Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e2bf3b69-21ab-37d3-99b2-869ae0333bcb.roa
File:                     e2bf3b69-21ab-37d3-99b2-869ae0333bcb.roa (raw, json)
Hash identifier:          3hpEqo+UHECDWYq5uKL9uRIhRrMYK8jsv9FHiOWH7s8=
Subject key identifier:   8A:71:65:61:C7:40:C9:44:31:26:97:28:C5:2A:70:DE:28:A0:A8:A9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EB6E1B03372EBEA7F0AC79840
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e2bf3b69-21ab-37d3-99b2-869ae0333bcb.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     7018
IP address blocks:        136.0.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:b0:33:72:eb:ea:7f:0a:c7:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=07fd9457-c9a2-4291-870e-93f11019b668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:65:47:fc:a4:89:12:44:0b:98:58:61:a2:
                    f3:d3:6e:54:77:4a:ba:51:2f:81:02:38:74:70:60:
                    62:fd:70:ae:cc:9c:dc:92:9b:8f:bb:e5:cc:8b:9e:
                    ce:76:d1:e8:88:28:71:06:80:bb:8d:e2:79:12:8a:
                    e5:85:62:ef:53:e4:aa:57:1c:55:41:49:57:ac:e3:
                    91:27:7a:ae:cc:af:f8:23:98:da:7f:c5:4e:0a:e7:
                    37:f2:bf:97:ee:75:b7:a0:27:2e:ad:63:95:ef:24:
                    4c:3e:c0:29:45:c3:57:2f:b1:93:f6:f4:88:a5:61:
                    49:35:56:c7:14:85:d2:f9:d8:85:67:8d:95:6a:27:
                    81:74:4f:f7:ee:f7:6d:17:52:cd:bc:96:16:49:cf:
                    4b:56:0e:ef:55:27:d2:f9:a9:74:01:c7:0d:3f:15:
                    41:b2:c8:ba:56:48:7d:42:a7:0a:24:cb:72:c0:78:
                    d8:2d:eb:1e:ed:db:66:45:7c:61:3f:ac:13:52:ec:
                    75:9a:77:1b:2d:a5:c2:87:26:58:76:40:24:01:c3:
                    f9:eb:f9:d5:a4:84:5e:b0:9f:71:63:8a:85:97:a3:
                    c4:ca:3a:1e:3c:f7:35:8f:e5:40:d9:c2:8c:50:ab:
                    70:8f:70:e7:c0:5f:2c:a3:c7:b6:3c:a0:77:fd:b9:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:71:65:61:C7:40:C9:44:31:26:97:28:C5:2A:70:DE:28:A0:A8:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e2bf3b69-21ab-37d3-99b2-869ae0333bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:83:b0:78:7a:ec:2a:80:6a:22:ee:1e:71:4b:15:c0:20:a1:
         93:59:cf:a3:1a:6f:dc:f1:f6:5e:67:a1:dd:a8:61:92:9d:df:
         dc:97:bf:5c:de:68:97:a5:27:4d:c3:5d:52:13:17:a4:22:54:
         bf:f3:62:e6:10:6f:ec:67:0e:7a:0d:60:6a:7c:01:e4:1c:cd:
         2b:85:4d:9d:d1:16:02:39:1e:fd:73:8a:96:aa:15:eb:a6:a2:
         5b:c7:32:7a:b2:30:a3:6b:c9:c1:6f:ce:c7:65:28:2e:5d:79:
         00:46:cd:0e:3d:55:3f:78:d0:4d:3e:c0:12:b6:a8:15:e9:12:
         d7:ad:85:58:0d:9c:4a:46:ea:3f:94:ac:8a:93:4b:d9:e1:57:
         3c:54:dd:0c:61:c6:1b:5c:06:7f:e9:31:77:48:5e:77:79:2e:
         8b:9f:b0:4b:a0:ad:d6:e8:97:07:13:ca:59:7e:89:5f:60:54:
         ad:36:7a:19:bd:7a:32:35:54:7c:01:38:0a:ad:0b:97:11:d9:
         1a:98:3c:e9:63:56:e3:1c:36:cc:0d:57:c1:5e:0e:e1:f7:19:
         05:e1:e5:e4:13:e4:e0:22:57:4f:5d:b0:1f:da:f1:62:0f:74:
         41:f9:0c:d3:0f:61:46:b0:5e:ea:e8:c9:65:3e:38:bf:ca:25:
         2c:38:0b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:06:35 2026 by rpki-client