Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ed968b2-1d35-30b7-9a76-3a9ebe75364a.roa
File:                     0ed968b2-1d35-30b7-9a76-3a9ebe75364a.roa (raw, json)
Hash identifier:          OUZ0FvPrLTHVv4dQMP1KzL+NZIp33ZV3WkSv0PBviU0=
Subject key identifier:   8F:3A:E5:A1:AC:69:75:0B:BA:E4:45:FA:08:C1:42:85:28:9A:56:A1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858498E649F75246ED16BAC873E00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ed968b2-1d35-30b7-9a76-3a9ebe75364a.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     18779
IP address blocks:        136.0.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:9f:75:24:6e:d1:6b:ac:87:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=6d6b5a67-dbeb-4780-a506-1ec3a1f9bddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:28:ef:34:83:da:63:b2:bd:ab:aa:d1:c4:
                    01:37:29:f4:76:d9:d0:f0:96:c1:13:ba:fe:8b:d8:
                    db:cb:0c:16:c2:14:0c:54:8f:8e:43:31:40:ca:ed:
                    9a:9a:87:97:5b:b0:a2:ca:e2:e9:9f:6d:58:49:2e:
                    a2:29:29:f0:8e:20:ed:e3:12:b1:65:aa:a9:d8:b4:
                    79:ce:a8:d3:60:fa:8e:f7:02:97:b5:74:ac:19:41:
                    d6:e0:a3:12:16:0e:55:9c:22:80:59:2b:3a:35:72:
                    fe:aa:f3:a5:26:7d:75:54:cd:ce:b2:b2:98:e8:7a:
                    8b:f7:21:36:b2:cf:73:38:84:ed:b3:bb:11:ff:95:
                    ac:30:f0:51:82:5d:6e:b1:4b:73:ea:4b:55:f2:d9:
                    a7:4b:99:d1:75:e9:52:d0:33:3d:25:db:d2:38:c5:
                    1c:d6:18:85:e7:f6:f6:fd:2d:8c:e7:a5:26:67:af:
                    40:3e:7b:1b:16:b3:56:6a:25:d1:6f:7a:df:29:dc:
                    e3:5e:4d:63:1c:d8:e0:37:81:2e:ab:e3:43:87:ad:
                    08:27:e8:ef:ff:fe:2b:4e:0f:01:4d:a9:c9:0b:1b:
                    56:3c:2a:cb:2b:fa:44:4f:28:a0:9d:10:50:4e:10:
                    72:01:5b:9f:55:c4:2c:a9:cf:d2:ce:90:05:06:ca:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3A:E5:A1:AC:69:75:0B:BA:E4:45:FA:08:C1:42:85:28:9A:56:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ed968b2-1d35-30b7-9a76-3a9ebe75364a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:0b:af:b7:07:6b:16:10:7d:19:2a:e9:d3:d4:76:a9:c1:cd:
         4f:80:0f:b5:fb:5e:39:14:9d:ca:3d:a6:b3:fd:75:57:04:c0:
         4b:b3:e2:b3:a3:4c:3b:82:8e:2a:19:b1:4e:0b:71:06:e4:65:
         e2:9d:dd:d1:d6:78:6f:62:59:90:37:1d:89:94:4b:45:81:05:
         7d:df:7c:b3:52:24:73:7a:0b:54:9e:c8:8f:7d:f5:8a:c9:4d:
         0f:0e:b6:9f:6f:6f:99:0b:2e:a1:6d:83:72:64:38:3f:1d:82:
         f2:be:23:4c:71:77:c6:ee:8c:2b:5e:ab:2c:69:0c:52:ef:01:
         1e:fb:47:ad:17:20:88:96:61:c1:eb:d7:56:0e:81:9f:07:e9:
         d9:6f:e6:0d:3a:9e:e9:3a:e5:87:81:91:d7:15:46:f5:14:1d:
         52:9e:c0:80:aa:13:4f:40:9f:0d:94:ae:30:2e:43:6b:56:db:
         b4:a0:2b:d5:ea:c8:e8:a1:dd:e0:f6:e8:cd:5f:73:6a:87:be:
         0e:7f:31:16:a6:a0:b2:86:71:90:78:f5:5c:8d:5d:f1:65:ab:
         22:cc:29:fc:bd:46:cb:60:40:bd:93:05:bf:dc:e1:50:62:9b:
         0f:2f:a4:a2:f9:4b:6a:74:62:42:7e:12:9d:b5:a1:6d:d2:55:
         a3:4e:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:43:43 2025 by rpki-client