Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e9dc5285-ad16-3041-8b15-c1196ad5bddb.roa
File:                     e9dc5285-ad16-3041-8b15-c1196ad5bddb.roa (raw, json)
Hash identifier:          rOhU1jV2jt8xOuqL7oIY9f0jhtNcyQZyLZR+PT/uzzk=
Subject key identifier:   B1:8E:93:5E:CC:05:13:F3:8E:F6:DD:23:F8:D6:42:77:6B:BF:59:CF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EB8476BA0F8BF96B964C96A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e9dc5285-ad16-3041-8b15-c1196ad5bddb.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        136.0.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:6b:a0:f8:bf:96:b9:64:c9:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=96fb5cb0-aa46-4e1a-bdd3-688b434b57b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:68:bf:35:1a:02:6e:5f:d0:f1:b9:a7:b1:6e:
                    28:6f:22:1b:b7:91:6f:5b:35:da:df:2d:e8:8f:70:
                    8c:77:81:60:53:7d:aa:db:70:f1:a1:67:5d:f0:94:
                    33:35:d3:19:d1:a2:9d:7b:6c:73:0b:e2:30:34:c9:
                    37:18:00:de:6c:fa:c0:9e:53:85:21:14:e7:b7:5b:
                    0f:53:bf:55:b9:45:60:eb:59:ad:28:09:59:91:32:
                    14:99:5e:9c:66:de:b6:33:bc:e1:9e:96:cf:9b:f0:
                    f1:7e:9a:13:02:e8:f2:27:6b:a5:7a:da:dc:8e:fa:
                    38:3e:ad:c2:37:c8:be:71:70:8c:0f:87:81:91:1a:
                    c6:47:20:aa:74:7c:02:c0:10:53:9a:25:dd:a6:c9:
                    7b:64:b0:2d:8e:51:5f:aa:01:87:e3:dc:86:e0:b5:
                    6a:2d:56:d1:69:8a:df:22:11:7b:00:36:ee:92:7d:
                    c9:26:0f:0e:2a:11:47:6f:c8:6e:5d:96:39:1f:ba:
                    2a:f6:f0:d8:80:c2:e3:25:fc:db:9a:55:bd:e1:db:
                    9d:34:31:d2:fb:12:84:99:a3:50:f2:0f:30:28:f2:
                    e8:4c:a0:17:e6:17:84:a8:d4:d9:93:49:4d:57:6b:
                    2a:de:38:2c:cf:fd:0e:45:77:21:f4:66:c5:97:2d:
                    79:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8E:93:5E:CC:05:13:F3:8E:F6:DD:23:F8:D6:42:77:6B:BF:59:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e9dc5285-ad16-3041-8b15-c1196ad5bddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0d:58:e5:58:96:bd:60:3f:2b:c7:68:dc:1d:79:ce:d7:f9:
         9c:02:ac:9c:5a:10:e5:e2:2b:60:a9:19:6d:7e:3d:a1:d8:88:
         30:9c:82:0e:df:af:a0:47:ef:6b:e8:4b:da:fa:46:49:5b:de:
         35:1f:4b:2c:6d:6d:b1:3a:32:1b:c1:07:b3:59:ae:db:cd:03:
         94:f3:f3:3f:bd:2d:c3:e3:57:fc:8c:85:90:95:b3:a7:07:be:
         7c:4d:43:15:ed:39:6f:ae:40:88:f1:ea:93:c4:ee:fc:c8:a3:
         7b:79:13:56:ae:e7:2f:3a:e6:a1:a7:28:8c:b3:57:54:6a:2b:
         41:59:ab:24:bd:a9:08:ad:53:5e:3a:39:44:cf:fa:df:be:9c:
         35:8c:18:53:e0:c0:d6:76:9b:11:56:6c:53:3d:e9:28:d5:9d:
         3b:bd:8d:dd:b5:90:5e:96:27:7d:61:e8:e0:b3:ba:4b:d5:0f:
         84:11:0e:bb:d9:e6:e0:1c:5d:8f:af:6f:1d:11:15:23:0e:d8:
         f3:89:e3:60:c6:79:2d:d9:7d:29:a7:ce:e3:c8:cc:bc:d7:41:
         0a:c1:f6:69:60:b5:27:ce:6d:b0:a6:06:b1:e0:45:2d:ad:4e:
         bf:0c:6b:7b:5a:2d:7f:85:a5:92:49:f2:9c:18:fd:c5:13:0b:
         f5:61:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 09:29:29 2026 by rpki-client