Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16596358-2ceb-376f-bd5f-45e709766f5a.roa
File:                     16596358-2ceb-376f-bd5f-45e709766f5a.roa (raw, json)
Hash identifier:          bzoGji9pAO14BelDOA5qAfBbXNaHzN9vuwWmAWXS4PU=
Subject key identifier:   0E:69:83:F9:59:7A:FD:36:8A:AB:64:C2:C9:08:5B:07:09:03:19:E7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B970D05A6B4FD842A2036EB80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16596358-2ceb-376f-bd5f-45e709766f5a.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     401152
IP address blocks:        136.0.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0d:05:a6:b4:fd:84:2a:20:36:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=02bc28f0-a96a-4737-8b84-311a25a9ed50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8d:ac:b5:20:af:e6:49:3d:6b:51:e0:40:95:
                    1e:7c:76:16:36:60:eb:3f:7e:fb:22:28:a6:b3:2a:
                    b1:55:b5:d0:d6:47:f7:18:6b:e6:fd:ad:46:d3:06:
                    67:6e:3f:e4:9c:3e:21:5c:ea:8a:b4:2e:43:a9:3f:
                    fb:ec:85:0f:7f:7f:2f:95:01:91:7e:52:83:a7:d2:
                    bb:9d:89:e9:56:c6:65:08:0b:49:6f:05:19:68:c4:
                    a2:85:ae:c1:40:a5:3f:cf:89:12:f6:7e:d2:2e:11:
                    fe:d9:85:30:76:a4:3f:82:71:b2:00:97:8c:a4:7d:
                    97:4e:78:e3:5a:0d:ae:4e:11:4f:5d:01:7e:fe:af:
                    d0:fc:a2:bb:e7:e4:1c:14:1d:dc:30:05:4e:51:5c:
                    ea:ca:09:6e:27:4c:04:61:ce:12:bb:a5:f5:e3:bd:
                    8e:11:94:52:1e:be:25:f6:47:e0:75:5f:b5:41:3f:
                    17:06:eb:e2:b5:f8:ae:4a:21:fd:88:28:c0:be:4d:
                    d4:4c:2e:cf:41:05:d8:32:c2:09:41:65:f6:a7:03:
                    3a:48:2a:a0:cf:2f:67:70:a4:7e:60:6c:bc:42:cc:
                    77:eb:69:ba:d3:85:30:5a:cc:6c:7f:bc:37:23:25:
                    f4:1d:b8:5b:04:a7:4d:02:85:1d:09:e3:f7:a2:c1:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:69:83:F9:59:7A:FD:36:8A:AB:64:C2:C9:08:5B:07:09:03:19:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16596358-2ceb-376f-bd5f-45e709766f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:65:2d:8c:15:13:3a:26:94:cc:82:76:90:27:fb:5b:8f:
         a5:9d:43:6b:20:70:c1:6c:8b:bc:59:73:ad:63:9e:10:4d:30:
         8e:0e:57:ef:42:20:e6:a4:4c:5a:8d:98:5a:5b:b9:11:5c:87:
         84:99:f2:d0:64:6f:85:de:35:0c:82:8e:3a:79:c0:e4:18:9e:
         a8:b4:c3:59:81:07:fb:83:72:81:7a:0d:41:78:8b:b1:b0:c4:
         bf:7d:d8:15:7e:7b:59:f3:27:cf:73:2a:80:86:ae:07:cf:49:
         4f:66:c0:6a:77:b8:5b:a2:94:ec:ec:b1:1b:2d:c8:c5:35:3d:
         0d:13:db:be:4d:02:5a:94:e3:fc:69:1f:59:f6:06:bf:fe:19:
         c8:cc:d7:bc:14:f1:40:3c:d3:c7:9f:c4:76:ac:65:e6:eb:17:
         09:74:e8:e1:4b:e7:b3:7a:e4:b0:18:66:a0:4b:c6:fe:b6:b2:
         57:91:9e:f9:81:62:16:97:b5:dd:7a:bc:23:c2:da:7d:45:8c:
         42:19:5d:2d:46:25:08:ae:e6:c9:0e:21:47:1e:0b:6f:62:40:
         3e:e0:42:98:a6:d3:e8:fc:3a:1a:cc:1f:d3:7c:4e:ad:8d:99:
         4c:0d:16:59:c6:ae:6a:20:c7:4f:13:e3:97:82:f1:92:84:7b:
         e5:78:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:12:46 2025 by rpki-client