Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed9a41b7-ea43-343a-90b4-f1b10c12e980.roa
File:                     ed9a41b7-ea43-343a-90b4-f1b10c12e980.roa (raw, json)
Hash identifier:          dI0ziFc6uI0nkpPuZawosHhKVBGelR5A7mdDIKtNZUk=
Subject key identifier:   26:00:43:C1:42:9E:94:EF:E9:51:61:C7:EF:CF:33:A9:5A:B0:7E:B0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E5A4A0C9DB48175CCF4911C70
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed9a41b7-ea43-343a-90b4-f1b10c12e980.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     396362
IP address blocks:        136.0.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:0c:9d:b4:81:75:cc:f4:91:1c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=503924df-c006-4974-b5f8-8dab0b339cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:03:3c:17:bd:1f:40:f1:21:3a:01:2e:48:
                    65:26:73:c8:e8:c0:b4:07:20:fc:49:61:31:15:80:
                    22:f1:83:8f:34:fc:61:6c:ea:ba:0b:68:8f:eb:2c:
                    d2:ad:a2:17:f0:93:d8:e4:1b:da:10:7d:a9:0c:fb:
                    27:74:be:bd:59:6d:08:f7:22:7f:1d:69:b7:4b:e8:
                    99:95:fd:46:33:2e:52:e9:be:67:ca:84:9e:76:da:
                    01:4d:1c:52:16:fd:b9:67:00:7d:1b:c7:44:e5:66:
                    cb:da:69:5b:9b:56:cd:f9:2b:30:4e:af:7e:3c:dd:
                    07:d3:10:5a:3e:a9:fc:73:d7:9a:0e:35:dd:a7:81:
                    7f:1c:96:99:dd:56:14:23:69:87:71:c0:4b:dc:50:
                    e4:5c:a4:6f:81:d6:7a:89:2c:4e:8a:bb:10:37:a4:
                    a6:79:c6:30:63:72:ca:56:d3:b1:ab:75:9b:0c:64:
                    33:9e:4a:cb:69:83:15:a2:22:7b:16:48:a7:ef:41:
                    15:07:e1:fe:b6:ea:7b:23:c5:fb:93:6e:bb:45:b9:
                    53:db:be:00:82:64:de:d3:1e:d8:22:e1:41:1f:d7:
                    61:2e:be:58:f7:1c:f5:ea:8b:c5:16:46:85:39:e0:
                    79:85:aa:54:c9:c6:b2:12:2b:11:fe:6f:58:3f:10:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:00:43:C1:42:9E:94:EF:E9:51:61:C7:EF:CF:33:A9:5A:B0:7E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed9a41b7-ea43-343a-90b4-f1b10c12e980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:0c:df:86:95:8a:67:64:56:0a:6f:52:ba:0e:dd:2d:19:64:
         0d:fd:4e:c4:a0:b0:37:02:84:ad:2e:48:ba:f1:ed:25:ae:a0:
         26:9f:e8:e5:4f:97:3c:41:a5:ad:c1:d1:a8:b2:86:d4:0e:ae:
         3b:bb:44:0a:e5:39:a4:00:f4:28:60:30:c5:9e:cb:64:ad:82:
         9f:55:f7:00:48:9e:01:c0:6c:e3:5f:d3:cc:a7:aa:d3:57:ec:
         f1:2c:b4:d6:4b:69:96:fd:99:0f:a6:50:09:af:3f:32:b9:00:
         af:c5:a1:02:bd:38:9a:b5:3a:e6:e1:12:09:3d:9b:ff:36:eb:
         fa:b4:a3:da:15:d4:59:c8:78:f9:11:b8:37:d5:c1:c8:56:ff:
         f7:55:20:af:59:e6:20:7b:fd:10:c9:df:97:86:1f:94:58:7a:
         44:c8:03:82:97:20:2c:a4:2a:e8:53:0f:8f:7a:87:57:67:b4:
         c0:69:fc:4b:10:fb:87:63:c8:ce:93:5a:4c:9d:b9:e2:42:d6:
         9a:ab:82:2b:12:4f:76:f5:2d:49:a5:1e:66:bd:f8:57:55:04:
         7d:86:8c:bd:87:8a:8a:3a:5d:ac:b8:20:33:02:f8:b3:1f:29:
         52:6d:33:3c:e7:71:d3:e1:63:9e:76:15:fe:53:84:9c:54:e2:
         9a:3a:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:37:55 2026 by rpki-client