Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/08419fd9-5e39-3606-954b-e8809e20f954.roa
File:                     08419fd9-5e39-3606-954b-e8809e20f954.roa (raw, json)
Hash identifier:          HQ3dPVqXMwgl2P+jvUx46niKaTtuYsG1SnJ01OZa/Z8=
Subject key identifier:   BA:38:44:24:BB:36:CD:AD:FA:88:E7:F4:92:7B:C4:0F:81:DB:4D:8A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584996C4B58E2542CC4BE658B180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/08419fd9-5e39-3606-954b-e8809e20f954.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     6939
IP address blocks:        136.0.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b5:8e:25:42:cc:4b:e6:58:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=4ca92b7b-c46a-4ee9-94d4-73b0f5b0ebcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c1:cd:33:b8:78:e8:83:99:1b:d7:45:a7:33:
                    35:d9:fc:2f:ba:3f:eb:e0:5b:a7:6a:92:c4:6a:5a:
                    b6:0d:c2:d1:47:e5:d1:1f:f1:ff:5f:dc:e9:32:63:
                    e6:a4:67:51:77:43:1b:c0:88:7e:02:51:0a:eb:ee:
                    9f:61:92:7b:61:79:c8:f0:64:05:63:cb:b6:92:4d:
                    61:cf:db:02:5f:bb:0d:b3:17:06:11:b0:f7:59:df:
                    0a:e2:4f:d4:77:c4:07:a1:f7:90:00:ec:ce:b4:f2:
                    56:68:f6:43:0e:98:ae:6a:8c:13:70:32:06:c9:03:
                    45:7d:e0:eb:45:2f:4d:e3:f3:57:04:71:7d:90:75:
                    7e:5b:ee:a7:6f:97:5e:8d:b7:81:f4:e6:24:51:3c:
                    38:68:e0:1b:d0:a4:7d:c6:37:0d:13:9a:33:77:87:
                    3a:34:90:04:08:9a:01:ef:71:13:2b:35:ab:40:b1:
                    72:18:37:31:0d:4b:fd:47:55:3f:c3:7d:bf:07:e8:
                    aa:d4:9e:f5:62:1d:66:d5:e7:94:94:13:6c:73:38:
                    b6:95:03:8a:32:26:bc:61:a8:cc:5a:71:a2:58:21:
                    31:7b:0a:80:17:9a:22:bf:7a:46:05:a6:4a:23:f0:
                    bf:c9:c5:ce:c1:94:1e:7a:82:33:57:ae:f5:73:b8:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:38:44:24:BB:36:CD:AD:FA:88:E7:F4:92:7B:C4:0F:81:DB:4D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/08419fd9-5e39-3606-954b-e8809e20f954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ef:5d:27:d6:6a:4a:fc:97:66:9e:88:f5:f2:e3:f8:11:71:
         0c:26:00:b3:3e:b3:49:51:70:44:25:0b:d3:af:a0:0a:64:22:
         15:9a:34:a0:56:b7:bd:77:1a:e1:1b:2e:78:d4:58:38:e9:52:
         19:a5:df:5e:70:62:83:a0:0b:ee:78:38:2f:85:63:fc:2a:e4:
         4f:5a:19:e6:20:ec:b2:2e:fe:ee:da:a2:d0:ab:20:5b:d9:0e:
         57:87:37:01:ad:5f:92:91:cf:c9:9c:c2:11:a7:2b:ba:b6:cc:
         6b:33:8a:bc:ee:52:77:4c:41:35:29:28:26:be:73:37:2d:4a:
         36:8f:53:7d:d3:4c:6d:b4:48:e3:83:8d:36:86:e0:4c:1c:0a:
         1d:f1:3f:ce:a7:11:e9:32:ea:48:36:72:8b:1a:72:c2:4a:10:
         de:c2:76:4e:de:65:f1:95:c1:62:02:81:a1:83:13:06:89:ae:
         2e:11:b9:e7:8a:13:a7:c0:2c:d0:63:43:19:d9:38:12:1d:49:
         6c:06:04:48:a6:83:3a:fb:3b:a7:49:65:c4:ac:57:c1:54:69:
         ac:50:30:aa:25:09:e6:41:b4:4f:5d:40:c3:86:31:fc:24:15:
         8a:10:6b:a6:be:c5:da:a6:de:63:0e:be:dd:a2:88:08:ef:53:
         0a:db:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:10 2025 by rpki-client