Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d65c72b-124d-39eb-bff3-1c300b51b11a.roa
File:                     6d65c72b-124d-39eb-bff3-1c300b51b11a.roa (raw, json)
Hash identifier:          dH3vV5bhWHoPx6gY3D3y1JcGhLmp8zMaOrBUX7vffkM=
Subject key identifier:   9F:F4:81:C2:2E:A4:78:0C:A9:C9:CF:DF:F0:56:CB:AF:C7:F8:56:87
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E90AA6D65F4AF81CA7C673380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d65c72b-124d-39eb-bff3-1c300b51b11a.roa
Signing time:             Mon 20 Jul 2026 20:28:18 +0000
ROA not before:           Mon 20 Jul 2026 20:28:18 +0000
ROA not after:            Sun 18 Oct 2026 20:28:18 +0000
asID:                     212238
IP address blocks:        136.0.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:aa:6d:65:f4:af:81:ca:7c:67:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 20:28:18 2026 GMT
            Not After : Oct 18 20:28:18 2026 GMT
        Subject: CN=c1ca4684-6b0c-4539-a955-154ba1959f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:ad:af:8f:80:28:58:28:2e:92:fb:ff:ae:
                    5c:17:95:d5:11:5c:c6:71:1c:29:f3:a7:7e:81:a6:
                    f3:17:c5:fc:a3:c3:b4:74:7f:09:f5:c2:81:47:56:
                    94:2b:eb:a0:c3:43:35:d6:b0:80:26:c7:0b:09:a3:
                    f4:66:1d:3a:52:0d:1f:4a:38:2c:c1:2f:8e:7c:58:
                    10:a8:31:70:a3:67:44:40:75:19:63:b6:22:32:dd:
                    99:17:ae:87:45:55:51:02:2f:c7:57:15:9b:6d:d4:
                    c0:c7:e4:4f:07:b3:3f:e7:1a:51:f7:4a:cf:20:78:
                    2c:9e:34:e6:ae:76:13:27:fe:7a:a5:21:9d:ce:e0:
                    20:a0:a5:89:d5:de:6a:e1:66:49:0a:19:8d:55:0c:
                    3b:1a:f8:b9:cb:1c:8b:08:f4:fa:fb:0c:86:06:6a:
                    b3:2b:d5:d4:ab:32:9a:22:e5:6d:79:f9:29:41:90:
                    40:56:a1:e1:08:0e:31:58:d7:3e:6d:36:74:71:74:
                    1a:b2:87:97:fe:49:8c:bf:03:59:c1:44:28:ac:a8:
                    68:ef:8b:7e:42:bb:25:68:59:81:50:0f:59:12:e5:
                    36:d2:6d:4b:62:6f:07:50:b5:5f:3f:86:18:66:65:
                    5c:9c:40:4a:e1:62:c4:a7:b4:6f:f9:d7:f2:ca:c1:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F4:81:C2:2E:A4:78:0C:A9:C9:CF:DF:F0:56:CB:AF:C7:F8:56:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d65c72b-124d-39eb-bff3-1c300b51b11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a5:87:a6:04:ae:e8:6d:bc:7d:38:12:26:07:12:bf:8c:c3:
         73:88:de:fa:e9:26:e0:ea:88:ca:6e:2d:39:96:13:51:30:dd:
         63:17:a9:02:3a:a1:ab:f5:4f:f0:c0:5f:2d:23:7c:de:c1:24:
         12:40:4f:55:79:e2:3f:82:18:23:ea:54:b3:a8:c0:c1:76:ba:
         be:38:f9:93:e0:5d:19:b1:87:ad:44:0c:6a:c3:2d:cb:b7:a0:
         f3:26:e1:ec:f0:ee:05:76:2b:8b:6b:44:36:a3:92:5d:6f:dc:
         b5:9a:c2:9d:2c:42:95:a4:ee:12:c4:ab:a9:c9:b8:5f:fe:66:
         1a:1c:80:a8:5e:a6:d9:e4:5f:b4:57:c3:c1:63:9a:2a:fc:e1:
         dc:25:a8:fa:5f:69:ab:33:56:83:d8:8d:26:00:d7:f1:64:24:
         8d:ee:4c:3d:3b:c2:cc:46:0e:65:e0:26:8b:6a:a7:8c:f8:bf:
         53:3e:a4:6b:47:01:d3:c9:a4:0a:ab:6a:88:d2:18:06:74:2b:
         21:b0:9f:88:2e:9c:7d:e9:96:74:d4:24:e4:ae:2f:b1:7e:16:
         e2:0b:ed:96:30:da:a0:16:6c:e2:30:9b:7e:70:60:c1:49:4b:
         6d:8b:9f:45:19:64:dc:92:0e:a4:44:17:1a:1e:41:e3:b0:a8:
         a8:e9:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:20 2026 by rpki-client