Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b0617c6-598a-3933-824f-cc79bd89784c.roa
File:                     2b0617c6-598a-3933-824f-cc79bd89784c.roa (raw, json)
Hash identifier:          vVA6FOxbwhmMMXCSBGM17WZczwZcO/j5Tx2E+NAjYZc=
Subject key identifier:   92:49:D9:7F:7F:16:1E:CC:52:FE:4B:67:86:11:60:FC:6F:86:AA:91
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A2B3E090869C00511D7981180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b0617c6-598a-3933-824f-cc79bd89784c.roa
Signing time:             Thu 12 Jun 2025 17:25:31 +0000
ROA not before:           Thu 12 Jun 2025 17:25:31 +0000
ROA not after:            Wed 10 Sep 2025 17:25:31 +0000
asID:                     401152
IP address blocks:        136.0.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2b:3e:09:08:69:c0:05:11:d7:98:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 12 17:25:31 2025 GMT
            Not After : Sep 10 17:25:31 2025 GMT
        Subject: CN=e1902556-e111-490d-9be8-12a9910c2583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:2d:85:5f:6d:2d:b1:db:17:f6:12:40:fa:
                    1c:0b:ea:09:f9:f6:b6:35:cf:3d:8b:9f:55:70:6e:
                    35:cc:02:26:ae:37:34:47:e1:08:16:d0:b4:4e:48:
                    9f:b8:34:8e:88:07:f6:d0:df:71:bb:39:04:d5:3d:
                    34:8e:79:32:72:3e:d5:5b:31:68:c3:20:11:7f:e4:
                    aa:c5:27:e2:a8:c4:8b:f8:2a:4f:03:d4:8c:f9:b6:
                    8f:9a:bf:9b:a0:17:b5:ea:60:6f:37:ee:9d:6e:22:
                    eb:3c:38:11:5b:7a:1a:7b:a1:6c:ee:2a:40:ab:13:
                    fe:7b:60:47:b7:fb:ca:2b:73:0a:fc:94:fc:e9:b6:
                    98:bc:8c:ad:7b:8d:43:3c:52:60:db:f4:f1:e2:76:
                    1e:42:d1:92:39:63:54:a4:4d:ff:a3:0a:3c:bd:d6:
                    72:6b:e0:cd:e6:87:57:be:a1:8a:a9:56:cf:85:52:
                    87:9a:c3:34:d9:f9:81:4b:49:5f:c0:5a:81:73:b5:
                    80:d6:35:2c:5a:28:01:4d:5e:af:db:3b:51:1f:a8:
                    a8:17:9d:33:1b:6d:f7:d3:96:5a:1d:04:ad:55:b3:
                    e7:27:cd:2c:2e:3f:69:30:4f:e9:dd:6d:15:6c:ff:
                    12:09:a0:f1:b8:b2:17:cb:b3:d0:9e:75:f3:bf:94:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:49:D9:7F:7F:16:1E:CC:52:FE:4B:67:86:11:60:FC:6F:86:AA:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b0617c6-598a-3933-824f-cc79bd89784c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:10:34:04:9a:2c:fd:6e:b0:75:1a:b3:9f:43:a9:8d:78:c5:
         17:2a:1e:3f:85:77:ca:82:db:cf:65:7a:61:7f:6a:91:a3:0c:
         51:ba:b1:f3:53:2d:87:2e:58:e2:4d:4c:25:cf:63:96:3b:26:
         1f:40:fb:12:f1:0b:50:23:6d:ce:52:08:a0:04:38:4f:a4:bb:
         88:e5:98:98:08:b9:4f:7b:79:ba:ad:0f:1c:23:28:eb:cb:e2:
         b4:1c:e1:fd:9b:95:a3:1d:2d:0b:62:41:dc:41:8e:18:f1:21:
         a7:14:b7:a0:c6:13:ed:14:fb:4b:39:21:df:c9:92:e6:79:55:
         7a:42:a5:a3:0f:d0:8a:18:4f:50:8b:5b:13:3a:69:46:d2:17:
         1e:cc:b9:50:5c:4d:c6:d0:c0:bf:9b:3a:ea:93:91:ed:23:15:
         d8:36:0a:28:b4:68:9a:cd:df:c8:65:69:67:f9:e9:d6:60:12:
         fc:f8:99:15:b8:c9:c0:c5:c9:11:29:af:81:40:1a:d4:1d:33:
         12:dd:87:6b:1c:a0:71:e3:8e:c5:8d:23:c1:c1:d5:2f:3f:63:
         a5:21:f7:3e:f5:48:60:89:7c:c9:06:a5:67:81:33:5f:81:b4:
         f7:9f:d1:13:b1:49:05:87:9f:f7:da:a9:4a:39:b8:89:48:c1:
         25:25:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:05:40 2025 by rpki-client