Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0eb0fd74-21d5-3313-9b2b-81a79052f68c.roa
File:                     0eb0fd74-21d5-3313-9b2b-81a79052f68c.roa (raw, json)
Hash identifier:          n1sCPUycEhWMS7QdBBkHl8bUyw2akWu3e9JEKMCpVeA=
Subject key identifier:   87:C4:1E:1E:AF:42:98:9B:C7:A1:29:67:4B:93:D8:00:9E:E8:09:7A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F1CC7AF95A979D7D234B7B3E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0eb0fd74-21d5-3313-9b2b-81a79052f68c.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     5650
IP address blocks:        136.0.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:af:95:a9:79:d7:d2:34:b7:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=0d6d0453-24f1-4a47-88ce-0d66f6ca3ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:79:df:07:1f:55:36:e4:16:dc:fd:4f:54:
                    49:93:48:b4:d7:8e:47:b3:4b:0a:62:6e:32:c9:e0:
                    b5:1f:65:85:f0:7e:39:6c:3d:ba:c7:73:2f:ea:40:
                    fc:47:f3:b9:66:3d:c4:42:33:d6:68:73:c4:3c:48:
                    5c:7c:4e:9f:b8:68:21:7c:38:89:4b:fc:ae:01:e7:
                    83:f6:c6:65:01:28:a5:88:3e:25:7e:6a:d4:67:8b:
                    cf:03:09:8e:13:a8:bd:78:eb:66:1f:3c:0d:cf:9e:
                    0a:f3:2a:35:2d:cd:2c:5a:1d:88:de:46:03:d6:00:
                    7c:3c:87:35:88:72:bb:ca:29:1a:6e:44:89:17:66:
                    e2:e3:86:c6:38:cf:bd:1f:e8:e0:f3:c9:2d:71:ef:
                    46:32:73:b5:60:54:36:5c:0b:be:9f:96:47:d1:21:
                    3b:fd:a9:de:de:ac:0f:96:f0:65:77:11:1f:4e:59:
                    95:4f:8d:f9:f0:57:ab:9b:9d:a5:83:18:96:45:b8:
                    3d:29:1c:e9:c1:2c:3f:ce:83:88:69:1a:75:14:b0:
                    7a:51:b0:d2:4a:16:a3:d9:c6:98:fb:05:6a:bc:9d:
                    a3:ca:c0:38:6d:df:bd:45:17:b2:13:c5:0d:3e:59:
                    81:c6:66:c7:83:8f:62:e9:7a:ae:e0:98:40:64:4b:
                    49:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:1E:1E:AF:42:98:9B:C7:A1:29:67:4B:93:D8:00:9E:E8:09:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0eb0fd74-21d5-3313-9b2b-81a79052f68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:56:60:4e:d6:73:16:b1:34:06:a1:5b:ab:a7:d2:71:22:9c:
         cc:24:d9:ab:9a:9e:87:6b:a8:ea:3e:8a:6b:04:bd:07:26:09:
         2e:a3:0c:28:59:cc:1b:0c:77:de:08:7c:58:ab:bf:89:3d:a2:
         95:c0:91:9d:61:bd:49:56:53:9d:39:23:ef:c6:db:48:4e:dc:
         9e:a3:3f:de:f8:f1:23:1b:c4:77:41:24:d4:77:30:b9:e4:23:
         5c:7a:6a:3f:26:4b:35:f7:28:71:72:e5:7e:1b:f1:8b:06:55:
         d5:17:79:5c:6b:5c:2f:2e:91:95:0d:6d:29:83:29:46:be:89:
         63:d6:83:2e:85:24:86:5b:a7:c1:8c:33:07:4a:42:a6:4e:1a:
         7f:0c:cf:d3:25:41:c3:bf:ec:94:98:1e:5e:9f:83:3e:26:6f:
         f9:2b:ba:12:d9:27:ec:3b:38:71:de:18:8a:97:77:a5:f1:8c:
         39:6a:67:96:5f:18:6c:1f:e5:8f:72:cc:ce:e1:4d:7a:f2:80:
         7c:f8:36:26:1e:21:9b:ef:d8:74:2e:3f:74:0e:37:41:95:37:
         ef:38:2a:8a:04:21:74:3d:58:f7:8d:b6:98:51:d0:22:8c:84:
         c6:09:36:1d:eb:a2:8a:9d:66:d9:2c:d4:2c:8c:8c:20:a7:46:
         00:e4:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:53:39 2026 by rpki-client