Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0e02576-e220-3629-b50a-bbf64f13a223.roa
File:                     f0e02576-e220-3629-b50a-bbf64f13a223.roa (raw, json)
Hash identifier:          YEcfTc2q6ieYQr2qCD3+NhIzWnguXr4LRV4RL34zoqU=
Subject key identifier:   BE:A4:8D:6B:88:0D:77:BA:39:8C:C7:97:95:6E:B8:E9:10:C9:D1:F8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E4DBAA007DFE39EBC28603500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0e02576-e220-3629-b50a-bbf64f13a223.roa
Signing time:             Fri 26 Jun 2026 21:01:47 +0000
ROA not before:           Fri 26 Jun 2026 21:01:47 +0000
ROA not after:            Thu 24 Sep 2026 21:01:47 +0000
asID:                     63018
IP address blocks:        136.0.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:a0:07:df:e3:9e:bc:28:60:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 26 21:01:47 2026 GMT
            Not After : Sep 24 21:01:47 2026 GMT
        Subject: CN=ab65d7ed-1110-4188-a72b-c7c8cf170276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:be:ad:13:a4:ea:1c:e8:03:0c:8d:04:73:cb:
                    df:13:3c:0b:db:ac:2a:eb:13:29:ab:41:50:9c:f8:
                    6e:2c:12:4f:bd:23:de:0e:ff:1b:ca:83:3c:50:32:
                    d4:c9:77:97:7c:64:ff:98:9c:77:69:47:45:0b:ab:
                    2f:49:77:b0:ec:f1:d2:e1:3e:73:12:b0:7d:c5:cc:
                    c5:36:e6:42:13:39:b8:9e:e4:af:5f:16:30:c1:82:
                    66:cf:3a:9c:fc:ec:45:e0:97:05:94:6f:39:8e:86:
                    44:8b:5e:e5:89:5a:71:ff:d4:84:be:44:66:ba:50:
                    ac:de:44:08:b9:0e:10:04:2c:2e:c8:73:07:a3:2c:
                    49:c2:da:0d:28:8c:19:fc:5a:b5:91:a5:e6:b6:56:
                    c0:ee:5f:03:54:d7:76:cd:e5:82:3a:31:a9:cc:22:
                    fd:e5:a5:12:07:eb:ca:7e:b4:60:df:53:ec:12:1d:
                    06:0a:8a:21:17:14:95:22:86:21:d2:32:84:85:b1:
                    36:e6:5e:d5:1e:d8:96:fc:b6:41:14:12:36:69:34:
                    84:79:73:24:13:c3:36:9a:51:39:08:61:ca:7d:33:
                    d4:3c:d0:e4:4c:14:ec:ad:52:5a:a8:4e:d6:ee:ca:
                    8e:a8:6c:66:fd:2f:3b:7a:1d:22:9c:68:19:23:7d:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A4:8D:6B:88:0D:77:BA:39:8C:C7:97:95:6E:B8:E9:10:C9:D1:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0e02576-e220-3629-b50a-bbf64f13a223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:a5:70:ba:a0:5e:b3:0e:59:9a:3a:bd:e8:c4:c6:53:26:
         44:38:7f:26:ac:77:2f:f6:ff:29:00:aa:bb:3a:2b:84:bc:a3:
         9f:25:f4:bd:4f:d7:43:06:f0:87:87:27:9c:95:a2:92:29:76:
         71:7d:b0:a6:09:93:64:dc:75:1c:6f:4c:b2:3d:fb:79:86:56:
         57:a6:04:53:7e:08:f0:1b:17:b8:8a:7e:71:8f:b5:d5:79:13:
         6b:5c:4e:47:96:7e:95:33:8f:4a:b8:ab:a2:23:6f:66:ab:ca:
         a8:0a:71:dc:76:f8:1d:ac:36:68:63:d3:a7:24:aa:18:43:26:
         2d:0d:bc:de:6d:ee:0f:de:69:14:c4:16:49:8f:a7:83:f3:07:
         78:3a:66:08:94:ea:9c:e8:25:b7:85:68:a9:8c:a9:67:5e:24:
         3f:bc:59:85:c3:05:b2:d1:a6:12:58:05:eb:7f:5f:ac:ae:ae:
         dd:e1:8a:c3:21:f5:9d:72:30:3a:d3:ed:47:a6:b7:19:d8:a0:
         50:0d:e7:60:c6:e0:a0:35:35:4c:45:45:99:d3:10:aa:2f:39:
         7a:9d:33:21:a0:18:49:74:26:b2:bb:3e:91:0b:86:b3:e2:6b:
         14:1e:7a:1d:65:a3:70:18:32:3b:2a:59:cb:51:ad:a2:f1:38:
         09:d5:2e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:33:15 2026 by rpki-client