Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c0124524-a38c-331a-b4d5-25f3ab4131bf.roa
File:                     c0124524-a38c-331a-b4d5-25f3ab4131bf.roa (raw, json)
Hash identifier:          9oYXjrNr1bR/rsZasHFQ6NgigLlu9sS5Wk3cEGdr28Q=
Subject key identifier:   E5:E5:73:BF:E3:8B:CB:39:D6:81:16:61:2C:19:12:B3:4F:98:4D:7F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DB4A592A94E388DEB91554300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c0124524-a38c-331a-b4d5-25f3ab4131bf.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     9009
IP address blocks:        136.0.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:92:a9:4e:38:8d:eb:91:55:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=401bcbf0-493b-48a2-ac67-eb54787ff250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7e:2a:37:29:0b:db:fe:c8:6e:82:ff:49:cd:
                    d9:ae:55:da:2a:07:54:df:dd:57:93:bf:6f:dc:65:
                    32:20:84:e9:9d:58:a5:32:cb:ff:69:0c:85:34:92:
                    e1:b8:f2:8d:6b:a4:ee:3b:cc:9a:ab:60:44:11:9c:
                    78:df:7e:d1:6c:34:58:bf:ac:0d:2b:03:bc:28:a4:
                    29:d6:84:1c:46:94:16:71:89:d3:31:88:a7:22:ba:
                    31:35:4e:bf:1a:17:15:f0:dc:e3:e4:04:97:7b:6e:
                    8f:e4:32:fa:b4:fc:87:43:03:02:5a:73:ae:ce:30:
                    d7:87:67:bf:4a:84:33:7a:17:c4:6d:7a:28:6e:fa:
                    22:8d:1c:69:d6:b8:b3:f8:75:4d:f3:27:3a:c1:08:
                    12:87:3a:0d:5b:2c:1d:0b:7e:7d:65:46:d7:00:d0:
                    ab:5e:f9:f2:10:eb:c1:c3:b7:9c:76:46:bc:cf:10:
                    73:e0:2c:d7:fb:d1:b6:78:53:65:12:5f:a5:5a:d6:
                    db:64:2d:a6:56:1f:eb:f5:1a:8d:aa:f6:a3:ff:12:
                    5e:1a:be:58:ec:de:3c:86:cc:db:42:c5:be:50:16:
                    94:31:fa:79:a0:4b:08:6a:f6:c4:74:16:1e:78:b2:
                    35:10:01:37:0c:d6:83:eb:aa:57:f1:0b:2d:b1:0c:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E5:73:BF:E3:8B:CB:39:D6:81:16:61:2C:19:12:B3:4F:98:4D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c0124524-a38c-331a-b4d5-25f3ab4131bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:bb:8d:da:eb:d4:52:d0:f9:79:40:08:a0:c0:57:c3:a2:
         30:44:ab:b8:79:77:f2:5a:08:f2:d8:7f:95:e3:bd:c0:6f:86:
         11:1c:73:fd:cf:c3:6e:07:8c:c1:65:70:13:5b:3d:7e:2a:d9:
         44:33:8c:ce:9d:c4:e4:9c:46:31:88:83:44:17:2e:80:ee:a1:
         ea:c0:de:04:80:83:5f:7e:02:de:85:b3:55:dc:1f:82:e6:a2:
         e2:1c:48:8d:96:cc:ae:2d:8e:12:c1:cf:ae:13:a6:6d:8c:83:
         6e:f5:06:2c:70:dd:0b:8a:2b:95:22:08:87:3b:72:99:27:3e:
         66:f9:67:14:ba:13:15:30:95:3e:dc:9b:9b:7f:79:c9:ec:db:
         f6:f3:62:90:37:13:87:df:98:85:23:e3:14:b1:d0:1f:ae:73:
         8d:2b:a6:2e:43:0e:e5:ea:1f:be:d1:e1:bb:0d:50:68:15:99:
         b6:2b:13:eb:4e:2f:f7:29:79:98:83:fc:23:50:fe:c9:32:3b:
         1b:9f:fd:3c:7f:a9:3c:9b:d1:eb:8b:0b:ef:8b:e8:fc:c9:e1:
         13:39:b9:9c:7f:57:b0:cb:e5:35:c7:ed:68:a3:1d:16:21:68:
         3d:8a:b1:42:9a:8c:c5:36:df:a0:a4:1c:55:96:df:23:cc:e7:
         8c:87:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:34 2026 by rpki-client