Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79c7a595-dc6d-3f7b-9167-e8e88dcbe40f.roa
File:                     79c7a595-dc6d-3f7b-9167-e8e88dcbe40f.roa (raw, json)
Hash identifier:          7D5EMZxBYw4GprCJG3/JC+61GOAMO3WnYFTj2WeLWHg=
Subject key identifier:   2C:34:AD:96:8D:6D:5E:87:93:35:DA:DF:BD:37:1D:57:04:52:49:EF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F497E32596FBFA0083E872400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79c7a595-dc6d-3f7b-9167-e8e88dcbe40f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        136.0.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:32:59:6f:bf:a0:08:3e:87:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=07f9186b-f5cb-4390-9641-db366cb6ad52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3b:5f:76:00:ee:93:44:bb:17:ad:24:24:81:
                    6a:c8:2f:50:a7:97:89:01:31:15:c4:e8:a2:e9:4a:
                    19:6e:f1:d7:39:09:0e:0d:c5:42:01:f5:2d:51:3d:
                    a0:7e:a0:7f:9e:92:0f:ba:da:8f:68:66:f8:a8:53:
                    5d:51:3f:53:38:a4:b3:b4:38:d9:88:8f:3e:68:e2:
                    4d:74:39:f1:cf:29:7e:ff:3b:9b:14:7a:64:a4:55:
                    99:a6:3c:59:38:dd:64:e7:f4:18:e1:9d:bd:63:93:
                    34:18:e6:ad:65:c9:9a:75:06:11:56:95:c5:d4:d8:
                    96:c6:8d:b9:7a:21:6b:40:de:04:cb:b7:9f:fc:17:
                    90:05:87:1d:ab:1d:d7:9a:5b:7e:58:57:83:85:19:
                    c9:c4:78:e4:a4:d6:c3:18:a6:47:58:3e:5f:d7:15:
                    2d:de:b2:9b:89:68:ca:07:1d:bc:ab:72:ac:41:f5:
                    5f:7e:65:49:b0:3e:3a:78:9d:0a:37:3b:89:e6:37:
                    7f:70:70:6d:fe:df:a9:1c:60:87:9b:d6:aa:c5:a0:
                    c4:fc:ff:c1:48:69:37:fd:40:2f:1d:6c:48:0b:3e:
                    24:ac:a7:a5:14:36:df:97:91:1d:da:0a:f2:25:76:
                    cd:a8:69:46:e2:7a:a3:72:57:19:c0:b5:18:59:fc:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:34:AD:96:8D:6D:5E:87:93:35:DA:DF:BD:37:1D:57:04:52:49:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/79c7a595-dc6d-3f7b-9167-e8e88dcbe40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:46:18:cd:b5:95:5d:1b:a2:7e:45:11:d7:fa:d7:18:b8:
         e2:b9:45:24:e7:b2:0d:33:bc:5f:6d:92:18:ac:56:19:07:d7:
         08:6a:36:fb:ab:61:cf:fa:ce:1a:a8:88:ec:28:40:28:fd:b5:
         b6:c1:c5:4d:96:f7:f1:19:0f:03:dd:ef:4e:6e:04:cd:3b:3d:
         f3:42:a5:68:4b:07:b1:e0:3f:3f:a9:bb:8f:1d:77:7f:96:e3:
         3e:c0:c7:a6:86:64:bc:d8:44:9a:5e:b2:7e:3a:48:ad:93:db:
         f3:a6:ab:4b:cb:29:59:e8:61:a8:66:d0:32:37:4b:af:39:4d:
         a9:b3:5c:40:3d:68:e9:16:64:37:bf:d9:0e:a1:7a:5c:3b:2e:
         28:41:b9:54:6a:df:97:53:bd:ed:54:13:ab:f8:5a:a9:e1:98:
         b6:00:5c:56:40:b9:fa:d2:67:fd:2c:dd:6f:c9:ba:a7:59:1d:
         23:76:ff:0d:8e:70:df:8d:b4:77:af:34:48:32:29:0d:e6:92:
         a4:f7:aa:34:8e:99:20:f0:a5:a4:16:49:7d:f4:6a:46:4b:48:
         0e:5a:d9:0f:06:15:16:a5:d3:33:47:b8:35:44:23:00:06:ae:
         56:3f:2d:55:44:ee:82:43:6a:08:45:46:1b:27:32:6d:d4:f8:
         c1:7a:a8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:25:12 2026 by rpki-client