Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa
File:                     d952b645-35ef-3f72-a694-b7b692438686.roa (raw, json)
Hash identifier:          WOzcCdm1DNMDEV1k1pzxVJbUz8ZGDvKWj962CmsDYHI=
Subject key identifier:   60:37:23:1D:D3:85:E5:22:DE:C9:89:2D:FE:2E:71:8A:DA:F2:54:72
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EB6E1B00E075CD945D67880A0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     7018
IP address blocks:        136.0.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:b0:0e:07:5c:d9:45:d6:78:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=b9990901-6cfe-4059-851c-0245a59bf1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:9e:a0:85:a6:1b:1f:8a:f0:a3:fe:c3:93:
                    76:a6:f9:09:ee:7e:ed:64:a4:42:65:53:7b:6b:c1:
                    48:f9:7c:97:7e:c0:ed:57:2d:4b:7d:cd:04:ad:39:
                    de:0c:6e:1d:f2:fd:17:95:25:1b:92:d6:42:20:56:
                    15:d9:4d:fc:90:99:98:d1:01:18:38:f8:69:70:04:
                    2b:bf:f0:3d:25:dc:92:ab:69:37:03:92:e8:b9:a3:
                    38:d8:d1:a9:bf:9b:bb:f1:bd:b7:38:b0:fa:14:a5:
                    0b:fd:aa:2d:48:7f:c4:27:8e:93:d9:36:8c:7b:65:
                    a3:85:10:dd:4c:48:a0:36:40:3a:72:ae:fa:16:71:
                    dd:a7:f5:53:c6:6b:ff:e4:ec:d1:66:88:c2:88:65:
                    b4:05:9e:6a:42:f4:4a:b3:44:b0:43:6d:c2:28:6b:
                    a9:02:af:b1:d1:cb:c7:20:73:d5:aa:7a:43:53:19:
                    03:de:e8:8b:35:2e:2f:c9:22:bd:cc:61:ff:6b:47:
                    c2:12:8a:b1:1f:40:9d:b1:7a:65:d3:12:53:a0:f3:
                    6e:61:b8:7a:44:eb:a1:9f:79:1c:03:2c:76:87:26:
                    97:7a:3c:ba:86:93:bc:59:51:50:e4:d7:ec:74:00:
                    0a:87:36:27:db:e4:bb:8d:fb:45:e4:f3:a0:2c:bc:
                    b0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:37:23:1D:D3:85:E5:22:DE:C9:89:2D:FE:2E:71:8A:DA:F2:54:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:7e:61:30:58:52:54:20:2b:29:a3:69:bd:23:f1:cd:b9:
         5c:4c:f5:3d:f9:ff:4d:ba:92:e7:9c:bf:fd:72:ad:d5:a3:ff:
         91:dd:e1:e2:7d:b6:01:d3:43:9a:03:d2:41:01:db:10:2e:0a:
         dd:33:89:01:15:d4:42:35:ae:49:28:8b:46:84:44:ea:96:d8:
         01:3d:50:d4:48:b2:ef:5c:e5:90:67:02:db:ca:18:cd:f1:d0:
         d8:7a:37:2c:d4:98:63:75:e0:d6:0d:fb:8c:91:ee:f5:b5:fd:
         f5:34:45:a8:c6:a8:61:3b:6c:46:06:b2:54:2d:72:cd:9d:41:
         6e:80:fd:fe:75:bf:3e:e8:61:59:04:e6:bb:c4:c9:ab:51:2c:
         5b:7e:5a:d8:49:72:e2:59:5c:39:e6:8a:d4:0d:19:3a:03:3f:
         26:e6:19:fe:40:98:7e:11:91:5b:a4:3a:7b:4a:cc:ae:b2:85:
         30:46:99:82:01:59:d7:c4:6c:60:8c:14:0e:0d:8b:b1:0f:1d:
         7c:37:ea:ae:d7:29:e1:58:06:57:2b:4f:b7:50:1a:cf:ba:39:
         55:74:9c:4d:d9:a8:5a:50:f7:2a:88:b3:08:a1:07:6b:aa:b6:
         8d:9c:0c:5e:98:d4:ad:77:70:e4:ae:53:25:f1:86:f4:93:77:
         b8:8c:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:08:44 2026 by rpki-client