Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0d0695f-744b-383e-af40-aaa149e0105b.roa
File:                     f0d0695f-744b-383e-af40-aaa149e0105b.roa (raw, json)
Hash identifier:          4UeP8wGWWcErHX3Jys4q/tP4rUYzNeamdowJASKD2NQ=
Subject key identifier:   58:55:06:43:0A:99:44:89:CA:4A:6F:BC:CA:48:E7:E6:F4:4E:53:70
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F3A17D74E5D0BFCDC6E014250
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0d0695f-744b-383e-af40-aaa149e0105b.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     149440
IP address blocks:        136.0.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d7:4e:5d:0b:fc:dc:6e:01:42:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=7d3cae26-1cfc-47fd-94e9-6518a87b199f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:76:90:94:6c:d0:8e:aa:4e:50:51:6b:3a:
                    59:bc:7d:48:09:1a:c6:14:09:92:7d:76:01:b4:55:
                    9c:66:db:f5:03:4a:dc:92:8c:51:57:4e:71:8b:58:
                    8e:45:dc:4a:4e:9c:09:0d:d3:3c:e6:f4:d1:c5:8f:
                    3f:94:85:b0:f6:dc:e5:d2:ec:41:b2:f2:21:57:dc:
                    41:80:ea:fc:31:27:df:d4:06:a2:3c:8d:7a:94:38:
                    37:81:88:4d:61:fc:5c:4e:95:9f:db:84:8c:c9:5b:
                    2c:2e:a4:07:9b:85:92:d1:84:ee:e8:70:de:bd:e6:
                    21:06:ac:e6:7d:b7:bd:00:91:c6:2e:97:a0:ce:02:
                    47:1b:8f:e7:ac:23:0b:4f:f1:d0:f1:c3:74:9c:03:
                    80:23:f4:19:21:22:d0:e4:2f:8a:b2:44:a5:20:34:
                    7c:95:53:70:b5:5b:5c:f4:aa:af:12:e0:a0:ec:af:
                    e0:94:7c:1e:3c:cf:cc:ba:1a:fd:f1:4a:67:ec:93:
                    29:fa:ea:b2:bd:89:44:34:ec:bc:96:df:b9:78:ad:
                    26:22:26:1e:e9:85:b7:b3:65:e0:33:eb:e4:a2:c8:
                    77:ee:52:eb:90:3b:87:56:11:72:22:53:2e:3e:f6:
                    83:01:86:4e:43:bb:aa:bd:cc:d6:39:a4:de:85:00:
                    98:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:55:06:43:0A:99:44:89:CA:4A:6F:BC:CA:48:E7:E6:F4:4E:53:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0d0695f-744b-383e-af40-aaa149e0105b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:54:de:8f:38:8b:25:83:7f:87:d2:5c:98:0d:33:c2:35:19:
         0e:4a:7f:e9:dc:70:51:4e:01:f6:8c:e0:34:70:b8:20:19:0f:
         45:e5:08:25:ed:48:65:95:82:1f:18:83:dc:7e:03:a0:a5:fc:
         f9:a2:e0:04:00:c6:f0:29:0d:de:69:4f:6d:1a:8a:94:d3:8b:
         71:30:5a:64:8f:78:07:aa:76:1c:d5:46:79:06:80:39:22:67:
         be:e5:31:0b:82:59:50:4b:0f:8b:45:73:ac:5e:9f:d0:0a:63:
         8b:8c:6f:34:f8:23:9f:98:1f:81:01:50:51:e1:6e:7c:8a:05:
         9c:96:e7:e8:62:c1:de:84:61:0a:68:e7:05:5a:72:e2:bc:7b:
         b1:9a:72:2d:b2:3a:1c:1e:71:db:58:98:5b:b9:17:d2:0f:8b:
         a8:c7:7c:07:67:2c:6d:6f:31:af:71:88:70:2e:f6:a8:32:d8:
         a7:2d:f5:dd:f0:14:3e:50:33:fe:4d:bc:d9:bb:76:ae:53:7c:
         59:42:77:33:6f:d1:e7:84:48:e3:0c:44:a7:39:ff:a7:da:c5:
         d2:df:e2:65:a0:b0:ff:b6:19:df:0f:7c:2a:df:47:26:74:62:
         26:66:dc:5f:40:c7:6b:32:4d:cb:a9:b1:95:32:9f:7c:46:79:
         35:e5:80:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:19 2026 by rpki-client