Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/b4dee419-4614-3364-b34d-09b1267b0f1b.roa
File:                     b4dee419-4614-3364-b34d-09b1267b0f1b.roa (raw, json)
Hash identifier:          lS54XcNKq4+FfWOJsz/cQcqpYg1xVGqQgXS0O+oBs2A=
Subject key identifier:   E3:F1:A2:ED:56:86:ED:6F:DD:8E:CD:10:1F:2A:82:6C:57:20:97:BB
Certificate issuer:       /CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
Certificate serial:       010D0C9F4328584D75D5299DCA9A9D970B347CA0
Authority key identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/b4dee419-4614-3364-b34d-09b1267b0f1b.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     6461
IP address blocks:        136.175.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:29:9d:ca:9a:9d:97:0b:34:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=1710bcd1-402f-4a31-948b-0408cb25cd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:ed:d1:89:23:b6:e6:54:57:94:1d:bc:9e:
                    f1:d1:f6:ce:ad:79:b2:2c:76:c2:00:e7:1f:e7:fc:
                    e4:96:05:2e:fe:5d:81:56:75:84:da:d9:51:2d:32:
                    c1:01:62:63:fb:04:f8:c2:c6:9d:91:2b:79:a5:86:
                    52:51:8a:a4:86:99:ab:53:81:4c:19:4c:77:4f:a4:
                    9c:2b:e6:f5:77:ed:07:94:21:bf:2e:c3:01:bb:dd:
                    84:c1:8e:dc:2e:ce:f1:7f:1a:8b:09:b0:53:a2:cc:
                    19:1c:34:32:85:8f:99:d5:05:13:cb:ec:94:c1:75:
                    87:34:01:85:03:d4:73:9b:96:95:f6:52:c0:82:23:
                    5f:20:1c:8b:c2:27:8e:41:60:b6:84:6f:fc:32:5d:
                    2c:c4:02:70:6d:a7:3b:b6:c7:71:dd:5d:ef:2a:76:
                    b4:84:45:03:96:a1:0b:45:c5:55:89:04:5e:0b:b9:
                    f8:2e:3b:b2:04:4d:61:7c:0b:1b:a7:e0:a2:90:de:
                    d3:af:59:a4:e4:f4:28:a5:f5:53:b3:fc:c0:38:85:
                    8b:ca:0c:4b:fd:1f:ba:97:02:68:18:f5:00:ae:bc:
                    a9:70:dd:c6:45:77:c7:2b:30:67:66:e3:44:cb:99:
                    ce:60:8a:29:e9:31:ae:68:33:98:94:38:0f:45:6e:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:A2:ED:56:86:ED:6F:DD:8E:CD:10:1F:2A:82:6C:57:20:97:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/b4dee419-4614-3364-b34d-09b1267b0f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl

            X509v3 Authority Key Identifier:
                keyid:A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:33:a1:10:ec:a8:3d:39:3b:08:1f:c9:0c:d3:dd:ff:50:3c:
         8d:13:cf:4b:ac:0e:3a:d1:88:82:37:28:a2:e3:b7:c0:7b:b6:
         b7:86:2c:83:ca:8a:2f:75:54:9a:f2:39:4b:56:d6:3a:ed:26:
         72:47:b8:06:86:40:1d:9d:a3:2e:4d:53:8a:7c:1c:d1:26:15:
         ac:18:c2:1c:85:43:c5:ee:7e:06:73:9e:f4:9f:4a:f4:fe:f5:
         f2:42:4f:b7:46:25:7f:fc:2b:08:9e:40:ef:22:8a:96:8f:a7:
         8f:04:2f:d1:31:a7:5f:04:75:a3:3c:b6:54:ce:7e:1c:95:82:
         d5:3c:15:cd:35:91:2f:a8:b0:b8:9c:c1:d9:72:ae:0c:b6:99:
         48:76:6e:0c:aa:04:96:29:43:08:82:9a:21:12:ed:ca:52:2c:
         bf:fe:78:1b:ec:e5:3c:de:5e:66:56:20:d9:b3:86:d6:c7:23:
         dd:ed:89:57:02:16:2f:20:aa:65:d4:12:a8:20:16:a5:da:d4:
         4d:28:4f:30:8d:ff:f3:d9:1f:d5:0a:16:23:42:72:f9:67:3b:
         92:f6:7e:53:07:84:93:58:33:41:27:6c:b2:42:50:07:38:8f:
         fb:cc:50:05:ba:2a:20:bc:51:41:d7:dd:1c:f7:96:e0:e4:8b:
         45:3b:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:56:13 2026 by rpki-client