Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1cd639af-8f1e-3131-a910-9bd92f4f9b6b.roa
File:                     1cd639af-8f1e-3131-a910-9bd92f4f9b6b.roa (raw, json)
Hash identifier:          /uhPgVoCOFBS5gYuN/QYK/9HHUxVVwk/PZsEnZZDDAM=
Subject key identifier:   AD:3D:55:09:73:E0:34:02:B2:30:04:BE:BB:4B:29:1D:08:16:94:44
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F374D370FBA0EC521C903BD00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1cd639af-8f1e-3131-a910-9bd92f4f9b6b.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     9009
IP address blocks:        136.0.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:37:0f:ba:0e:c5:21:c9:03:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=04ba8811-b96f-4333-a51a-06896353e5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:27:a8:b1:54:96:0d:1b:8e:e4:f1:0f:79:
                    8a:b0:02:03:e5:5c:39:1a:23:84:ab:3e:be:bd:82:
                    34:42:fc:c0:e7:4b:99:b0:33:8a:8f:c6:60:9f:dd:
                    a8:a7:cf:aa:7b:32:2a:7b:92:91:85:16:65:b8:8f:
                    7a:57:09:9c:3c:a5:1d:39:d4:2e:65:a9:f8:a4:22:
                    f3:b7:af:43:4c:d7:16:df:f0:57:c8:b8:48:dc:c5:
                    f2:78:cc:8f:5c:69:61:b1:13:72:57:f8:ff:23:00:
                    8b:9a:bb:db:04:ae:b6:c0:1e:35:81:8d:12:7d:a0:
                    fc:c3:b2:a2:e1:b8:b8:3a:72:da:40:43:dd:fe:1b:
                    b1:92:a3:3e:32:36:2e:0e:f6:b2:3b:dc:9d:b1:85:
                    ba:50:10:95:1d:b8:2b:e0:44:8b:03:6e:fd:92:ff:
                    7e:d4:fb:5a:d9:1e:ee:a1:6d:36:af:b4:61:52:fa:
                    b9:ec:ab:bf:58:27:a5:ef:d2:28:50:57:3d:a0:41:
                    04:b2:03:a9:e6:f6:b3:25:be:da:b2:10:7a:12:52:
                    fc:6c:1d:65:77:22:35:62:be:95:d0:f1:01:c2:c2:
                    c8:ec:bb:7b:35:7a:49:f0:6d:9a:6b:83:90:6d:48:
                    d5:8c:a1:04:5b:ed:bb:7b:e9:d4:e4:a0:64:5d:2c:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3D:55:09:73:E0:34:02:B2:30:04:BE:BB:4B:29:1D:08:16:94:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1cd639af-8f1e-3131-a910-9bd92f4f9b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:7c:06:58:8a:bc:ee:69:79:9b:ed:90:2c:ed:9a:56:ff:
         86:a8:bb:58:38:9e:c0:b6:ed:c3:e8:5c:d7:68:89:e9:7b:af:
         b7:81:77:ca:52:97:60:51:b3:ff:20:b1:be:ad:98:1f:f6:68:
         83:90:8e:40:43:c6:7c:c1:0a:f5:31:28:0e:eb:0e:54:0d:52:
         1b:13:56:72:3a:9a:55:08:5c:d2:59:77:83:79:d9:57:03:a0:
         91:70:91:51:08:d5:18:69:67:7e:bc:52:2e:c9:70:0a:5b:54:
         b9:38:e8:1b:45:15:a5:d7:6d:a0:c3:d3:4e:60:ac:dd:c3:cf:
         56:29:9e:a8:6f:97:e9:e6:f5:cb:d7:22:db:8b:4b:66:ad:22:
         54:bd:b6:3a:3a:a3:8d:8c:8c:8c:7d:7d:54:46:7f:ec:0f:da:
         25:a6:b0:19:66:32:e4:00:3a:ca:3d:d2:6a:5d:c3:31:e6:7f:
         c7:5b:fc:2c:63:bd:07:e7:44:4d:9e:3e:f6:c0:97:e5:6a:71:
         7b:86:5d:cd:4b:72:43:84:b9:8b:f4:a1:d4:a1:52:43:d8:b5:
         1d:1d:53:d9:66:f9:be:c4:0f:bc:d9:b0:cf:31:ee:8d:f1:01:
         45:2b:a2:a3:36:39:c8:35:01:08:e7:0f:ae:8e:e1:e9:b1:2a:
         ba:ab:30:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:17:11 2026 by rpki-client