:
                    13:46:c3:39:b4:d3:b4:f7:57:60:2f:cd:ce:4f:a6:
                    ee:cd:68:96:c0:ba:69:77:84:60:56:ed:e9:4c:c3:
                    f7:66:74:7e:28:9c:28:4d:78:87:f3:e8:6c:f8:53:
                    cc:89:b3:25:f1:be:4a:3a:a1:14:50:bf:f5:41:f1:
                    7b:30:aa:2b:b5:31:16:76:8a:c0:f4:b4:ec:91:4b:
                    13:72:56:f8:21:98:81:79:c7:29:e3:18:d0:c2:fd:
                    ae:f6:00:54:4f:55:e8:00:26:c8:62:f2:d4:75:eb:
                    02:38:4c:9d:6a:ab:ae:16:63:c6:fa:ff:a7:18:bb:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5C:13:77:2E:0C:66:0B:5C:CA:34:CC:11:30:3D:12:7A:0E:23:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d27c92e8-3b50-3c83-8127-e2f585b61f00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5b:93:71:ca:49:74:df:41:79:f4:13:ab:55:1b:2f:6e:a5:
         ed:61:bc:72:e4:b9:7a:cc:ea:a2:e9:b4:e8:bd:94:a7:49:ad:
         92:97:32:95:7b:47:ad:99:c1:a7:af:06:1a:ac:3a:a7:30:0f:
         70:5c:1f:70:ce:77:c9:74:95:06:be:7d:41:84:4b:59:53:33:
         65:ae:4d:26:af:82:f9:df:37:8b:98:a4:77:0e:83:bd:65:77:
         75:73:93:a5:71:ed:7c:7f:3a:fe:18:db:b5:4d:f4:02:40:f7:
         d0:2d:a9:0a:fe:be:98:28:88:7a:f6:18:70:34:dd:d8:09:cc:
         28:38:4a:b7:af:62:d4:df:28:ce:a4:b3:a5:d4:d0:71:59:05:
         69:40:37:f5:f3:87:b5:1f:5d:b7:60:7b:75:6c:ed:a9:10:ae:
         ab:2b:d8:9d:f5:ea:13:6a:fd:2f:ee:0d:da:cd:d4:c1:f1:3d:
         01:16:ac:ec:2f:cc:19:d7:42:a4:e1:28:a0:11:b4:dd:99:5e:
         8c:19:ad:19:6b:e7:10:04:81:df:38:b7:34:f0:8b:b4:1f:59:
         36:94:86:1c:97:38:f7:77:8a:63:16:cb:7b:ff:cb:b1:72:cf:
         dc:86:83:91:b3:69:86:bb:1f:d8:3f:b0:02:f6:fc:c3:07:f2:
         7c:26:fb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:28:32 2026 by rpki-client