Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/13cbf4c6-0282-3928-9738-d3eb1837832c.roa
File:                     13cbf4c6-0282-3928-9738-d3eb1837832c.roa (raw, json)
Hash identifier:          log7PqqDExckBsFp7pqQgeu1efvtxhlTbtCK5UwbNKk=
Subject key identifier:   85:B7:A2:02:9F:AA:42:79:01:39:C0:E1:E6:F9:AE:E3:57:A4:28:B3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D9228E5A543F834834C967880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/13cbf4c6-0282-3928-9738-d3eb1837832c.roa
Signing time:             Mon 20 Apr 2026 16:32:00 +0000
ROA not before:           Mon 20 Apr 2026 16:32:00 +0000
ROA not after:            Sun 19 Jul 2026 16:32:00 +0000
asID:                     395470
IP address blocks:        136.0.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:92:28:e5:a5:43:f8:34:83:4c:96:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 16:32:00 2026 GMT
            Not After : Jul 19 16:32:00 2026 GMT
        Subject: CN=0cf5bea1-4b4f-4146-94d5-65534a0bdf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:77:d5:df:a3:d0:8d:89:74:76:6e:be:93:3d:
                    ad:1b:7e:57:cf:9c:00:39:41:c6:e8:62:93:a7:63:
                    81:f5:45:84:4d:b7:91:3b:44:51:f9:00:df:04:05:
                    20:1d:33:c2:a6:a5:9e:de:40:53:38:5e:31:8f:67:
                    08:c4:25:03:17:f3:51:40:5a:ac:e9:8d:c1:00:e5:
                    86:d6:7d:4d:4c:a7:6e:5e:3e:08:4b:25:db:20:50:
                    84:24:79:65:f3:19:f4:ad:63:b2:7d:f3:31:eb:01:
                    ea:22:0b:82:cd:19:c3:0d:e9:ca:52:9d:27:d7:04:
                    10:16:58:02:f1:6a:4b:42:ba:4b:57:85:e0:af:10:
                    4e:b3:7a:24:83:81:f4:8f:33:e5:47:36:36:19:1d:
                    fa:60:88:69:5b:df:f0:c0:05:c8:2c:1c:96:2e:2a:
                    ab:76:e3:3d:32:68:f3:17:72:f5:f0:b3:2e:c7:16:
                    4f:0d:34:da:5f:99:5b:65:30:09:48:8d:1d:c9:51:
                    99:3c:91:55:2a:bd:84:29:d8:59:f4:a8:27:53:2e:
                    29:f9:ac:50:b4:9a:f4:88:4f:c6:17:26:4d:90:f4:
                    08:20:17:28:2d:f3:84:e5:48:1f:2c:83:44:e9:7b:
                    6d:44:38:ab:d5:ca:36:64:a9:66:48:a0:fa:91:92:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B7:A2:02:9F:AA:42:79:01:39:C0:E1:E6:F9:AE:E3:57:A4:28:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/13cbf4c6-0282-3928-9738-d3eb1837832c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:77:de:f5:a9:7a:23:69:82:0e:1a:2b:72:a5:6b:65:fa:d5:
         e9:01:b2:5b:ea:00:51:d9:35:c3:97:55:6c:a1:20:67:2f:b4:
         fe:87:48:20:1f:67:ad:01:c5:bb:86:6a:f6:e6:a6:58:3d:31:
         3d:66:da:73:6b:a9:0c:39:1a:66:5f:82:f5:7e:5c:44:8e:66:
         a9:3f:bd:aa:d7:a4:01:b4:a4:1c:e6:bd:21:75:0e:35:a4:aa:
         d9:62:2c:79:46:27:cf:08:21:8c:f1:43:63:ee:c3:b3:c8:e7:
         2f:b3:ac:64:8c:4a:8e:17:12:3d:88:d3:26:df:5b:f2:fb:43:
         ac:2e:eb:80:8c:06:90:a8:61:61:8c:de:ef:c8:b3:3a:83:90:
         0f:66:c7:eb:0d:b2:ad:f9:e8:e7:a1:f3:00:2e:85:a3:01:c2:
         be:8f:a5:a8:3e:ae:d1:6c:7f:62:d5:98:fa:c7:2e:e2:36:f3:
         89:52:4f:4e:90:76:f9:f3:0f:91:60:b2:d3:9d:e6:6a:5d:7a:
         04:c5:1d:a2:af:4c:cf:80:a6:06:54:e8:77:f6:48:e4:54:39:
         13:c6:da:03:a4:eb:c9:d0:86:29:4c:70:64:70:c0:97:ab:ed:
         b5:e1:1d:14:6e:ce:32:0c:34:43:b3:8c:41:cd:7d:d7:e7:27:
         d0:65:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:04 2026 by rpki-client