Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/de0ff785-dd97-30be-81b9-8447796afc11.roa
File:                     de0ff785-dd97-30be-81b9-8447796afc11.roa (raw, json)
Hash identifier:          pu4GD75zI2+lmf53O3E7vdBMyEFeQfHQ6urqZ90QvPc=
Subject key identifier:   F0:C3:F7:37:D9:F8:80:23:69:A2:1A:3A:0B:0F:F2:1A:04:52:33:A3
Certificate issuer:       /CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
Certificate serial:       010D0C9F4328584D75D526C311DDB62A15553200
Authority key identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/de0ff785-dd97-30be-81b9-8447796afc11.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     25956
IP address blocks:        136.175.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:26:c3:11:dd:b6:2a:15:55:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=3e12873d-defc-4e0b-acb2-ec8cabed0658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:56:ab:66:99:f2:08:00:34:25:10:ec:9d:61:
                    8e:96:14:e5:f1:54:50:33:96:6f:7c:b5:34:5c:6b:
                    f8:7e:c0:ed:14:40:f0:27:6a:9a:33:5b:e8:9a:58:
                    8b:4e:fe:50:c7:0b:ed:60:23:ea:e7:28:e8:38:f6:
                    8e:96:9d:21:d7:69:3d:d9:2c:6b:14:7d:5f:98:da:
                    a7:9b:b1:0f:d7:ff:15:00:0b:c4:68:96:a4:09:a2:
                    3e:2b:45:b1:58:0e:16:12:a7:10:99:86:3f:92:11:
                    b1:14:04:fa:c9:cc:3a:b9:e3:a9:7b:4e:8b:79:d5:
                    02:a6:57:45:da:ad:10:ad:77:7c:4f:4d:0a:a9:63:
                    9a:1b:a8:e2:1d:bc:48:08:88:65:10:ba:c8:48:d7:
                    af:72:8f:ec:60:d0:19:b4:0f:09:dc:38:5a:0d:f6:
                    00:5e:12:10:b4:cf:49:d9:4d:b1:4d:ee:50:01:02:
                    e1:3a:d7:a3:7c:ad:42:e9:60:ae:f1:f2:a9:2a:80:
                    3e:b3:56:9d:f2:7e:d1:d5:53:60:66:80:57:53:f3:
                    71:c4:a7:b2:55:fc:e9:75:ab:42:a9:cf:ac:d3:73:
                    70:33:c7:05:aa:24:2c:78:d3:2f:e4:8b:c5:0d:df:
                    36:d1:0e:1d:a8:3b:52:3f:0b:f9:64:3f:1e:60:d7:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:F7:37:D9:F8:80:23:69:A2:1A:3A:0B:0F:F2:1A:04:52:33:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/de0ff785-dd97-30be-81b9-8447796afc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl

            X509v3 Authority Key Identifier:
                keyid:A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a2:71:4f:7a:f1:50:a0:8a:bc:3e:ea:bf:70:c2:95:35:f6:
         ae:b1:f1:ce:8c:7e:a9:c8:81:81:b0:86:ec:00:f7:87:be:ea:
         5d:c5:c2:5f:d5:7a:8a:4f:f4:4b:da:85:2f:4c:76:4a:4d:1a:
         8b:81:56:1a:fe:10:a3:ec:a8:f1:7f:05:c8:b3:b0:44:6c:18:
         62:d3:90:ef:c5:e7:41:e8:8c:c0:e7:33:f3:bc:ef:05:9f:42:
         ef:47:4c:ae:32:67:3d:ca:58:92:04:3e:29:32:3d:d4:53:68:
         72:92:f1:66:14:a7:d4:14:a4:8e:21:aa:c8:ad:a6:44:58:d4:
         8b:ff:84:d5:b0:f5:40:7f:1a:08:8d:48:e3:51:c7:77:57:34:
         9d:e9:f3:78:e3:13:8a:b0:65:35:ff:aa:08:16:3e:c5:7f:9a:
         4f:10:21:5a:16:8f:8e:9e:e2:d2:a6:e8:a8:2c:51:fe:3c:e6:
         29:9b:e3:ef:7d:66:31:de:88:f3:26:f9:6b:df:8f:0b:3e:db:
         c3:c9:f8:15:e3:ae:12:11:41:69:90:a3:60:ed:9e:48:1a:d1:
         e3:e8:84:30:df:99:bd:9c:9b:c4:fa:ea:04:88:06:1c:f4:4a:
         b1:18:13:f5:b2:dc:7c:3c:32:b0:ec:d8:dc:56:62:40:15:da:
         21:d9:27:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:50:30 2026 by rpki-client