Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf740394-3536-3c05-97d7-4ea34e60f331.roa
File:                     bf740394-3536-3c05-97d7-4ea34e60f331.roa (raw, json)
Hash identifier:          S5m9lMRp33VEg0v/Fw79fVlOMhKm+eL4Dj+Rd3HAWWw=
Subject key identifier:   1D:33:FB:2F:53:98:11:E2:22:1C:D0:98:1F:3D:46:E1:5C:D7:B2:65
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F497E2CAB87570F4DB5D50B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf740394-3536-3c05-97d7-4ea34e60f331.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10753
IP address blocks:        136.0.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:2c:ab:87:57:0f:4d:b5:d5:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=daba6561-d36f-4138-a9c2-7d6c7d6051ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:8e:45:8b:74:52:4d:8b:9d:66:d1:23:0e:
                    e1:b9:db:fa:e9:90:eb:a3:c1:4a:d3:e8:5d:68:a4:
                    ea:1c:1f:c0:ac:2c:bb:2f:a0:4f:62:81:58:90:07:
                    7a:3b:c3:a8:78:e6:4b:8b:f1:3c:26:9c:36:e1:bc:
                    70:4a:21:9f:09:a2:5d:c9:34:fd:a7:80:ad:42:51:
                    a4:18:45:e2:70:c5:54:0d:b2:2c:22:89:3e:77:90:
                    0e:0e:16:f9:21:c3:b7:d8:84:ba:1a:e0:71:ed:8c:
                    0e:b3:2e:e9:70:bf:c1:ad:c2:9d:21:74:63:12:b8:
                    e8:37:89:29:69:27:31:06:3c:b1:6c:58:c2:57:6b:
                    a4:47:51:8b:8f:83:9d:40:35:ac:15:28:37:e8:4b:
                    f9:ce:d9:0e:93:96:f4:27:20:39:a5:23:fc:eb:9e:
                    1b:be:e0:49:91:ee:af:9b:3f:38:e5:41:aa:fe:ec:
                    4a:55:2a:2d:6f:ca:e8:01:ee:51:fc:20:c7:e0:fc:
                    0a:9b:1d:e6:a2:18:a2:ac:fe:4d:af:50:2b:49:e5:
                    df:a0:91:6c:50:f6:75:fa:cd:c5:26:4f:ef:95:57:
                    dd:70:3c:eb:aa:04:12:9a:ad:71:df:b0:6b:23:c0:
                    e1:2e:cb:d4:7d:63:bf:8c:16:62:3d:aa:6a:00:6a:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:33:FB:2F:53:98:11:E2:22:1C:D0:98:1F:3D:46:E1:5C:D7:B2:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf740394-3536-3c05-97d7-4ea34e60f331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:23:8a:03:d2:2e:26:1f:c7:46:f3:14:b4:b7:9c:85:92:
         ab:89:66:09:60:a9:be:38:4d:b7:b8:b4:ec:1f:fa:67:ba:ff:
         95:0e:4e:92:a9:c8:0c:9d:75:cc:4b:09:80:4d:01:11:80:1b:
         73:e4:47:d3:a3:1c:63:31:3a:ca:87:4c:6b:c3:8a:b2:5c:8c:
         50:e0:8d:5e:89:4c:fb:0a:b1:7f:74:d8:92:fb:db:a1:97:90:
         b1:b5:54:a1:d5:6c:54:dd:50:e9:9d:3d:af:24:e9:eb:b4:1d:
         1a:8b:a8:07:0f:e7:74:51:c0:39:6c:97:7d:aa:ce:22:f6:06:
         80:a7:f3:c6:81:0f:78:aa:91:65:a0:59:4a:4d:e4:8d:ea:e8:
         c7:69:81:02:71:8f:33:29:07:94:a2:e9:42:ed:3a:c4:6b:db:
         dc:ad:ee:2e:a0:3f:ae:77:c9:ef:46:fa:3d:73:9c:bc:8f:29:
         56:12:7f:67:4b:11:41:d0:bb:e8:7e:51:a4:1f:65:c0:d4:b3:
         b5:58:a7:8e:c6:87:7f:db:ad:b3:be:0f:27:a8:dc:be:59:33:
         cd:c6:a7:40:86:29:6a:3e:64:0e:48:49:10:69:eb:ae:c3:68:
         42:30:4a:d1:d4:40:43:39:32:4f:24:50:06:aa:ef:c2:a2:3a:
         80:2b:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:16:16 2026 by rpki-client