Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d784d83d-a6a2-36cc-9252-63051acfe811.roa
File:                     d784d83d-a6a2-36cc-9252-63051acfe811.roa (raw, json)
Hash identifier:          FxIHZzOGDtiTbQxOPQ84Qoh1wzbVjHbtCT6P7zjmOe4=
Subject key identifier:   7B:70:A7:CF:70:CF:46:ED:79:D2:78:65:DD:B1:A0:71:A3:F5:32:60
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E4DDE96CDF6FC9779B097AC00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d784d83d-a6a2-36cc-9252-63051acfe811.roa
Signing time:             Fri 26 Jun 2026 22:14:15 +0000
ROA not before:           Fri 26 Jun 2026 22:14:15 +0000
ROA not after:            Thu 24 Sep 2026 22:14:15 +0000
asID:                     42831
IP address blocks:        136.0.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:de:96:cd:f6:fc:97:79:b0:97:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 26 22:14:15 2026 GMT
            Not After : Sep 24 22:14:15 2026 GMT
        Subject: CN=5510c1d0-7329-4de5-a202-8ed0050cc4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3e:cc:f3:cb:c4:16:66:40:dd:df:66:64:16:
                    7d:a7:a8:90:f3:dc:8c:00:18:7c:28:b2:6c:9e:c1:
                    93:ba:12:e1:cd:6f:c6:0f:da:d7:93:b8:cf:d8:f5:
                    ea:6f:d6:09:e8:fd:d5:5f:6b:7d:77:aa:95:cc:ef:
                    d3:15:fb:ad:09:11:c3:f4:c7:15:c8:44:0b:f9:3f:
                    ba:8f:24:09:d8:21:77:53:38:55:b3:04:60:aa:8d:
                    ee:16:4f:b9:64:b6:5c:61:ff:47:44:cb:31:1c:fc:
                    ad:e1:9f:97:56:e7:8e:23:be:4b:cb:8c:44:0c:4c:
                    42:48:ba:29:ad:6b:4b:d2:1b:cc:20:21:14:ba:31:
                    87:7f:51:71:eb:17:f2:6e:70:c3:b6:eb:2f:3d:40:
                    1c:21:b0:84:59:34:7b:79:35:fe:74:55:fb:ba:16:
                    33:e2:26:1f:b4:88:24:ad:10:30:66:3b:08:a8:ff:
                    80:aa:1f:ab:25:ec:a9:93:6d:8c:7a:63:11:d8:5f:
                    6a:5f:90:7b:d9:a5:79:28:1b:1c:f2:da:88:c6:c4:
                    90:1a:d0:29:fe:07:a4:01:cf:8b:d6:93:24:44:c2:
                    2e:a3:45:26:98:7c:49:3d:ff:96:54:1c:db:a9:60:
                    bb:b9:9b:ec:bd:64:fa:35:63:ce:40:9f:b6:04:2c:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:70:A7:CF:70:CF:46:ED:79:D2:78:65:DD:B1:A0:71:A3:F5:32:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d784d83d-a6a2-36cc-9252-63051acfe811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1d:e2:c2:c7:25:83:4e:72:6f:8c:2c:5f:ef:c4:4d:fc:80:
         6a:6f:32:d0:0b:74:e4:11:9e:ba:1f:2c:80:38:8e:d9:1e:d7:
         b3:64:1b:22:86:e8:bb:0b:5c:51:73:02:0f:c8:b5:68:e5:32:
         f4:0a:9d:2d:1b:dd:d3:f8:42:82:89:6b:ef:2a:ad:40:17:57:
         83:2c:36:c8:c3:7a:ec:ca:30:bb:90:82:9e:53:1a:f1:52:80:
         3e:99:80:75:81:42:74:a2:fc:c9:fa:4c:66:f6:9c:5a:a1:61:
         e6:4f:a0:3b:07:0a:89:ad:9f:47:4d:43:98:87:c4:eb:32:bb:
         48:7b:dc:38:5e:f1:66:15:16:29:ce:c3:34:34:1c:ae:fd:3e:
         8b:ca:a9:90:9f:58:53:47:74:35:19:c5:26:4a:fe:0d:da:c0:
         5d:5c:85:31:40:9e:80:81:fc:9a:ac:8d:90:b3:b2:b9:64:6f:
         bd:13:e1:e1:47:a0:6c:9a:d2:75:83:ce:d0:c3:69:1a:0b:14:
         5c:63:7a:19:a6:3b:98:b8:96:47:a4:87:5d:37:1a:96:2d:bb:
         60:93:de:eb:80:79:9b:32:3d:69:bb:6d:a0:6e:a9:19:b5:5f:
         8d:3e:78:f7:d0:3a:83:0a:a5:df:58:ef:04:64:f3:92:cb:e5:
         5c:e9:2e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:32:59 2026 by rpki-client