Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/1f204178-d739-3ae9-8a4e-f369e30a5409.roa
File:                     1f204178-d739-3ae9-8a4e-f369e30a5409.roa (raw, json)
Hash identifier:          5jqhh2Rhy0v6sjW1gGGxDASi+Irdw6zNIQQrSLfFvMA=
Subject key identifier:   33:3E:E6:41:00:BC:12:1E:9C:20:19:1C:A2:6F:16:42:B4:0A:A5:CF
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584AB650ED32296C15E7B6A1AEE0
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/1f204178-d739-3ae9-8a4e-f369e30a5409.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        136.184.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ed:32:29:6c:15:e7:b6:a1:ae:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=b97068b2-f07e-4916-8808-71a8696de87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:4c:b2:53:80:ab:43:b8:72:0f:8b:3b:64:
                    9b:65:6c:3c:bd:19:b9:0f:3f:90:f3:9e:d9:79:cf:
                    e8:c1:df:40:ce:94:1c:29:7e:7d:a1:e7:ca:ac:a8:
                    2f:6d:9e:9f:3a:6e:c5:de:1a:d1:52:74:39:91:96:
                    34:81:39:6c:7d:b9:af:08:cd:7d:9d:00:c2:a7:3c:
                    4c:38:fe:f1:2a:dd:07:c2:98:68:14:50:16:ac:f7:
                    5b:e6:4e:16:13:a7:d9:df:3b:d3:bc:aa:0e:36:dd:
                    fb:aa:cf:e9:4d:b2:45:b4:d2:02:41:a5:9d:59:d0:
                    e0:0c:b4:6a:e1:59:de:0e:dd:72:8b:16:e7:7f:e3:
                    d4:d7:d4:b1:0e:60:da:77:df:b5:09:5f:e5:c7:05:
                    8d:bc:af:2e:db:6e:1b:ae:5b:89:8b:a8:4e:e5:0b:
                    ea:2b:80:7f:93:d4:7c:ae:5f:57:f0:12:33:0a:b6:
                    5a:07:f1:34:32:08:fc:6e:24:20:37:34:dd:ab:66:
                    f9:c3:5d:44:9a:04:55:b9:b0:3c:34:8a:a4:b8:df:
                    f0:f8:3b:0d:cd:a6:a0:45:49:c1:cc:75:17:c8:ac:
                    c9:1e:7b:4a:34:d3:91:bc:41:a7:20:8f:8a:b3:91:
                    3b:3a:c1:ed:1f:f6:be:45:84:fe:c7:0e:ab:6b:68:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3E:E6:41:00:BC:12:1E:9C:20:19:1C:A2:6F:16:42:B4:0A:A5:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/1f204178-d739-3ae9-8a4e-f369e30a5409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:94:40:a2:c5:33:ff:07:ee:7b:0a:6d:cd:fa:2f:c9:d2:c3:
         12:3a:d9:da:0f:27:bf:ac:cb:1b:ce:2d:86:97:20:12:ff:f7:
         72:4b:3b:49:7d:21:f6:fa:9b:6c:bf:7b:1f:69:fe:33:62:34:
         fa:b5:96:9e:73:5d:96:a1:41:12:65:f6:30:d7:9f:80:59:2d:
         32:62:fd:73:1b:61:40:fe:2e:97:87:ca:81:19:ef:08:1f:09:
         69:58:92:96:c9:d8:78:26:04:a5:ee:b4:ba:8e:6c:63:2f:5d:
         b8:58:11:16:9b:2f:fb:8d:5e:42:9c:ca:39:02:d3:7f:94:5f:
         30:0c:5c:b7:4d:43:26:58:0a:ac:45:65:b1:5d:e1:45:74:ad:
         55:6e:4b:f0:50:48:ce:b0:e0:c3:a4:b4:82:5d:43:61:c5:cd:
         9d:bf:37:4e:24:4c:f5:9b:02:2b:fb:eb:49:6f:45:66:0c:f9:
         cd:3f:e7:b2:57:4a:f4:4d:ba:63:9e:13:c9:41:d6:0c:cf:db:
         c5:13:b7:5f:46:60:6b:2a:7a:a0:6b:52:b0:db:06:46:18:e0:
         a5:8a:fd:2e:be:db:12:c4:e3:e7:bf:17:86:c8:f8:fc:84:3e:
         c1:b5:3a:9e:eb:9c:ea:5d:9e:45:62:9f:5c:73:5d:ae:e5:e8:
         46:8a:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:17 2025 by rpki-client