Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa
File:                     d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa (raw, json)
Hash identifier:          AHK7cKnbVB9U14gqsTV/Fq0i/DcRsnkim9AdiHYU69k=
Subject key identifier:   9F:B3:E0:13:02:ED:47:E5:8C:D5:DE:54:6C:06:8B:18:43:A9:70:08
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E5A4A0CBFDA524A8F414C83C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     399646
IP address blocks:        136.0.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:0c:bf:da:52:4a:8f:41:4c:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=cf11ac04-75b9-437d-9e7d-8c6d07926b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a9:16:13:55:6f:56:c8:ca:c1:1d:ea:d9:23:
                    b2:45:fa:8f:d0:a4:1e:6f:7b:a4:04:31:94:f4:e8:
                    97:4b:15:58:76:a7:e0:f8:d9:cc:33:00:8f:0d:b1:
                    59:0a:ea:53:9b:fa:7f:9f:f8:3a:ee:e9:7d:8e:a1:
                    77:8a:8f:24:c1:6e:60:dc:df:a5:80:18:44:39:75:
                    98:f4:3f:83:fb:35:5b:a7:ba:89:d1:6d:71:a1:77:
                    92:28:fc:fe:6b:3d:98:5c:f5:4f:41:ce:0a:b7:f9:
                    89:d8:85:54:1a:05:8a:69:b0:86:de:35:d9:32:35:
                    71:40:af:2e:7f:36:c4:16:d9:77:f7:bf:88:68:54:
                    82:fa:6c:62:75:e5:eb:bd:27:fb:f4:d9:45:5e:37:
                    2a:61:bf:a6:85:f5:5f:45:97:80:cf:f1:ab:c9:36:
                    34:4c:6a:e4:0a:ba:42:0e:d6:fb:99:91:bb:6f:59:
                    12:e6:43:57:35:c7:55:00:de:a5:94:4a:a6:5a:83:
                    6d:bf:1e:d8:ad:2a:34:b9:6a:5a:a6:17:bf:03:c0:
                    b3:de:d7:08:5e:03:40:61:36:60:86:74:19:a8:38:
                    df:97:4d:7a:92:e9:4e:f9:0c:dd:2b:f3:cc:26:25:
                    71:65:d1:99:3b:b0:83:a0:5b:a3:1f:af:66:16:28:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B3:E0:13:02:ED:47:E5:8C:D5:DE:54:6C:06:8B:18:43:A9:70:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d7:5d:8c:95:96:45:25:80:de:54:8a:85:d9:99:0e:dc:0a:
         92:88:8b:cc:0d:e3:28:ce:fa:24:6c:af:64:21:3b:40:25:53:
         d4:aa:0f:b2:ab:61:5f:80:28:cd:23:8a:14:61:02:42:67:9d:
         36:6a:a7:cd:b7:66:3d:a5:bc:cf:62:6b:be:e9:0c:68:29:37:
         cd:a6:2d:6c:f6:0d:32:1e:91:41:c5:9d:57:ad:97:4e:83:ef:
         d1:43:24:33:25:33:6f:06:df:42:c3:93:d4:fb:d0:fd:46:7b:
         2b:18:87:36:e3:93:03:b7:ae:10:60:14:7c:56:f5:22:db:a3:
         e5:6e:95:11:fe:e6:a0:00:8f:b7:70:25:e3:ec:e9:7a:1c:0a:
         46:40:8f:57:65:2e:40:ce:0a:29:15:ae:17:ba:72:41:76:2d:
         3f:76:db:45:f3:87:f4:1f:b3:1a:d5:1c:56:9c:f4:a9:af:e6:
         8e:b6:d5:f9:ab:e4:06:d4:05:74:90:93:fe:93:95:d6:8e:b5:
         35:fc:40:e3:56:90:6a:96:28:45:85:c6:01:12:cf:2e:f0:7d:
         95:d6:12:6d:be:62:f2:35:8e:39:3c:e4:37:e1:c2:cf:d4:23:
         71:aa:a5:8d:2b:67:56:fd:b8:d4:09:d4:83:bd:e8:e2:b4:03:
         1c:63:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:35:41 2026 by rpki-client