Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa
File:                     4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa (raw, json)
Hash identifier:          VHha33/+WlqEUrdKcagWrbgmdMdj1Yc+OWc0StyV0Mg=
Subject key identifier:   D5:B8:98:7F:95:C4:77:02:1E:E6:EB:61:F0:D9:7B:14:37:F2:80:A7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D143D5230DA2702D64546FFC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     209854
IP address blocks:        136.0.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:52:30:da:27:02:d6:45:46:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=1afa9206-2552-4dcd-8306-d1ea8cae9503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:38:b4:33:bc:32:70:5a:08:65:61:04:4b:
                    e6:66:0e:81:5c:e7:b2:64:51:de:e3:db:8d:f8:2f:
                    1f:9b:37:cc:e6:59:24:4a:7b:14:7c:62:1b:be:1a:
                    d5:ae:da:19:80:ac:16:c3:77:3c:6a:a4:73:01:cb:
                    28:76:35:db:25:a8:3a:3b:44:58:6d:35:05:db:da:
                    15:02:ce:d2:16:93:8c:dd:ec:8b:6d:51:83:cb:77:
                    49:fb:7f:fe:77:7a:9e:10:7e:18:85:1e:3d:cd:7e:
                    8f:27:24:ba:3b:9c:2a:b4:8b:82:1c:20:30:87:c5:
                    17:75:87:cd:9a:01:5b:2e:7d:34:08:72:39:34:5d:
                    a0:47:4b:29:88:bf:84:5d:8b:dd:87:90:d4:24:28:
                    9c:a1:4d:a8:b0:8f:f6:b3:aa:3a:d4:b7:2d:71:a8:
                    67:8e:71:14:ca:32:b4:1f:49:82:48:ee:ac:1e:97:
                    0d:c7:75:54:a7:1f:45:d2:76:a5:f3:60:79:2e:80:
                    26:90:e5:33:78:be:19:1e:f4:ee:1c:bd:e1:38:ce:
                    ab:c6:21:93:87:d3:56:0f:47:bd:9c:2e:f6:2e:12:
                    d2:c0:f5:dd:95:2c:73:f3:9e:01:74:49:dc:ba:03:
                    38:c8:da:f0:89:82:a8:7b:7c:3b:d9:94:3d:66:69:
                    b8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:98:7F:95:C4:77:02:1E:E6:EB:61:F0:D9:7B:14:37:F2:80:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:88:42:64:6b:8b:4e:40:f7:41:c6:ea:ad:b2:4f:9c:21:13:
         62:3b:94:a9:9f:00:fa:8d:7b:1a:de:ff:c7:4a:56:e2:8a:c9:
         74:ea:dc:20:45:ae:c3:36:fd:bf:e4:b1:83:60:16:b6:36:1b:
         9b:91:46:12:af:8a:a0:dd:89:ca:a9:b4:90:9f:2a:af:ce:ec:
         5d:8a:6e:ed:62:4e:e1:6e:32:33:06:9b:81:fb:c1:92:c1:13:
         d5:d8:64:8a:89:fd:20:91:06:ea:ee:e8:35:13:62:9d:71:fe:
         ca:e6:f9:93:3e:ae:66:f9:42:2a:f2:55:f7:46:84:b0:da:b8:
         f9:ce:05:d8:fe:f0:79:b1:f7:e2:9b:bc:e6:74:45:2e:1c:9c:
         4f:af:f5:94:c1:b9:84:77:22:53:18:a6:03:dc:6d:b6:42:1d:
         15:d4:da:9f:b9:3b:8e:9f:a0:72:4f:51:76:7a:d4:97:52:28:
         e8:a2:b4:fe:75:88:c0:96:9a:04:f2:57:79:5d:1e:fe:4b:aa:
         dd:0b:e2:46:ba:af:97:fa:a2:60:5c:c3:44:a4:fd:e7:32:1c:
         f2:a9:80:0a:eb:43:4a:a2:28:3b:c0:50:5f:7a:d7:5b:21:9f:
         f5:77:f5:f2:69:d0:2f:43:f7:87:06:7f:a8:90:31:7c:51:42:
         d0:a1:15:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:14 2026 by rpki-client