Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f832e9c7-d33e-3bc6-9c6b-43452a3bbc2c.roa
File:                     f832e9c7-d33e-3bc6-9c6b-43452a3bbc2c.roa (raw, json)
Hash identifier:          Dpijzvw8nyxIAyQhlmqY0JWwLXPzre6Sr51tHDX78+0=
Subject key identifier:   60:DC:48:00:84:8B:DF:44:C4:A4:79:32:6A:DC:17:BF:41:BB:60:71
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA79596F846D268857CFD1DC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f832e9c7-d33e-3bc6-9c6b-43452a3bbc2c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397373
IP address blocks:        136.0.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:96:f8:46:d2:68:85:7c:fd:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=12543c0d-e2be-4f3c-bae2-ba6d4cad66a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:52:0b:0b:1f:5f:cd:5e:20:5a:88:5d:1b:
                    18:c1:b1:ea:f4:33:90:6e:7e:30:58:78:3d:a4:63:
                    d9:40:ff:84:a3:aa:61:11:d1:81:e0:40:c6:1b:37:
                    80:61:71:2a:e6:c1:89:5f:30:fe:02:73:ea:e2:99:
                    e0:b9:b7:10:60:01:e9:85:f5:cf:b5:a5:ca:32:6e:
                    fd:77:1b:c3:d8:2a:48:d3:22:bb:de:40:cc:ae:93:
                    e5:41:30:c7:30:e1:6a:31:6b:8b:69:2a:04:bb:ca:
                    2e:5f:0f:e3:2a:e3:0c:48:80:4d:27:37:79:1d:af:
                    36:51:16:1e:b3:cc:24:f0:4e:d8:9d:68:99:57:04:
                    8e:28:c9:31:bb:a9:36:ad:39:76:59:e3:4e:44:b5:
                    de:db:93:89:64:c9:22:71:16:26:82:13:de:ba:a6:
                    3d:c0:a8:0a:32:3f:3d:c7:03:dd:77:28:19:c9:bf:
                    30:70:b5:24:7e:3b:0d:73:99:36:72:6f:1f:4a:85:
                    0b:fb:13:38:21:d3:50:04:7d:b0:81:9d:7b:3a:70:
                    35:e4:9e:91:2c:ee:49:5a:d4:34:f3:04:93:6e:2c:
                    44:a0:6f:f0:73:15:f8:e2:ea:0d:c1:f4:e1:ee:de:
                    03:f1:bc:b9:c7:59:e7:a5:22:60:37:78:45:b5:31:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DC:48:00:84:8B:DF:44:C4:A4:79:32:6A:DC:17:BF:41:BB:60:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f832e9c7-d33e-3bc6-9c6b-43452a3bbc2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:60:a2:28:ee:97:5d:fa:0b:6e:ad:15:fc:af:77:76:e1:90:
         27:88:f1:8b:f0:c4:8a:9d:98:54:39:c5:de:b1:03:c5:95:8d:
         ad:08:80:c4:aa:6c:57:ab:71:72:21:42:0d:3a:00:5a:1a:e1:
         9d:17:17:ce:90:24:be:12:49:f1:7a:3f:14:c7:20:db:f0:9f:
         22:ce:27:d4:ce:f6:b0:5e:fc:8e:81:d4:79:fb:a0:45:21:0c:
         e4:dc:03:ab:01:d2:51:15:89:65:44:e3:1b:ee:c8:ae:7d:34:
         68:fa:2e:96:d5:b1:ae:07:dc:f2:6e:8b:e0:8d:9e:61:1d:4c:
         c8:7a:54:ef:5a:cb:1d:3c:7c:da:54:d0:67:01:b5:12:1b:4e:
         e2:74:1f:f4:02:35:cd:2a:1a:d0:29:72:c4:f4:4c:ff:fb:c8:
         62:08:89:51:af:56:04:6e:9b:0b:26:aa:a8:68:c1:85:aa:76:
         f5:b4:e9:2b:d9:58:c3:f2:4d:4f:17:72:10:fc:a5:1a:6b:e8:
         02:7a:1f:b0:9e:7d:71:bf:09:d1:13:e8:c7:6d:fd:67:3d:a4:
         be:21:79:c6:36:10:22:73:49:c4:17:82:ef:dc:ac:1e:22:93:
         0f:01:15:11:a3:ce:c1:f5:0b:9d:22:0f:5d:16:14:27:36:8c:
         da:08:fd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:43:16 2026 by rpki-client