Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa
File:                     a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa (raw, json)
Hash identifier:          Atn6CmW1yLyruGgIYpyvMLSJwcVexte/y6EtXydWQdA=
Subject key identifier:   1C:6B:76:C2:A0:95:A2:BC:29:36:BA:4C:C9:44:08:D1:FE:52:55:F2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DB0758B347BFF5B6E21411E00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     8881
IP address blocks:        136.0.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:8b:34:7b:ff:5b:6e:21:41:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=40d60ca9-a1c5-4475-9ba5-6c3cb72316d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:36:fe:1a:83:34:dc:44:f1:c5:bf:bc:1b:
                    fb:5b:c3:17:ad:ae:0b:0d:e1:87:4f:bd:34:bc:09:
                    78:a8:3e:2a:22:2d:a6:d9:b6:c9:7f:f8:94:cc:28:
                    f4:25:7c:bf:9c:cf:a0:72:23:24:f9:44:df:90:30:
                    39:ff:6a:0f:c6:21:9b:b9:1b:8d:62:db:ef:e5:40:
                    02:ff:68:82:f9:96:96:c1:f6:bb:2c:c3:6e:30:2a:
                    0d:6a:be:76:10:1a:6f:f5:2d:25:ee:6c:4d:cc:ac:
                    99:a9:0c:d1:e3:dd:b2:6c:b1:d9:25:57:72:91:dd:
                    9e:72:ba:88:bc:3d:17:a0:9f:d4:90:3d:63:85:db:
                    36:b2:de:c0:5c:88:dc:70:f3:52:0f:3c:ae:c2:03:
                    0c:d7:e8:7b:2a:12:ab:cc:76:6e:9a:3f:f6:20:24:
                    20:89:9f:0c:3a:85:a4:64:ed:a8:fc:8d:75:c0:05:
                    b4:b2:f3:94:f8:b6:38:0f:72:c5:40:e6:22:ba:f4:
                    d6:2e:a0:6a:e3:95:73:b1:b4:9b:70:df:d2:b8:1a:
                    d0:7b:bb:54:03:e0:8d:39:42:8c:6c:66:be:be:1d:
                    02:b2:43:8a:c5:75:74:12:80:fa:00:d3:26:47:70:
                    93:76:60:03:16:44:74:9e:a7:86:91:7c:a9:33:0c:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6B:76:C2:A0:95:A2:BC:29:36:BA:4C:C9:44:08:D1:FE:52:55:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:87:38:39:04:a1:93:cc:ea:3a:24:45:4f:da:b8:c9:ff:3f:
         c2:59:19:aa:1b:42:1e:dc:e5:bf:43:4f:9d:9c:67:f1:51:d0:
         eb:30:bd:61:da:6b:8f:dc:4a:4a:7d:ff:56:ed:89:7b:3f:34:
         d8:66:3e:7f:e0:5f:89:98:9a:1c:51:ee:3d:31:f9:bf:5a:8b:
         93:62:82:c3:de:ed:cb:21:fb:fd:a9:98:18:ba:ac:08:21:82:
         91:2c:81:05:f9:be:39:84:e7:2c:62:81:59:9e:5e:9a:84:9b:
         e0:84:9f:b7:6d:84:7b:48:aa:2c:6a:73:e2:63:b7:44:30:b2:
         a0:49:09:93:af:3f:88:5e:6d:e0:c6:5c:bd:49:d1:43:98:b4:
         68:b5:7a:44:45:d8:8b:ce:c6:d1:05:65:6e:c3:9e:aa:12:97:
         fb:2b:c5:f7:e8:56:ca:73:e4:2e:4c:96:5c:0f:c1:ab:56:f3:
         9e:5e:0c:93:9f:69:33:e3:18:10:1c:61:37:71:7c:56:6e:67:
         a8:c9:2c:93:f4:94:f1:89:0c:0c:a5:de:6a:3f:95:64:ca:7e:
         a3:56:96:0f:88:54:52:14:e9:98:bb:07:93:30:99:ae:94:52:
         42:39:31:64:d2:26:20:de:a6:63:94:19:7d:20:fb:2d:85:65:
         7b:d2:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:47 2026 by rpki-client