Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f382ca97-6f48-3bd2-bde5-77813507a2e5.roa
File:                     f382ca97-6f48-3bd2-bde5-77813507a2e5.roa (raw, json)
Hash identifier:          saD+4XeHEIchjq80n1xzLP4C4L9i8k9Fq/a3FzggCtc=
Subject key identifier:   5E:47:FA:BC:9B:5D:34:D9:94:4C:AA:88:D6:A9:A3:EC:0A:B5:2A:4E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D143D51CD1D56216C458396C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f382ca97-6f48-3bd2-bde5-77813507a2e5.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     209854
IP address blocks:        136.0.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:51:cd:1d:56:21:6c:45:83:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=479dd0d4-4eb4-4651-ac05-756888977814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:d0:77:6d:02:23:08:c6:bf:7a:5e:ac:0f:
                    1a:61:58:9d:8b:1c:c3:a4:a1:52:de:9a:93:8c:82:
                    e9:e1:93:9d:a0:75:fd:20:9b:ae:45:1e:c0:3b:ae:
                    d0:80:07:5b:cd:b2:12:07:e1:01:cb:cc:c5:f1:aa:
                    5d:a4:ca:94:6e:b7:ba:bc:b5:e8:74:1e:01:5a:a4:
                    1b:03:ce:53:bb:55:6b:7b:eb:6d:80:bc:7b:1d:c2:
                    9f:40:35:f5:06:69:f6:5f:42:f6:6b:51:8c:22:4e:
                    e5:b9:fa:25:22:37:ad:61:b7:8f:1f:6b:02:7e:e0:
                    e7:ab:d6:e4:38:f6:18:0d:37:32:6d:95:59:6e:a5:
                    c3:2e:22:18:c3:be:0d:f0:76:6f:f9:24:26:b4:ae:
                    a9:7a:aa:22:fa:89:a0:62:5f:b6:1d:1b:83:c0:f0:
                    6b:6f:f7:46:cf:af:54:2a:e1:da:67:d4:5f:4c:f3:
                    a3:9c:11:6a:e3:84:32:8c:67:8d:fd:9c:ea:8a:4d:
                    cf:f0:89:75:99:9b:20:d6:81:fe:88:a4:d5:18:0f:
                    7c:e4:c0:c9:95:aa:a1:82:98:0e:a0:5e:14:f0:34:
                    39:36:97:bf:81:20:05:60:bd:bd:d0:7f:4c:00:53:
                    c1:8a:db:c9:2f:04:7f:9d:01:be:9a:d1:61:ce:d8:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:47:FA:BC:9B:5D:34:D9:94:4C:AA:88:D6:A9:A3:EC:0A:B5:2A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f382ca97-6f48-3bd2-bde5-77813507a2e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:67:17:42:71:a9:82:db:0e:b8:c6:da:12:e2:86:1d:40:e8:
         e6:ee:7d:e2:3f:99:63:39:8a:05:02:f3:60:2b:87:b6:2b:32:
         bb:cc:22:d8:81:20:16:06:d5:8b:90:4c:9c:08:76:04:fa:6a:
         97:3d:93:4e:15:16:d7:9b:1a:e6:0e:9f:38:11:19:12:8a:f8:
         a6:ad:42:e0:28:3b:b6:fe:f7:3c:12:31:54:f3:d7:f9:c5:1a:
         be:47:4e:a5:b6:98:8d:d3:d4:10:46:d0:3d:d5:17:09:17:60:
         de:54:ef:a4:dc:3b:57:94:a5:47:6f:99:cb:2e:e0:fe:ff:82:
         f6:61:9b:96:f8:35:f5:b7:e3:c8:23:bc:e0:23:43:2c:39:28:
         1c:17:3a:81:5a:7a:e7:5e:2c:48:f0:f2:58:a4:1e:bc:03:46:
         50:77:45:cd:5a:f4:1e:d3:c0:64:57:4f:18:a4:69:d5:51:1d:
         d0:b0:b6:48:ae:4e:7b:08:72:81:c3:25:b3:46:3c:43:6c:4c:
         a6:9f:9b:f7:a0:28:2e:fb:05:a2:c6:8f:fd:b4:ba:5f:e8:b3:
         64:13:d0:45:c1:e0:45:96:a3:76:3a:b2:84:b6:7d:98:dd:e9:
         cd:df:38:6d:f0:a1:04:e6:af:61:b6:63:6a:29:69:e3:52:a1:
         0b:f0:fb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:29 2026 by rpki-client