Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ffe9ccb-7fa3-3e68-b497-dd5c09a9c67c.roa
File:                     1ffe9ccb-7fa3-3e68-b497-dd5c09a9c67c.roa (raw, json)
Hash identifier:          tOUrV+cD4YDS5D1X2FSxYByQqzkHtwXPlivm4cYUQbs=
Subject key identifier:   0C:ED:95:33:3D:EF:A5:79:D0:43:4B:0F:BD:2A:87:80:9D:8E:BF:0A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F268D09A69D9DF9453A0AEB80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ffe9ccb-7fa3-3e68-b497-dd5c09a9c67c.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     149440
IP address blocks:        136.0.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:09:a6:9d:9d:f9:45:3a:0a:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=d85ce2d1-ebf8-4ac9-a895-a92b5d0d3631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:68:e8:31:14:25:c5:22:9b:d5:3f:44:06:
                    e0:5d:77:af:00:18:ef:20:63:5c:9a:b4:19:ef:6e:
                    2f:df:78:eb:df:c1:17:43:ea:08:af:a6:2e:64:23:
                    30:17:ee:08:62:10:b4:34:a2:76:60:dd:98:20:18:
                    2b:9d:65:a0:8d:0b:88:1b:8a:e3:b1:b5:ba:9c:e6:
                    01:15:37:e3:60:1a:80:f3:8c:87:19:66:76:bd:60:
                    a4:de:d8:ea:fe:d3:fc:57:56:c1:08:97:81:8d:0c:
                    b4:96:a2:cd:f5:73:ce:11:f2:20:2e:3a:09:cf:06:
                    38:88:96:cc:a5:f5:4c:53:82:7a:a8:07:13:be:b9:
                    33:cf:ed:69:ca:1c:e3:a9:34:a2:93:bd:9d:e9:81:
                    5d:ec:71:e9:ae:2f:bf:42:19:01:ed:d0:22:11:d1:
                    d9:65:ec:b1:b0:ac:30:fa:26:35:69:40:fd:f1:2e:
                    8f:f8:40:6f:1f:46:59:10:16:82:9e:a0:11:7c:6f:
                    0c:49:cd:f7:21:5a:5f:17:2f:42:b0:a4:97:62:e4:
                    e6:7c:53:de:e0:71:7c:02:40:56:b2:ca:15:e7:46:
                    f6:5b:9c:8d:a6:9b:93:3a:e9:3d:5f:ab:f5:8b:96:
                    82:cf:a9:18:8e:04:af:86:8a:7e:53:29:9f:d0:44:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:ED:95:33:3D:EF:A5:79:D0:43:4B:0F:BD:2A:87:80:9D:8E:BF:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ffe9ccb-7fa3-3e68-b497-dd5c09a9c67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:e1:35:9c:30:97:42:66:73:98:21:19:be:68:ba:a5:bf:
         15:bf:47:3b:5c:03:cd:f5:49:49:4f:5d:12:63:36:ac:99:06:
         5c:dc:8f:6d:1b:26:20:95:c8:72:8c:79:b0:8f:31:91:61:1c:
         8b:7e:3d:26:cd:13:d8:83:ba:d8:85:31:92:23:f8:9c:07:9a:
         75:bf:05:36:6b:b2:f7:14:02:a5:61:99:cc:3c:70:44:b0:39:
         eb:6e:f6:9d:02:3f:84:e6:16:39:f4:3e:a1:a5:9e:a6:d6:48:
         52:9b:60:95:15:dd:5e:45:b2:a2:2a:01:80:b4:16:4e:1f:ec:
         86:3a:70:a9:98:d9:b6:8e:9b:d9:7e:4d:d2:39:15:9c:ca:70:
         46:4e:96:88:af:ee:12:56:cc:f7:af:81:57:f7:1e:d0:7f:23:
         84:99:cc:80:fb:f5:b7:00:63:b8:c3:28:4e:99:48:cc:0e:06:
         6c:8c:f7:6f:b8:b0:8c:f1:dd:a4:de:88:b4:66:06:e2:17:69:
         89:e5:07:36:4e:76:fd:c6:a2:05:7e:08:71:7d:aa:76:c6:4f:
         04:43:4b:8d:93:3f:03:b8:e6:c9:d3:ef:ed:b7:51:12:af:39:
         92:38:08:39:25:bd:58:17:cc:d5:07:80:08:74:2f:68:02:b7:
         98:ed:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:12:39 2026 by rpki-client