Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce9fd2aa-c4d3-31e1-850e-a53c9cc5cc73.roa
File:                     ce9fd2aa-c4d3-31e1-850e-a53c9cc5cc73.roa (raw, json)
Hash identifier:          h2Udk4GNjANUkEOdjWfBfJLTLyzQaO8dWPsstrTXT1g=
Subject key identifier:   D8:AC:3B:23:93:ED:96:89:CF:CE:D1:D8:2A:9B:72:88:06:07:3E:39
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E94EA67A8C5505D8425C61400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce9fd2aa-c4d3-31e1-850e-a53c9cc5cc73.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     9009
IP address blocks:        136.0.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:67:a8:c5:50:5d:84:25:c6:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=1c98f55e-aca0-4d39-9d09-89a964709d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:53:47:41:82:42:6e:01:ac:06:1e:11:62:
                    03:41:f9:18:bc:cb:02:60:0c:7e:e4:f3:57:5b:a5:
                    ad:5b:fb:60:2c:2d:7c:2e:c2:d1:34:30:d0:42:be:
                    1a:ee:1e:34:79:e6:f5:3f:4a:54:1b:78:bc:85:ee:
                    ea:7d:af:b6:ec:88:08:fc:a2:3c:5c:68:f8:42:aa:
                    6b:f3:fd:02:99:5c:14:69:c7:0a:a9:fd:06:2a:8c:
                    b8:75:b8:47:b9:bd:2f:7e:fd:77:cc:33:6a:49:84:
                    57:ef:44:f2:92:6c:c5:0b:5c:2b:66:90:3c:57:ca:
                    cc:11:53:86:0c:2f:9d:49:6f:c5:b4:70:f4:0e:39:
                    90:d0:f2:51:3d:81:2e:a4:7d:15:71:10:95:fc:7c:
                    f0:08:8f:01:26:2c:4c:be:4c:5b:bb:0e:53:38:4d:
                    e9:97:be:a0:36:49:6e:04:16:d0:f7:8d:d6:c5:ed:
                    38:e8:e5:3f:c0:0d:94:c5:93:d0:07:2f:88:cc:f6:
                    f8:bc:13:2d:79:24:e1:38:c4:e6:ed:a2:01:81:9d:
                    40:9f:b8:19:94:ee:72:2c:35:d5:12:85:c0:ec:eb:
                    51:0a:0e:d2:43:64:e5:d7:f4:d0:04:fc:50:cb:04:
                    9c:6a:74:fd:ce:07:3f:8b:53:66:b4:df:a0:97:70:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AC:3B:23:93:ED:96:89:CF:CE:D1:D8:2A:9B:72:88:06:07:3E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce9fd2aa-c4d3-31e1-850e-a53c9cc5cc73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:44:09:ad:f0:fc:de:ec:7e:59:03:0d:08:ec:79:04:82:33:
         44:f6:13:7b:f6:6d:6d:6c:bc:cd:a2:7c:e1:20:81:a1:89:06:
         d0:a1:d6:96:b7:06:d2:21:c6:e6:ae:69:47:9b:4a:b9:59:58:
         94:5f:44:8b:19:e0:57:74:2b:8b:08:96:04:57:0b:5d:73:93:
         9d:1d:1b:ed:1b:6f:db:f3:c9:8b:6e:42:84:14:c2:37:7c:bf:
         23:e6:f0:a8:6e:58:3b:54:9d:52:6c:b9:7a:9d:2f:1f:9a:e1:
         ac:ea:e0:22:17:a6:74:21:28:11:e3:66:2d:09:da:ff:34:45:
         5e:ad:c3:c6:26:70:fb:3d:e3:45:e5:0d:82:59:bb:d0:cf:ca:
         41:46:29:c0:14:d0:d4:96:42:51:06:ef:f9:81:a4:d0:e5:e4:
         60:6e:7e:d8:78:fb:8d:5d:d8:77:d6:2e:e1:12:e5:eb:19:3f:
         3a:4b:b1:7a:f7:bb:38:62:1b:c8:56:d3:41:47:ac:25:f6:45:
         fd:e0:da:c3:b0:98:ee:e0:d3:53:40:e8:ed:5f:8a:b3:23:4f:
         49:35:6c:6b:9d:5d:4b:b6:58:09:96:74:19:1e:74:f6:31:71:
         f4:2f:9d:63:9f:07:4b:1f:0a:64:48:08:0b:6b:fb:5f:fd:db:
         65:64:56:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:06 2026 by rpki-client