Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da6f426d-b942-3eee-9f63-6d43461f1da1.roa
File:                     da6f426d-b942-3eee-9f63-6d43461f1da1.roa (raw, json)
Hash identifier:          M2ryC5wfdKvXpoldyIxzLBo2ZLLcuvf/F0WuUkwaWOA=
Subject key identifier:   95:B6:DE:B3:0F:DE:83:C3:59:F7:40:DB:0C:7F:E0:24:9C:E5:F3:3C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E23D99AECFA1B92D4822C90C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da6f426d-b942-3eee-9f63-6d43461f1da1.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     11798
IP address blocks:        136.0.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:9a:ec:fa:1b:92:d4:82:2c:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=0aea0d4b-f4d9-4b87-897f-e4cb0f3a77e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:c5:e8:21:5f:de:cb:c5:c7:30:34:f4:ee:
                    3e:9b:a5:cd:c5:21:f3:49:00:24:64:45:58:b1:26:
                    c6:b9:07:43:5a:6d:c4:37:84:a3:c9:40:16:27:a8:
                    00:f9:a5:fa:96:ee:5e:d4:1b:c0:5f:27:e5:6d:9b:
                    4e:67:9f:00:ac:60:bf:64:93:e5:f7:da:44:ca:c2:
                    a4:da:10:41:7b:e5:6e:5c:d7:c7:85:13:84:60:24:
                    64:8e:b1:e5:aa:80:74:68:b4:e0:c4:b7:79:42:50:
                    8a:fd:f2:cd:50:d5:3d:38:79:2b:87:db:01:09:2c:
                    cf:88:1f:f6:22:7d:7a:11:61:ad:23:9f:1e:c9:6a:
                    ba:92:ba:d8:a9:11:ce:9c:bd:55:06:72:2e:d5:2e:
                    9c:d7:e4:59:d9:1d:10:8e:99:f0:34:06:54:41:53:
                    e1:65:db:53:2c:e7:b0:97:24:4f:48:20:ac:3a:bf:
                    03:87:b5:4f:d4:0f:51:d3:8d:c3:0c:91:e2:33:03:
                    e2:71:96:62:91:f8:57:09:f7:8f:2d:b7:6a:b2:f6:
                    55:44:6d:f9:f4:7e:66:39:bf:81:3c:4b:bd:ec:21:
                    8a:7d:0d:eb:26:4e:1a:ae:9d:1d:2e:f0:dc:03:0c:
                    92:90:dd:0c:0c:a3:2a:e9:9a:6f:03:9d:cc:1a:57:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B6:DE:B3:0F:DE:83:C3:59:F7:40:DB:0C:7F:E0:24:9C:E5:F3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da6f426d-b942-3eee-9f63-6d43461f1da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:44:5d:54:39:61:4d:08:70:56:f1:36:df:a8:3b:e8:ce:
         8c:7b:17:19:67:a4:a8:50:3d:35:d4:e0:e8:2b:7d:65:c8:73:
         ce:13:4a:a9:0e:6f:60:ad:44:95:41:70:e7:2b:94:03:ad:db:
         cd:19:0c:c1:e4:5d:4d:98:8c:41:e7:4c:81:22:d8:50:d8:d7:
         17:a4:db:15:6d:06:af:e1:b5:b0:c3:48:27:44:3d:3f:39:f2:
         03:c4:69:55:b0:04:13:49:10:bd:dc:fa:b5:dd:6c:f6:d7:e9:
         5d:97:31:4e:ba:70:d1:e9:74:4e:1f:26:8d:ce:c8:86:8e:ee:
         d5:fc:69:72:ba:63:a8:4c:21:c3:e8:da:de:83:5b:c6:aa:a9:
         a8:97:c8:a6:e4:1f:22:de:e7:e1:85:66:37:2d:6b:3e:f2:c0:
         f9:a8:6b:8b:41:00:e6:0b:9b:71:ea:89:5c:2e:c5:3d:c7:0e:
         e2:09:63:99:42:ac:05:24:5f:1c:d3:14:bb:f0:62:90:32:60:
         0d:d8:cc:f2:f4:60:33:d7:a0:1e:88:9d:53:3f:1d:8f:b5:41:
         d2:c1:07:41:4f:c3:32:ed:1c:48:17:88:32:48:58:99:78:44:
         3d:0e:31:63:70:cb:ac:c0:b4:e4:6e:50:a5:33:3b:76:41:37:
         0f:12:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:27:18 2026 by rpki-client