Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa
File:                     a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa (raw, json)
Hash identifier:          bZJ8x4YyX2uTdmOQvidVk0fldFoZbyPVYnSdmoEtotk=
Subject key identifier:   98:14:A7:08:B2:EA:5C:90:37:8E:3F:D9:EE:02:83:9C:EF:FB:B9:2E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E90BA5080D52F6A2798247780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     8881
IP address blocks:        136.0.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:50:80:d5:2f:6a:27:98:24:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=3b4116ef-ac9e-4b8a-b177-21c6c09dbd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:60:0d:c3:99:68:f6:f0:71:31:5f:5e:a7:
                    a4:c5:a7:a2:5a:99:12:13:40:3e:50:1c:be:4a:cb:
                    c6:49:29:92:11:0b:e5:57:45:de:9b:9b:08:80:d8:
                    3a:f1:5d:2d:de:b7:9d:ad:a3:af:01:cb:f6:9d:d0:
                    73:4e:f7:ad:8e:2f:44:1a:8b:2f:e1:18:fc:3e:dd:
                    7b:85:c5:9f:75:d9:6c:2c:a0:3a:6e:8d:df:32:75:
                    c7:15:cc:d9:e1:c0:bf:2b:5a:f3:fc:ad:8a:71:2f:
                    07:12:64:13:59:1b:be:8d:0e:42:20:d7:cc:b0:7e:
                    51:de:f4:02:8a:f1:bc:a3:26:0e:d1:59:02:42:b0:
                    ef:ca:55:06:d2:c1:27:65:98:78:c5:e5:62:c3:1d:
                    a7:cc:ce:56:61:bb:fe:3e:f6:36:cd:cf:a2:d4:b9:
                    d8:b0:1c:00:1a:55:b3:cb:3d:be:b9:99:11:88:0c:
                    e8:89:ef:80:56:c7:28:04:2e:c4:5b:f1:39:b3:7a:
                    c1:18:8c:49:6c:f2:cc:19:ea:59:69:5f:4c:ee:c8:
                    85:2d:96:c1:0e:a6:d4:9b:55:bc:81:2a:4f:5e:25:
                    20:fc:76:9f:38:bf:16:df:49:9e:f4:b0:2e:84:22:
                    8a:dd:84:b8:1e:f3:cf:7f:2f:3e:38:e3:e5:d6:d8:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:14:A7:08:B2:EA:5C:90:37:8E:3F:D9:EE:02:83:9C:EF:FB:B9:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:15:7b:99:b2:1a:5d:55:6d:dc:14:9d:2c:a2:58:6a:19:30:
         4f:15:73:bb:ce:5e:43:f4:0d:e9:d6:61:3f:9a:70:e1:c2:77:
         39:6b:87:3c:54:a9:1f:9a:6b:7e:5f:2a:c1:ed:ca:eb:ed:06:
         52:d0:ed:9d:47:5f:1e:cf:a1:0c:94:f5:37:8d:0c:2f:d1:d9:
         ca:8f:1a:b0:41:3a:cd:c7:89:39:24:04:6f:71:f6:69:fc:9a:
         74:08:a5:9f:6e:85:a3:01:2e:1c:d4:7f:03:a8:58:b8:bd:ff:
         9e:65:33:6b:89:0c:9d:b1:cd:b5:19:08:bc:20:45:cd:f4:e0:
         a5:ae:36:9d:c5:1c:f2:33:d3:3e:c2:15:44:f6:9d:68:8a:d8:
         45:f7:a0:1c:30:8b:7d:e6:2d:0f:f4:23:97:06:25:ef:61:29:
         02:de:c5:b4:67:8f:4b:06:6d:f9:b2:fd:1a:56:d6:52:1f:3b:
         52:9d:72:91:b7:b9:66:9d:5d:8d:cf:5f:70:f6:1e:39:b2:6e:
         43:1f:92:f5:cc:50:b1:47:95:d7:9f:9f:82:1a:df:4f:9e:e6:
         dd:6c:78:92:26:55:48:89:4b:f7:19:e6:52:71:75:b4:c6:bd:
         ba:1e:1c:bd:9a:db:d1:f4:d8:6e:8c:f7:04:30:dc:b3:1b:c2:
         a0:6f:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:09:16 2026 by rpki-client