Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ee729429-d6e1-329c-83ff-9d680cdd8a71.roa
File:                     ee729429-d6e1-329c-83ff-9d680cdd8a71.roa (raw, json)
Hash identifier:          NtUp1vlObM5xcPJWMtxGjvd8AoCHl2LchHD0ddg0MSU=
Subject key identifier:   01:BB:04:4C:FC:D7:ED:18:7D:89:3D:CC:4E:B6:DB:D4:36:13:90:4E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F331D145F76DE42074F4D5A60
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ee729429-d6e1-329c-83ff-9d680cdd8a71.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     10753
IP address blocks:        136.0.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:14:5f:76:de:42:07:4f:4d:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=320bf880-e407-45b5-9cb6-10bc0f348ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:c9:80:ea:e5:fa:25:cf:0f:6a:d9:c3:55:
                    ab:69:dd:ed:e3:10:51:45:d5:8e:7e:6f:89:43:0c:
                    85:b0:0a:f1:0a:41:52:17:d6:2c:5c:e3:39:13:7b:
                    29:83:7b:43:7f:61:7f:b9:66:d0:dd:7c:d0:ce:75:
                    f3:d6:43:a1:de:04:96:e5:92:7f:76:9d:45:fc:71:
                    de:c9:ae:45:0b:25:0d:55:b7:09:da:e8:14:d2:f0:
                    57:89:55:98:57:63:5c:eb:65:e5:54:92:b8:7d:33:
                    42:32:67:51:3c:9e:1b:2c:eb:a1:b3:84:5e:e3:5a:
                    bd:68:08:f3:30:fc:ac:b8:c9:82:ce:54:5c:94:04:
                    39:03:7e:11:e9:b3:5f:41:8e:ae:e9:01:9a:3c:be:
                    7d:02:f2:89:3b:1e:2c:11:37:0f:38:be:af:3e:9d:
                    ba:22:cf:66:e0:92:c1:23:f8:7c:78:9f:12:4d:64:
                    bc:8e:4f:4b:cc:da:47:4b:a2:5d:f5:b4:81:77:81:
                    7f:c5:55:f7:f1:bc:4f:b7:4c:a0:3f:ac:d1:af:9b:
                    1b:e7:ae:ef:8f:a2:19:0f:e8:40:97:ea:33:12:06:
                    10:c8:e4:9d:58:33:d1:72:39:3f:3a:6b:f8:b6:14:
                    bb:ae:a0:c1:da:cc:43:c0:dc:6f:ad:05:8d:09:48:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:04:4C:FC:D7:ED:18:7D:89:3D:CC:4E:B6:DB:D4:36:13:90:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ee729429-d6e1-329c-83ff-9d680cdd8a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:77:6a:e4:e6:a6:4f:df:e0:8d:50:b1:e1:92:f9:ea:8c:86:
         b8:74:a6:90:a7:9d:86:4f:72:bf:70:cf:6c:6b:2b:ba:e9:ed:
         cc:08:9f:5e:95:92:d1:8e:e3:a8:b3:bb:e5:25:18:d6:ee:ce:
         0f:bd:46:89:68:16:7c:d7:98:76:47:c9:70:3e:64:dc:aa:8d:
         fb:c1:ed:9a:c0:0e:f8:a3:ff:09:0c:36:30:57:19:ed:b6:c4:
         bc:d2:63:08:db:bf:0e:60:cc:1c:96:13:ab:78:cc:3b:d4:d7:
         17:63:c1:d8:8d:17:36:1e:0b:55:90:e8:2a:5a:75:fd:ed:56:
         6b:b2:a5:cc:f6:d3:d8:65:5d:a0:a1:48:f3:77:ca:eb:f9:1d:
         7c:26:6f:7e:66:fa:3c:ae:59:e7:b6:d3:7d:28:bf:f3:f0:6e:
         3f:6c:4c:c3:1c:2d:d7:0e:7d:45:c1:c1:bf:0f:88:d3:ec:f1:
         8f:5c:23:6f:87:ba:46:3e:ef:8f:0f:6a:67:6c:12:db:a0:31:
         39:79:52:56:10:a8:ac:74:4f:6b:e3:54:24:bf:0d:7f:cb:18:
         e6:41:b3:57:4f:32:3f:57:01:83:1a:ce:6d:3b:f5:90:e9:72:
         01:3a:65:42:18:92:f7:83:e3:ca:36:22:f9:65:d2:0b:a7:64:
         53:91:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:41:58 2026 by rpki-client