Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7ede9ff-6e9c-3781-9d8b-4a16e7035dc8.roa
File:                     f7ede9ff-6e9c-3781-9d8b-4a16e7035dc8.roa (raw, json)
Hash identifier:          67Tn1/5uKr229s+Hg8g3wV5h15kuBjzX5TcTNqZcKqc=
Subject key identifier:   84:6A:72:3B:AA:23:3A:17:E3:03:50:82:8D:03:80:BB:12:3B:B7:5B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D5D47AFB221D4A4F10981A380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7ede9ff-6e9c-3781-9d8b-4a16e7035dc8.roa
Signing time:             Wed 01 Apr 2026 17:56:11 +0000
ROA not before:           Wed 01 Apr 2026 17:56:11 +0000
ROA not after:            Tue 30 Jun 2026 17:56:11 +0000
asID:                     401152
IP address blocks:        136.0.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:47:af:b2:21:d4:a4:f1:09:81:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  1 17:56:11 2026 GMT
            Not After : Jun 30 17:56:11 2026 GMT
        Subject: CN=494e9622-74d4-4680-bfa4-46f1f67ccba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:37:91:8c:ba:ea:33:93:d1:2f:1e:a5:92:
                    d7:8c:0d:c5:40:72:b2:ad:e5:1e:1c:2d:d6:e2:b9:
                    76:5a:33:09:cc:5c:f4:21:c0:0f:ed:f6:af:36:6b:
                    9b:e5:b9:45:e4:97:fd:63:ef:4f:ef:02:95:60:9e:
                    9a:17:da:56:c4:82:0c:a8:d0:20:09:58:6c:22:ee:
                    ff:a9:e3:c1:a8:f7:0f:92:60:b2:06:59:cb:aa:4e:
                    33:1c:c5:28:89:e7:71:42:bb:00:3c:ba:e8:50:03:
                    00:6a:b5:15:6a:97:2f:22:5b:ea:14:f9:91:22:30:
                    ac:e3:b3:57:a6:e6:52:b3:b3:2f:94:14:b1:16:ed:
                    e9:96:9c:91:a9:56:54:c6:30:41:ee:d1:f5:e9:6d:
                    d2:1f:de:e7:fc:69:35:e7:c0:08:db:09:30:2f:7f:
                    0a:0c:f5:3c:aa:1c:24:bd:89:77:96:f7:82:a0:3f:
                    6d:29:8d:b4:ff:62:f9:e2:94:c3:40:0e:20:16:2b:
                    bb:9c:ba:20:26:5d:90:ff:2b:8e:1e:fb:81:f5:30:
                    ea:8d:70:b3:65:26:b8:8f:1e:3c:f7:7e:a6:92:e7:
                    42:19:ea:92:ed:65:1e:2c:08:ff:04:46:f8:0a:f9:
                    18:fd:c9:1c:2a:64:cb:45:b9:f8:7d:86:3c:33:3c:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6A:72:3B:AA:23:3A:17:E3:03:50:82:8D:03:80:BB:12:3B:B7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7ede9ff-6e9c-3781-9d8b-4a16e7035dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0e:cb:33:11:16:48:88:9b:bb:05:59:2a:c3:ef:05:f5:6c:
         de:88:53:71:f8:34:07:f0:c4:bf:ac:92:bb:a3:7b:94:2f:6a:
         d9:2d:96:25:05:58:ea:e1:d5:5f:45:0d:0d:f3:05:c8:22:89:
         1d:1b:7c:51:1b:87:12:c4:89:6c:96:ff:ce:62:ce:9b:3c:6d:
         c2:14:16:c8:9b:dd:dd:77:45:53:46:6c:2e:53:fd:77:33:73:
         c5:c0:b4:71:ad:14:f8:10:46:d3:cf:0f:fc:c1:33:d7:66:71:
         e1:87:a3:66:63:c6:81:6c:56:18:f3:61:81:16:42:0d:ed:71:
         5b:69:e8:61:b3:bb:41:65:04:85:06:51:42:ef:c6:75:e0:09:
         97:a0:85:6f:f0:60:c9:85:41:c8:4a:c1:65:6c:e5:81:93:8d:
         6d:ac:52:9d:cf:34:29:d4:91:c8:48:44:69:ca:9b:f4:14:38:
         7b:bc:01:60:dc:8e:1f:2f:c7:71:8a:3d:b1:0c:36:7c:b2:e6:
         3b:cf:15:ea:9e:60:64:58:8b:cf:5f:c9:a1:7a:46:a7:7a:87:
         9f:e9:62:78:09:1b:db:c0:23:eb:75:6b:eb:ad:a8:6a:ad:10:
         88:a9:55:0a:d1:57:d6:89:3b:24:6e:de:f7:7b:1f:65:4b:29:
         a9:ef:32:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:33:04 2026 by rpki-client