Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f8cae5b-5a81-3740-8369-33edf847d887.roa
File:                     8f8cae5b-5a81-3740-8369-33edf847d887.roa (raw, json)
Hash identifier:          Oq3QduCvHdqZJBnA9lg/9e33CzIH3cRW1kITdhd7BcY=
Subject key identifier:   50:1C:F6:4C:BC:D5:F9:DA:81:C3:30:C7:7A:2A:2F:A4:03:6C:D6:3A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DCAFB0E4BD13D9D5B7D274AD0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f8cae5b-5a81-3740-8369-33edf847d887.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     400402
IP address blocks:        136.0.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:0e:4b:d1:3d:9d:5b:7d:27:4a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=736a5e62-113a-4a6b-b2d9-ca09f75bc0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:e3:cc:f9:1a:f5:37:dc:63:eb:57:b5:1e:
                    d7:2e:41:d6:45:91:71:11:8c:ff:d3:b1:c9:ee:9c:
                    58:b3:50:c9:8a:25:4e:32:8a:a3:80:1e:3f:fc:5c:
                    b5:62:20:6b:84:b8:5f:63:70:28:85:87:23:39:a6:
                    b5:53:03:8b:38:df:6d:23:5b:01:01:d9:d0:f1:82:
                    43:ef:96:05:4f:8e:19:a7:5d:96:67:70:31:a5:43:
                    cc:d7:a5:56:24:3c:52:54:6d:98:08:80:c9:bd:5c:
                    01:26:b0:ca:3b:1b:93:50:66:02:da:d7:7c:99:3a:
                    43:45:ce:b0:5c:6b:04:f4:d7:2f:37:7d:02:35:ec:
                    25:2f:a8:a1:66:2c:a1:61:11:2d:67:36:2f:9a:f9:
                    49:cd:1a:99:7d:7d:f7:76:a6:2f:67:3c:b2:8e:3c:
                    58:27:21:dc:b6:58:3e:40:e2:03:07:19:da:a8:f8:
                    c6:13:bd:e1:cb:01:86:6a:8b:bd:27:55:05:64:7d:
                    6e:f8:29:09:a6:bc:1e:38:f9:5d:62:ad:a6:1f:54:
                    30:0b:ff:e0:f4:21:fd:61:97:fe:a9:95:ac:be:56:
                    b1:88:2f:3b:3e:a2:1b:40:67:c1:f9:f2:79:67:60:
                    05:eb:70:7a:aa:9a:75:69:e7:27:d0:7f:cf:60:20:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1C:F6:4C:BC:D5:F9:DA:81:C3:30:C7:7A:2A:2F:A4:03:6C:D6:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f8cae5b-5a81-3740-8369-33edf847d887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4d:7c:27:39:1c:34:1f:e5:91:83:a8:18:55:1c:94:37:01:
         27:41:dc:66:90:cd:e3:0a:5d:e6:f5:99:de:a7:a8:b1:09:88:
         ed:19:93:11:b4:cd:ae:d3:67:7c:33:77:30:12:da:3b:27:ef:
         6b:13:9f:5a:72:d4:3f:5c:d1:99:f9:52:9c:a4:12:4e:d4:63:
         d3:9f:d3:82:b3:62:56:ba:07:c9:79:19:c4:c0:e7:9a:dd:6c:
         a6:43:5f:04:55:0a:b9:a2:bb:d4:12:c6:fb:09:55:e7:c1:95:
         74:af:76:b7:fc:88:fc:87:8a:ac:4e:ca:f7:7e:eb:11:85:d3:
         85:66:07:9e:19:f0:77:ef:54:5b:3c:3a:0e:bc:a8:97:0c:97:
         99:dd:d1:81:eb:64:ab:41:f3:4a:e9:17:69:a4:e7:f3:a3:ca:
         be:9a:91:3c:e8:0c:4b:94:b9:35:0e:f2:1c:66:77:fe:24:22:
         2c:d3:02:40:14:3e:43:72:3c:ce:ec:6d:eb:d9:e2:7d:58:91:
         05:32:24:da:76:18:69:3f:f6:9c:77:40:1e:a0:7e:7c:0a:2a:
         80:8d:4a:98:98:84:be:b0:fb:2b:6b:7e:c0:f0:5b:f5:f7:17:
         c1:6b:2e:b0:2d:cb:74:0b:c8:f8:07:c4:bd:47:91:c8:7e:7f:
         bc:58:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:11:00 2026 by rpki-client