Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e48ee7c5-2956-3057-9b4d-ebb3ed9b0c94.roa
File:                     e48ee7c5-2956-3057-9b4d-ebb3ed9b0c94.roa (raw, json)
Hash identifier:          O1vLaiOQSPJ/ItiU1zTg+7A+AakP9xr8xWdTYxy+tUU=
Subject key identifier:   88:66:51:BD:38:8D:01:3D:3B:44:15:72:43:C5:53:67:A8:34:AB:CE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F497E2D538DBE051D81B4B900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e48ee7c5-2956-3057-9b4d-ebb3ed9b0c94.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10753
IP address blocks:        136.0.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:2d:53:8d:be:05:1d:81:b4:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cde7e59c-e377-4fd3-9729-e7cbde330840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:74:5d:97:d2:60:5f:57:33:5e:9f:b2:a7:
                    18:14:35:fa:f2:53:76:56:24:5a:1e:63:80:c5:cf:
                    b6:59:71:ad:29:9a:ad:5b:d6:4c:29:58:1d:66:30:
                    12:0c:f9:e4:63:1d:99:9e:a8:7f:fe:80:a5:5f:8b:
                    68:16:27:24:2a:02:fa:e9:e4:d7:1a:b8:02:9f:de:
                    c5:22:c9:7b:87:23:b6:b0:1f:68:5b:81:c0:49:ba:
                    e6:31:15:84:0e:1b:9b:71:11:bc:9b:b8:6e:f1:bf:
                    53:99:41:0e:94:43:96:fc:67:65:37:30:72:1b:a3:
                    5e:57:cd:d9:d9:82:40:56:2a:09:91:3e:50:45:af:
                    27:07:0a:4d:dc:a8:c7:c3:35:c1:2a:c5:09:b7:5a:
                    05:5f:44:df:c8:4f:16:51:78:17:44:a0:51:a5:59:
                    63:33:20:7f:d5:19:ae:16:be:68:12:78:f3:67:65:
                    75:fe:c4:80:83:15:3d:7a:72:8d:da:27:9e:4b:36:
                    e6:87:ac:20:cb:a5:ac:79:c6:29:11:bf:9c:23:68:
                    c6:50:e3:be:03:4d:93:d8:01:dd:c9:de:83:fa:8e:
                    2b:0b:cd:54:47:fa:68:2d:92:ae:ea:ce:c5:65:3d:
                    0e:b9:43:b8:4f:60:29:da:b7:e5:fc:d4:39:ab:c8:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:66:51:BD:38:8D:01:3D:3B:44:15:72:43:C5:53:67:A8:34:AB:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e48ee7c5-2956-3057-9b4d-ebb3ed9b0c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ee:70:fc:bb:ea:a3:33:0f:d7:78:16:e2:77:95:a6:0f:93:
         34:e4:84:ec:af:16:6e:15:16:cf:00:79:38:c8:89:1b:1f:e4:
         0a:22:40:0e:7f:13:ef:07:49:14:89:0e:10:85:e9:11:6e:36:
         a5:c6:38:df:40:96:30:97:84:84:54:ee:24:d9:c6:3d:48:01:
         67:16:e6:2d:c3:5f:03:32:77:20:0a:e9:cf:0e:90:64:6d:26:
         43:c5:17:70:ad:dc:f5:f8:35:70:ac:f8:88:4c:d8:e8:ef:7b:
         9b:aa:2e:4f:0e:7f:6e:4f:93:c3:4f:9f:f4:8f:59:0f:b9:44:
         44:58:97:e2:88:1c:67:85:2c:9f:a2:bf:ab:3b:e1:9f:d6:de:
         04:98:40:26:98:c2:34:b9:e9:dc:85:0c:af:42:6d:44:e3:2a:
         6f:b7:a6:a0:59:52:54:c1:07:2a:61:93:b5:ad:6a:96:bc:9e:
         4a:c1:f4:47:05:26:02:db:27:3d:3a:d7:12:85:d9:09:47:6e:
         16:82:3b:fe:d7:b7:3b:67:9e:dd:0c:dd:66:b2:b0:26:ea:03:
         92:0a:86:f9:1e:60:17:79:04:68:a2:37:20:c0:df:13:5d:16:
         a2:0f:d0:8c:db:e3:0a:8b:ac:10:f8:55:59:4f:50:4a:5a:79:
         f2:67:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:43:04 2026 by rpki-client