Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b713ab3-05b2-36dd-bd01-91f964ac83cf.roa
File:                     2b713ab3-05b2-36dd-bd01-91f964ac83cf.roa (raw, json)
Hash identifier:          2OwpCdiKoxfMypeLWXi+O0RWRqicCXeSuJ+9MRMtWS4=
Subject key identifier:   38:9D:11:B6:E4:EE:C9:2D:37:D7:D2:C8:47:3E:C1:FD:3E:60:27:3B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A331AFD92D103D1AD39541800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b713ab3-05b2-36dd-bd01-91f964ac83cf.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     15083
IP address blocks:        198.20.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:fd:92:d1:03:d1:ad:39:54:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=01cee96d-fbb3-47fd-8ffd-5a3eb5114595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:b9:b6:c7:5c:9f:41:30:ca:f5:a2:dc:59:
                    f9:49:49:2f:c8:8b:1e:14:b5:d0:4f:3d:59:1a:90:
                    02:49:9f:ff:cd:9c:33:e7:89:dc:2c:24:79:6d:b7:
                    a7:71:ed:e9:d2:5b:21:05:43:1e:c8:d9:72:3d:97:
                    1d:ac:03:43:52:c8:29:87:d2:dc:a8:42:01:3a:65:
                    59:bd:d3:04:09:46:70:9e:d3:7e:1d:5e:2f:73:80:
                    db:4f:a1:8a:68:9b:04:99:88:14:e8:d0:67:8b:26:
                    ad:06:ba:cf:be:ba:84:2c:d1:86:71:9c:a3:73:0f:
                    6c:b8:cf:4b:ca:17:d7:42:a9:68:9e:31:6c:3d:fd:
                    b2:db:44:3c:09:2a:c8:db:76:e5:be:ef:c0:8f:4f:
                    3d:84:60:7b:92:20:1f:5a:a6:d5:47:3a:66:f3:08:
                    6a:76:79:89:a9:75:92:e1:cd:17:eb:54:71:02:c2:
                    68:42:08:12:d2:47:40:36:8a:41:98:3c:a6:ba:02:
                    51:4b:45:5a:89:54:9d:36:c2:d7:14:7d:df:9d:34:
                    28:da:79:7d:db:fc:f5:e3:d2:c3:95:60:70:11:85:
                    29:70:09:e1:17:e7:8e:92:9f:de:e3:6d:1f:4b:5f:
                    67:69:a7:06:d8:ed:48:9e:6a:cd:6c:d0:c3:5c:28:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9D:11:B6:E4:EE:C9:2D:37:D7:D2:C8:47:3E:C1:FD:3E:60:27:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b713ab3-05b2-36dd-bd01-91f964ac83cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b7:7c:e9:86:ca:0a:2b:66:d7:4a:51:c6:b8:2a:4f:c7:74:
         79:36:79:fc:2e:87:e2:c4:76:31:6b:95:6b:d0:6a:b3:0d:39:
         1f:17:1e:b9:6d:9a:88:7f:6e:68:5d:f2:e4:3c:1f:dd:46:e5:
         9a:31:b8:80:9d:94:06:4f:b4:17:22:4a:7c:de:72:c4:e1:0b:
         e5:2f:45:38:dc:ed:36:f5:13:7a:d9:02:17:21:07:07:80:de:
         3f:be:e6:bd:0a:57:6a:0f:81:2e:0e:21:24:e9:39:8c:0f:b0:
         6b:58:57:4d:1c:0b:9f:08:f7:24:84:e8:e8:06:31:d4:d3:a5:
         11:18:c7:6e:09:6d:9a:96:d7:21:ee:b8:da:32:ec:eb:d4:e0:
         b9:a4:95:ae:26:88:df:33:95:2d:c3:ca:a1:9d:5b:a0:52:23:
         e9:6b:ef:bc:64:4d:0c:26:8f:d7:a0:e4:cb:c8:4c:fe:b2:0a:
         13:dc:a4:36:9b:8c:3c:12:19:cd:cb:33:c9:4b:10:78:7a:3c:
         fb:3b:f9:86:bc:66:3c:9c:db:b5:b9:f2:43:1e:ba:1c:4b:61:
         84:9c:f5:eb:bf:e6:e3:d2:2a:14:b4:5d:f1:ed:dd:52:ee:0f:
         5d:1d:04:87:42:1d:e2:ce:fa:c0:5f:91:18:3c:66:84:0e:eb:
         13:9c:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:30 2025 by rpki-client