Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29c783c1-e3f0-3ae9-951d-6f66ce262500.roa
File:                     29c783c1-e3f0-3ae9-951d-6f66ce262500.roa (raw, json)
Hash identifier:          /XO3iYR3FfveMvS14eTh4OOIMxH4DJJPfgKp7UKztEg=
Subject key identifier:   F5:23:CF:26:72:84:3A:E0:A9:B0:CE:03:97:6F:B7:11:8C:B1:EF:34
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B987239BF9ACF6C86D9140480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29c783c1-e3f0-3ae9-951d-6f66ce262500.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     7385
IP address blocks:        136.0.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:39:bf:9a:cf:6c:86:d9:14:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=73930e3e-0f34-4263-b422-46104814a14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:cb:52:82:ec:ea:6f:ae:0e:78:eb:a7:81:
                    ed:97:74:8f:33:8a:c6:4e:91:e0:4c:58:37:1c:5f:
                    45:55:24:a7:76:7d:fa:7a:d9:00:f0:cc:6e:21:04:
                    48:7f:31:59:67:62:68:e7:6d:0a:8e:da:18:31:6f:
                    fa:87:f9:92:44:75:6e:61:31:5e:e9:1f:5d:f5:9c:
                    88:65:08:54:d0:57:70:a8:77:1b:11:5a:40:b6:c0:
                    3d:43:f8:d5:da:64:a6:96:2c:2e:2e:5f:ee:e0:cd:
                    f2:d5:77:7f:e5:ab:63:c4:8a:22:e6:e7:90:b9:df:
                    fc:56:09:9d:aa:06:f8:1c:b2:4d:05:af:38:8f:47:
                    e3:2d:5b:ae:77:33:5e:fa:dc:a9:98:f4:b4:6c:bb:
                    31:94:a4:88:19:e4:f7:58:60:8d:12:c4:78:22:4d:
                    96:44:f7:0f:5a:fd:11:59:c3:a1:66:3f:50:8e:8a:
                    98:31:4c:33:01:d2:15:fd:6a:e5:c6:e3:be:87:6f:
                    14:2d:1c:c2:5e:c6:0f:4d:4d:43:fa:a7:5d:91:83:
                    c0:b1:cd:a5:67:bd:a5:9f:a0:f8:06:ad:aa:e6:2d:
                    64:1a:37:c4:44:7f:99:62:21:b1:ca:0b:0e:51:84:
                    71:1f:db:30:15:8b:87:6c:79:48:ca:75:1e:de:71:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:23:CF:26:72:84:3A:E0:A9:B0:CE:03:97:6F:B7:11:8C:B1:EF:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29c783c1-e3f0-3ae9-951d-6f66ce262500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:70:ab:fc:bb:f9:2c:49:67:c9:92:2d:6a:8b:5e:21:c9:
         42:ae:b1:8f:57:d9:3d:83:85:81:39:d6:20:d8:35:da:2c:75:
         d6:f6:fc:f4:85:d5:20:7d:dd:de:15:6e:fe:49:c4:00:ee:50:
         e2:38:73:50:c6:be:32:ff:3b:b0:d0:68:f9:b6:d9:03:4d:7b:
         0c:41:b9:b8:e3:2f:f1:b0:6f:e7:77:c4:ac:b6:6a:d6:97:d9:
         ef:56:38:08:17:36:48:b5:29:df:5f:26:e5:c7:49:19:e0:cb:
         41:2b:3a:32:66:f4:25:35:37:07:44:b9:b9:c1:4d:32:72:d5:
         06:62:38:ca:1f:9d:5c:4c:56:3d:7a:53:bb:6c:db:b5:a1:b0:
         92:c8:03:54:5c:b6:b1:b5:e5:49:d6:4c:d6:f5:4a:b0:9b:d6:
         72:bb:38:c9:0f:f7:c6:33:a6:e1:35:7d:7a:06:48:12:c4:1e:
         45:9a:04:25:bd:18:1b:c2:35:e4:95:6c:cc:62:74:8a:c6:ac:
         70:14:49:48:70:5a:d2:80:f7:4f:a7:a5:3e:bf:69:90:76:10:
         c8:a7:0d:62:d8:d1:e5:02:c4:26:28:15:44:ac:a6:f3:ce:79:
         67:d1:b8:16:e8:68:25:44:cc:3a:8d:82:1d:90:ac:f8:7a:f9:
         51:ad:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:13:18 2025 by rpki-client