Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/476977ec-5967-328c-85b9-821f16a9b790.roa
File:                     476977ec-5967-328c-85b9-821f16a9b790.roa (raw, json)
Hash identifier:          bl4/UvpNAJYVxiA/T0GzObDGeAtqP0GM+B/v/Jz9j98=
Subject key identifier:   2E:0B:8A:C4:4A:EF:E4:C9:FA:D3:5D:F9:EA:FC:E4:A5:7C:45:16:47
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D7E995AC1DA53DA6A47E40080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/476977ec-5967-328c-85b9-821f16a9b790.roa
Signing time:             Mon 13 Apr 2026 16:22:25 +0000
ROA not before:           Mon 13 Apr 2026 16:22:25 +0000
ROA not after:            Sun 12 Jul 2026 16:22:25 +0000
asID:                     149440
IP address blocks:        96.126.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:99:5a:c1:da:53:da:6a:47:e4:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 13 16:22:25 2026 GMT
            Not After : Jul 12 16:22:25 2026 GMT
        Subject: CN=c3b007ce-12cd-487f-96fe-a4c444553e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:fd:a0:01:2e:a1:ea:26:fe:93:15:ec:b2:
                    18:c4:4b:ea:25:b6:a1:c8:3a:ec:ce:3d:6c:93:c5:
                    73:f4:3e:af:77:fb:f4:dd:0c:30:78:2b:d2:b9:06:
                    b4:4e:40:fe:23:c2:2f:64:b8:27:73:e3:58:5b:c5:
                    8a:8b:02:f0:4e:ef:0a:3f:4b:90:d4:9f:6e:09:f4:
                    63:4e:88:ec:2e:0e:9e:8e:e2:03:f2:ae:84:78:6e:
                    0b:1b:62:95:bd:af:ae:71:47:9c:c1:31:d7:7d:40:
                    49:48:9b:53:bc:78:09:b1:8f:92:ec:d9:ef:eb:28:
                    ae:a7:fd:23:6a:11:7f:a3:59:9d:20:f8:23:fc:c2:
                    a6:67:c6:c0:31:ae:7c:18:e9:a2:af:a0:06:70:74:
                    aa:ad:9c:cb:5a:59:6e:1f:da:6d:ac:7f:9d:f5:91:
                    e5:80:02:d5:00:53:62:66:ff:48:65:67:6e:d8:8f:
                    28:cd:f4:4c:fe:4c:2a:ce:16:5f:19:3f:b0:20:b2:
                    a0:39:f2:ab:a4:00:29:88:88:fa:93:60:11:ce:da:
                    4c:4f:04:83:6a:cd:22:df:50:80:da:ab:8d:49:95:
                    39:fd:bc:b0:a1:5f:79:b2:d0:98:14:9b:af:9f:ad:
                    83:08:0f:68:39:25:db:3b:57:17:1f:07:14:f5:1f:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0B:8A:C4:4A:EF:E4:C9:FA:D3:5D:F9:EA:FC:E4:A5:7C:45:16:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/476977ec-5967-328c-85b9-821f16a9b790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:7b:56:4d:3b:f3:a8:46:9f:d9:60:a3:a7:b5:40:6c:d0:
         27:59:cf:98:cc:6b:d8:14:d0:62:ed:32:05:5b:84:e9:79:29:
         fa:17:de:f3:c4:8e:7b:f3:c9:4c:e7:f9:cf:39:b9:97:45:46:
         d5:fc:5f:72:0b:08:eb:74:a2:50:ad:c7:0d:7d:a9:9d:82:74:
         8e:9f:3d:bd:92:32:fa:be:de:91:20:31:0a:2b:0f:45:8d:67:
         e3:01:e1:f5:b9:53:f7:b4:d6:87:c7:d6:b3:00:55:88:dd:61:
         f5:41:88:3e:cb:08:fa:2d:ea:7c:bf:ea:e1:1e:26:98:98:99:
         3c:ff:42:60:d6:6b:b4:65:4a:5c:5e:8d:3b:03:fb:0c:70:26:
         e9:be:7b:61:73:30:b4:e2:bf:b6:b9:5a:d3:ac:8c:01:19:bb:
         0c:28:56:c3:7b:a9:03:31:e4:83:75:50:3e:48:a5:01:0a:7a:
         fb:86:d0:4c:e0:cf:9c:32:76:d5:14:df:31:44:0a:8f:8b:ce:
         a4:c9:00:9f:2a:86:14:2d:04:59:3a:1e:c5:f3:6d:09:e9:10:
         f7:f6:8a:7e:db:7c:9d:70:bc:76:0e:84:80:ba:c2:79:cc:ab:
         44:75:26:43:ad:ca:10:ba:bb:6b:63:e0:0e:f5:b0:33:11:2e:
         f8:bd:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:02 2026 by rpki-client