Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dc8c816f-cb03-3b1b-830c-ce990ced9970.roa
File:                     dc8c816f-cb03-3b1b-830c-ce990ced9970.roa (raw, json)
Hash identifier:          vmJL9o1CvfaX996hxJKBTNhrNsBnPVjFLfj1GWF6Dv4=
Subject key identifier:   48:77:52:F4:A0:42:54:74:F5:75:B8:99:8B:41:68:BF:4A:4F:BF:51
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DA3E569EB86D086038EE17A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dc8c816f-cb03-3b1b-830c-ce990ced9970.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     214150
IP address blocks:        136.0.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:69:eb:86:d0:86:03:8e:e1:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=7d9c3a5e-4473-4a0e-8f17-2b440dac069a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d4:cb:5f:0a:2c:c4:e6:40:65:dc:fb:e2:49:
                    af:30:4f:f8:54:7b:42:11:4e:44:61:56:9b:8e:ca:
                    37:7b:17:ea:99:0a:58:b1:8a:f7:db:be:35:e3:de:
                    64:17:92:48:d7:85:93:32:39:db:70:cd:a6:52:1f:
                    84:b0:a4:f2:ec:a3:f3:5c:4a:95:32:b0:73:10:38:
                    15:7c:73:83:c5:9c:e3:64:cb:87:6a:c1:83:2d:bc:
                    12:96:4d:0c:b2:86:09:b7:3a:ac:53:25:a4:39:61:
                    2c:16:85:33:31:89:75:84:30:06:8a:1d:e6:f5:0a:
                    f2:fa:52:f2:8e:34:4f:76:be:bb:41:46:22:28:e8:
                    be:9d:41:55:36:02:fa:28:55:f3:47:08:86:5c:6f:
                    3f:53:d9:e7:08:07:94:73:6f:6d:7a:cc:08:01:82:
                    87:23:ab:08:7f:f2:f7:13:41:91:7e:eb:29:27:ea:
                    d6:64:aa:e9:5c:db:e4:ad:a8:b0:91:92:ad:4c:a3:
                    f4:b3:d2:95:9f:7b:26:27:76:a6:d2:58:7e:b7:68:
                    9e:c6:e3:61:67:2c:0c:1f:b3:d4:91:ff:f5:80:a2:
                    d9:63:9a:69:89:3a:c5:59:38:1b:e9:a3:e6:42:c4:
                    fe:f1:b4:2b:fc:ab:8b:c5:e5:56:a9:df:3c:e2:0d:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:77:52:F4:A0:42:54:74:F5:75:B8:99:8B:41:68:BF:4A:4F:BF:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dc8c816f-cb03-3b1b-830c-ce990ced9970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a7:ef:75:dc:b6:13:7d:6e:96:44:24:58:54:86:f7:28:b0:
         af:d8:26:59:1b:cf:63:82:95:e7:5b:32:89:8e:41:56:91:96:
         4c:7d:2e:2b:8e:f5:a6:d9:8d:8b:9d:60:b2:e9:89:95:40:a8:
         59:c6:13:85:9f:1a:49:85:30:98:59:2e:3c:8c:22:06:f4:e4:
         15:dd:98:a2:bf:8b:05:29:43:bd:71:5e:80:d8:12:cb:cb:eb:
         55:36:c4:6f:2b:94:b2:81:25:75:a4:5a:d9:6b:4d:b4:e1:c2:
         de:7a:f3:db:60:9d:ce:04:70:7c:ed:ed:6f:f8:18:83:a7:47:
         0b:3d:96:e9:04:c0:27:16:12:d5:61:b5:58:e6:3e:93:7b:7f:
         49:2d:65:74:c9:4b:46:a8:ef:49:ce:9e:dc:90:db:2c:e9:af:
         2b:bf:ce:64:6a:30:71:ea:ce:17:1a:bd:dd:ee:e4:e6:2c:65:
         71:38:6e:31:f7:88:de:5f:98:5b:59:5b:60:d5:08:9c:b8:c9:
         14:c1:bd:3c:cd:bc:7f:61:17:da:99:86:95:2a:76:26:27:7e:
         d0:c9:0f:92:ce:9b:ad:9d:01:8e:47:a1:f1:ce:f0:72:fb:15:
         0f:2b:9a:ef:7b:39:21:dc:15:13:30:e6:d3:69:6e:73:35:b0:
         8e:8b:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:57 2026 by rpki-client