Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/14080c80-f4cd-3a16-a457-79cfa681c727.roa
File:                     14080c80-f4cd-3a16-a457-79cfa681c727.roa (raw, json)
Hash identifier:          JqqvHd6paL39KmAtUzxmAoCOLBsBDycq/VNSFH3b+24=
Subject key identifier:   C3:52:3E:7E:95:B2:76:47:94:6A:04:7F:58:B1:A5:BD:A3:96:10:48
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D1707DDC2782612492931ED80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/14080c80-f4cd-3a16-a457-79cfa681c727.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     149440
IP address blocks:        136.0.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:dd:c2:78:26:12:49:29:31:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=899acd12-0dee-43d0-ba10-619c4bf51630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:c2:d2:49:24:ab:fc:f0:4b:86:ad:ce:06:
                    e2:eb:b2:07:44:72:cc:b4:54:92:54:72:40:1d:0a:
                    40:31:27:70:39:43:76:8e:f8:e2:a3:ed:2d:8f:b2:
                    97:35:42:01:52:a9:5b:61:64:90:7b:1b:60:72:25:
                    0a:f0:af:d8:a6:43:28:35:d8:d9:3a:eb:64:c9:e6:
                    d6:c3:54:0a:2f:94:03:2b:2b:56:32:5f:69:6e:0b:
                    2b:04:63:c0:84:f4:f1:80:89:a9:71:67:21:50:29:
                    84:09:df:cb:48:09:8a:73:76:23:d9:c1:1a:e1:8c:
                    6c:79:42:d1:cc:88:70:e7:0d:32:c3:4a:89:40:fd:
                    81:94:e4:c3:42:8b:14:f9:a2:6d:a7:26:93:e8:ae:
                    b1:7e:fb:96:a0:a3:6e:1b:7e:a9:56:c7:43:f2:87:
                    2e:0d:86:3e:01:ad:6c:b7:4c:ce:28:4e:81:23:15:
                    dc:d3:03:5c:d8:fb:de:ac:5d:01:c0:2c:29:16:e4:
                    40:c1:70:d7:e2:a9:1e:9c:13:f6:c5:f6:81:d8:13:
                    9c:81:ec:69:6f:1f:8a:5b:ee:7d:31:9e:22:46:1f:
                    4d:bb:f7:44:d7:fb:9b:4f:28:10:b4:49:62:40:bf:
                    7b:31:df:42:ee:2f:e6:98:31:2e:1f:c9:a7:c9:9f:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:52:3E:7E:95:B2:76:47:94:6A:04:7F:58:B1:A5:BD:A3:96:10:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/14080c80-f4cd-3a16-a457-79cfa681c727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:dc:14:22:79:06:b5:58:37:0e:cb:45:24:ec:c4:3c:c0:ec:
         bb:93:ed:27:b9:8e:c0:b7:e7:4e:65:d2:1f:37:9c:b1:71:5f:
         24:4b:25:8d:9f:e8:68:9b:79:56:f7:72:03:b0:01:88:e4:97:
         25:5a:b8:c6:39:40:5c:31:1a:31:42:5b:64:fe:f7:d4:05:47:
         72:2d:cb:88:c4:e9:87:fc:57:30:17:15:a5:2b:f8:d6:78:e2:
         21:f3:77:2c:9e:14:0b:86:7a:07:ae:ad:a1:42:41:3f:c7:3d:
         50:59:ea:6c:da:85:91:65:08:a4:f8:23:e0:4b:fe:d2:c8:f3:
         2b:00:9c:50:0e:85:59:83:84:d5:9a:72:22:57:6c:c5:3b:90:
         cc:3b:4e:0a:3d:df:ac:30:6e:c7:aa:ad:ba:92:75:2f:12:db:
         d9:53:4f:84:76:95:d3:03:aa:1d:d6:e0:75:a4:60:1c:46:3e:
         ce:9c:5b:7a:c8:52:1d:61:11:ad:47:1d:8a:50:fb:12:4d:9a:
         cb:7b:18:b2:a9:30:f5:cb:43:2e:76:e8:bd:c2:9b:b9:f6:1a:
         ed:51:a6:95:f0:89:6b:a1:2a:e4:31:d1:8e:67:76:94:f6:93:
         ec:7f:61:af:f2:1c:31:53:d1:f8:28:51:75:79:ed:a4:5c:e6:
         30:36:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:17 2026 by rpki-client