Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25285223-04c1-35e5-98cb-b7f8a599cc7b.roa
File:                     25285223-04c1-35e5-98cb-b7f8a599cc7b.roa (raw, json)
Hash identifier:          Plo1CbXz8rQoX5kvRL28EvHcjSM/kNBfTHReepCRzmM=
Subject key identifier:   7D:2A:5F:5B:DC:7D:8D:C8:F0:74:4A:D9:53:12:59:5B:74:01:81:CE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A94D0E6C7908AF0E3C87F8700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25285223-04c1-35e5-98cb-b7f8a599cc7b.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        136.0.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e6:c7:90:8a:f0:e3:c8:7f:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=53967fb9-04d3-405d-8299-0418716df1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b9:b6:0d:9a:03:b8:d9:2b:ad:d3:00:c6:85:
                    a8:6e:fb:6e:f6:73:19:10:a9:99:f0:05:0c:30:11:
                    c7:08:e5:54:67:b6:94:9f:51:85:b3:51:74:98:86:
                    27:ed:b2:2e:3f:f4:f1:21:b0:ee:cd:28:f7:f5:a9:
                    99:e4:57:52:c5:dc:e0:c9:56:49:d6:ac:4c:db:9c:
                    a7:d1:f5:df:e0:de:8b:46:11:3f:f7:b2:05:25:e0:
                    bb:0b:d6:0d:eb:70:82:07:44:2b:c0:de:3a:c3:c9:
                    3e:0e:b1:4e:17:53:f4:7d:77:30:e0:e8:0b:98:10:
                    49:47:32:11:be:fb:91:80:72:99:16:46:fa:69:8b:
                    6b:7d:1c:0f:bd:69:d8:c5:c7:4e:9b:8b:7c:af:f5:
                    3f:dc:ec:58:fe:c7:e2:04:c6:f9:ea:70:f9:f8:e2:
                    c6:7e:c0:d4:b3:93:c6:3a:06:e2:01:e5:40:fc:56:
                    dd:7d:91:56:04:91:f9:f2:25:92:7c:9a:18:4e:7e:
                    dd:7f:ee:4b:40:17:2c:fb:81:b2:02:fb:b8:82:19:
                    b2:78:ff:05:74:d3:55:d0:50:98:07:80:04:10:a6:
                    c0:c5:01:2e:fa:de:70:96:a8:34:66:4a:28:7b:95:
                    26:3d:27:a8:32:c3:6f:f4:64:47:50:e0:83:63:87:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2A:5F:5B:DC:7D:8D:C8:F0:74:4A:D9:53:12:59:5B:74:01:81:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25285223-04c1-35e5-98cb-b7f8a599cc7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:26:d5:60:08:27:e6:61:09:0d:08:23:91:4f:6c:b0:d2:68:
         90:82:d9:ab:98:d8:2b:dc:55:4a:ee:ad:db:e9:e4:ae:3d:64:
         9e:3a:55:f1:ca:19:ad:70:8e:61:02:40:48:d6:49:92:54:6a:
         59:e1:bd:bb:66:23:a7:0c:db:4f:ec:4f:06:5b:15:58:12:e6:
         18:6c:02:ce:2e:25:13:3d:1f:fa:fd:ba:b4:f4:64:28:8f:cd:
         f0:c4:65:28:fc:24:b1:fe:db:fd:90:7b:ad:01:07:81:d3:fa:
         f5:d3:d9:98:ea:69:0b:4b:73:98:cb:a5:98:a0:e5:ee:84:99:
         59:44:a4:3b:5b:63:13:ca:c5:9d:e8:d5:d8:2e:0f:9e:52:d5:
         10:b0:d6:be:69:cd:de:b4:95:38:4d:ee:ba:1f:8f:05:09:96:
         ae:b3:66:2c:69:f1:83:12:d8:aa:a9:1c:5d:00:e7:f2:c9:5b:
         3e:a9:90:b9:4e:b3:b0:8a:1e:ff:14:3d:05:ca:bf:8b:a5:c3:
         b4:e6:37:a6:f3:62:25:2a:16:59:06:da:8d:9a:4e:bb:28:c0:
         c4:bd:f9:bb:06:e5:fb:37:d2:b0:18:22:6d:df:74:ed:c6:cc:
         d5:92:ce:8b:43:d6:9e:fc:fd:c4:51:50:bd:af:9b:c3:3d:97:
         20:d7:ab:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:14 2025 by rpki-client