Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/13b64f3e-e213-3684-a4ef-30ebfa218cd1.roa
File:                     13b64f3e-e213-3684-a4ef-30ebfa218cd1.roa (raw, json)
Hash identifier:          TjgKUhpK1iu5xQWfJUUweyqrwwYZw+AYcrQraKM+KOE=
Subject key identifier:   EF:13:C1:E4:96:65:45:7E:8E:FB:CD:75:7C:62:0B:3D:06:68:8D:F4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F1467990FB7A3A694E89C4C20
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/13b64f3e-e213-3684-a4ef-30ebfa218cd1.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     149440
IP address blocks:        136.0.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:99:0f:b7:a3:a6:94:e8:9c:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=a3bfffee-b72a-458e-9e9b-1eefbc34d731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0a:41:24:c4:d4:c1:c6:54:ab:7a:77:f8:36:
                    98:85:78:77:f2:92:cb:f4:0e:d9:b9:2c:94:cc:bb:
                    cb:b2:6e:8d:99:f1:38:63:51:d5:6a:cb:52:b4:e3:
                    c5:28:ae:1d:76:72:7c:a8:8d:d0:99:3d:1d:4e:ef:
                    57:0a:a1:fa:da:4d:a5:39:56:ee:63:e3:90:3d:d4:
                    13:fe:66:78:9e:e9:f2:b4:ed:ad:46:90:4b:62:90:
                    ef:4b:cd:57:c6:dd:8c:3b:72:ff:1e:6e:3a:ce:b8:
                    04:e0:16:0e:87:ad:5f:19:da:86:40:38:02:b3:97:
                    07:70:21:d2:75:9a:0b:69:4a:8e:9d:47:5e:23:86:
                    3c:21:07:1a:7b:fd:ce:cd:aa:8a:84:2c:66:0b:d2:
                    8b:8e:d8:ed:9d:e7:30:70:7f:ef:2c:f2:e0:1a:26:
                    16:0b:8f:49:b5:d3:d0:4b:a3:0a:d6:79:cd:eb:72:
                    ec:89:04:14:7a:4e:40:d1:e0:59:a5:3f:7a:c5:ab:
                    56:31:d0:7b:47:47:b5:34:0f:6d:03:96:c9:32:c8:
                    a9:57:c3:ff:d1:bb:7c:e9:31:9c:14:57:2f:d6:4d:
                    3d:7c:29:3d:aa:86:f3:7a:4b:55:39:3d:e9:6f:b0:
                    ba:d8:df:1e:ce:bc:20:5d:dd:f6:e8:ec:2d:6f:41:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:13:C1:E4:96:65:45:7E:8E:FB:CD:75:7C:62:0B:3D:06:68:8D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/13b64f3e-e213-3684-a4ef-30ebfa218cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:a5:41:9f:58:c1:7c:93:70:31:93:0f:13:92:14:53:de:
         68:60:7e:ea:8e:b1:7b:3f:6f:e7:0e:1e:4c:f8:b6:a3:ae:82:
         44:7d:87:09:67:1f:f3:89:94:41:72:b7:43:fc:fb:a6:ca:ed:
         89:e6:2a:35:ac:1b:61:26:92:3a:32:f5:7f:77:f3:cd:3c:1a:
         3e:4d:42:84:6f:a3:54:2d:a7:7e:d5:f8:f8:56:ce:66:a2:2e:
         12:35:43:d6:04:cd:11:2e:ba:f7:4b:d5:70:21:45:31:af:d0:
         53:ba:6d:63:bc:ae:3f:05:b2:71:e0:7e:12:d4:40:9f:31:7b:
         8a:a8:4c:4f:6c:ef:d0:6d:3c:50:4f:01:ba:d1:f5:78:a1:09:
         06:8c:77:8d:c1:3d:90:42:8b:4a:59:fe:13:fe:05:62:f5:36:
         4e:79:3f:d3:9a:95:07:f1:49:a2:2e:07:4c:b2:e9:e0:c5:d2:
         ea:2d:50:f6:f9:ae:9a:0f:98:9a:39:dd:60:e7:a5:52:fc:c6:
         a1:87:83:a7:7b:52:37:5e:a7:fd:59:24:ac:f9:4f:bd:12:0e:
         94:c4:31:cf:12:5a:cc:31:f6:f2:d7:aa:97:9d:63:0b:bf:ed:
         bc:6c:ba:e3:a8:66:15:c2:78:af:66:a8:85:47:6e:ce:2e:40:
         f8:d5:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:35:19 2026 by rpki-client