Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa
File:                     bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa (raw, json)
Hash identifier:          I0Pvfrf+6plBr3pD490spa6nfDVrkshHdpdyJnjlW6k=
Subject key identifier:   7E:09:87:28:7C:7C:90:09:D4:02:96:32:E1:2B:75:6C:CD:A3:AA:28
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E90BA5074611E92E616B2C680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     8881
IP address blocks:        136.0.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:50:74:61:1e:92:e6:16:b2:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=9fb2ef3c-4045-4810-a5e6-fda9c98b6c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:99:18:10:d8:dd:ff:08:43:a6:b7:0a:4a:
                    74:9a:63:45:60:7e:5c:0a:80:5c:d6:25:95:9f:d9:
                    15:3d:62:ef:0e:db:d1:e6:ff:7c:4e:a5:2b:9d:aa:
                    0d:01:fe:cf:42:f7:4e:da:78:36:4c:f5:53:da:d7:
                    e2:f6:6f:ba:f0:76:87:b8:15:f2:ee:ca:9e:d3:0e:
                    a3:5e:e8:b2:30:ce:43:5b:f9:aa:aa:61:a8:fd:1d:
                    bb:da:8e:03:05:33:4b:f2:1e:ee:81:87:63:ba:6e:
                    20:29:64:a9:eb:9f:78:5d:20:e5:21:8b:38:5b:b6:
                    25:5b:4a:b0:2b:e5:4b:97:b2:72:8d:3d:2b:95:a8:
                    a4:8a:f3:20:b1:ce:28:b7:67:25:0c:ff:6e:33:a8:
                    e2:9e:fd:55:5a:82:70:94:17:37:01:f9:b6:e6:a9:
                    29:41:84:fb:62:95:28:b4:75:83:fe:5e:4e:5c:72:
                    83:fd:60:38:cb:a7:5f:57:ec:0c:1f:b3:64:7c:7e:
                    92:7f:9d:1c:9f:d0:e4:45:36:7d:86:12:02:bf:f6:
                    d2:1b:3a:5d:4a:02:06:d9:ac:4c:a2:0a:44:a3:58:
                    d8:92:29:63:0d:59:59:81:0f:71:b5:ac:39:e1:15:
                    6d:cb:fd:37:37:49:d6:b3:bb:cc:01:4c:a3:5d:a7:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:09:87:28:7C:7C:90:09:D4:02:96:32:E1:2B:75:6C:CD:A3:AA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:74:17:f8:90:6d:15:47:9d:17:30:d3:79:66:23:42:2b:98:
         ec:9e:ca:54:1a:c2:7a:eb:41:88:e2:56:b1:1d:ed:43:37:5d:
         59:3c:c2:2b:f2:1e:e9:eb:7a:57:7e:f4:81:8a:7d:f5:8a:9a:
         aa:18:1e:79:c5:41:83:92:5a:f4:07:8c:32:8a:1e:ea:23:ce:
         75:c1:0d:c4:ae:ff:2e:c4:9f:c4:ae:61:f3:49:4c:13:7f:96:
         2c:39:c7:ab:0b:9b:df:2e:b1:bd:26:ba:35:e6:e0:40:02:88:
         bc:9e:34:c0:d3:3b:49:91:9d:e6:58:65:ef:72:c1:4d:10:5b:
         f7:0b:fd:c9:f1:e9:1d:6e:b1:a1:17:7b:ff:a5:3e:66:77:b6:
         33:f9:84:ad:b4:56:63:e2:8f:e0:e3:d2:cb:8a:2b:41:d0:f9:
         a1:66:04:cf:11:80:94:99:7b:b0:3b:01:b1:3b:31:3a:16:e8:
         d6:d0:d3:ee:2c:8a:a0:72:8b:b3:b9:a3:02:5c:6d:53:ad:6e:
         19:02:80:d9:72:42:82:bf:cd:0d:84:4e:58:75:b1:1d:5f:fb:
         6d:27:8f:fe:19:e9:46:0e:d9:87:b9:f2:ae:2a:26:39:39:15:
         9a:b8:0c:04:e3:af:2c:1b:63:a7:62:c9:51:9b:7e:b6:ca:6c:
         f1:e8:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:53:41 2026 by rpki-client