Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d24aeea-70dc-38d9-8fb5-47375ef0a5cf.roa
File:                     7d24aeea-70dc-38d9-8fb5-47375ef0a5cf.roa (raw, json)
Hash identifier:          5VTzkrHOM+0PuKcIa7y8pJu6GfzpnJDYUeVZa9EwXGw=
Subject key identifier:   9A:43:16:24:59:A5:47:FF:BA:67:39:19:B8:9E:DB:8A:48:DE:1C:5E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E23D99A70D9D908A21F170900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d24aeea-70dc-38d9-8fb5-47375ef0a5cf.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     11798
IP address blocks:        136.0.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:9a:70:d9:d9:08:a2:1f:17:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=92b3b95e-d3b4-46a7-a782-d9c5b0c4cc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:30:6d:d8:de:d2:54:fb:3a:15:bb:2a:f4:
                    82:26:3b:29:a2:f3:24:85:61:72:62:ef:cf:7f:5f:
                    ec:27:5b:8c:64:30:eb:f8:c8:40:51:73:93:f4:53:
                    d9:ab:46:07:5e:5d:c2:73:f6:2c:9c:8a:24:08:49:
                    f2:e0:1f:79:5c:e4:12:89:d2:42:30:a5:47:b8:e7:
                    0b:3c:da:99:a8:3a:cb:bc:ab:16:57:ea:c6:90:e3:
                    93:d9:0c:7d:40:a0:b5:41:ab:d8:46:4a:ad:60:e7:
                    78:4b:3a:d1:fe:e3:3a:34:12:da:74:57:35:f2:b4:
                    c6:d7:4a:e6:cb:d9:0a:98:49:2c:98:6c:30:87:4f:
                    9f:36:10:06:6d:01:6d:f3:52:3a:97:8a:08:97:0f:
                    6e:4f:66:95:fa:ba:a6:43:d4:88:94:50:37:ae:ff:
                    a8:68:86:13:86:75:88:c5:7c:ee:48:dd:ae:d5:66:
                    c4:9a:dc:c8:9b:a5:c6:e8:91:2e:cb:29:d7:5e:1a:
                    30:04:21:b5:0d:01:5a:7e:fe:fe:b9:96:c5:f7:7d:
                    a9:4f:5a:74:2b:55:74:6a:54:27:83:fd:9f:94:5d:
                    85:98:c6:70:ca:c8:f3:f8:4e:03:a9:85:df:0c:1d:
                    bb:b7:34:cc:aa:3b:ba:bf:64:6a:98:05:18:d0:d8:
                    f7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:43:16:24:59:A5:47:FF:BA:67:39:19:B8:9E:DB:8A:48:DE:1C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d24aeea-70dc-38d9-8fb5-47375ef0a5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b5:cd:49:2a:24:1d:9f:e1:95:f2:a3:d7:7f:e8:a7:cf:c2:
         d8:9a:f3:71:ec:19:e2:fd:da:47:56:14:79:6f:ab:38:38:08:
         b3:bd:17:fe:3e:c1:fa:f2:78:d7:11:d0:91:59:de:80:7c:67:
         a6:bd:72:69:a9:86:fc:e3:3c:49:1c:3a:b0:d0:a4:de:31:ff:
         6f:e9:ae:6f:0b:56:52:82:1f:62:7f:f7:1d:8f:dd:38:b0:7e:
         31:58:d1:97:1f:8f:d4:f1:55:72:a7:f8:5b:9b:51:64:3a:b0:
         13:7e:44:ee:3e:a2:80:db:ff:60:72:b3:85:5a:7a:1a:a3:c8:
         d1:05:e9:58:e6:ea:ee:23:04:d8:f4:e0:00:92:34:25:40:ec:
         09:2b:db:d6:c3:0e:ad:86:61:a9:db:a6:91:48:3f:ba:f8:ec:
         5c:88:2a:89:50:00:4d:e0:e5:17:11:4e:ac:1d:85:d0:e2:22:
         49:7c:8b:9a:ee:60:87:3d:48:6e:78:8d:e0:55:fc:65:e1:98:
         17:77:07:bc:78:13:13:ee:a3:8b:a1:b7:02:8d:85:fa:a6:dd:
         7e:ca:73:bf:da:11:0a:b8:4e:f6:89:c7:bd:ac:3f:e4:0e:90:
         96:25:ef:28:64:bb:ed:1d:24:53:84:5a:bd:e6:61:8e:3e:e8:
         fa:9e:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:49:55 2026 by rpki-client