Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3551975d-9458-31c1-bc23-cf2bd9f54f9f.roa
File:                     3551975d-9458-31c1-bc23-cf2bd9f54f9f.roa (raw, json)
Hash identifier:          3hvZeyCBWk5QovJ1d47IHf8FDxYOGwK7kn+wGgXuIpA=
Subject key identifier:   3D:62:66:6C:57:59:4D:C4:28:3B:A8:1F:BC:98:C1:21:B0:E9:72:F0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB7B634C214CA69AC1FAB1080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3551975d-9458-31c1-bc23-cf2bd9f54f9f.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     7385
IP address blocks:        136.0.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:34:c2:14:ca:69:ac:1f:ab:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=0afb6d74-af94-4f59-b1ec-3f32b57ec561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:69:f9:97:71:3e:95:87:53:1b:1a:55:54:
                    fa:ec:d4:12:bc:9a:c9:36:85:c5:ff:7c:1d:58:2f:
                    96:61:4f:81:72:e3:fb:e5:a2:4c:ae:31:db:50:dd:
                    e9:51:83:04:8f:a0:e6:23:c6:a7:82:b5:5f:ab:7d:
                    9a:aa:8d:da:95:c8:f8:99:d0:a2:b6:cc:48:a3:6c:
                    47:7e:8c:7e:15:c8:76:6a:e7:b0:52:a9:89:8d:6a:
                    1d:3a:31:12:55:68:84:85:da:53:b8:bc:8e:21:29:
                    71:aa:36:bf:41:27:80:2e:0e:b6:37:ca:f5:40:c5:
                    4e:91:da:76:5c:5c:68:fe:73:f5:93:be:6f:1b:63:
                    bb:92:9c:06:99:fc:f9:d7:e6:ad:2e:8b:c6:ef:0c:
                    0b:29:c5:75:e1:72:bd:d9:13:8e:15:ff:cb:28:c5:
                    4e:52:30:ca:e4:71:0d:c1:8a:84:fb:3b:24:d7:8e:
                    18:82:5f:38:7e:ab:b0:3f:e3:dc:4c:79:f1:12:6f:
                    f9:f8:ef:3e:0b:23:62:60:d5:02:21:a3:d1:64:95:
                    d1:ea:94:d9:f9:53:fa:ec:d9:1f:cf:c9:69:33:ca:
                    22:82:b7:92:54:ea:0e:fd:5c:0d:66:58:31:72:e6:
                    1f:2a:8e:6c:aa:b5:76:e5:fd:3c:a7:75:33:9a:d8:
                    7a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:62:66:6C:57:59:4D:C4:28:3B:A8:1F:BC:98:C1:21:B0:E9:72:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3551975d-9458-31c1-bc23-cf2bd9f54f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:ac:73:4a:84:39:e4:45:17:f2:91:44:51:71:e1:28:5b:
         e6:35:81:ed:4b:47:07:48:b7:61:48:db:b7:b9:a2:81:35:88:
         c3:99:cc:5c:37:9f:50:be:0b:9d:42:a2:0a:90:43:04:fe:8b:
         61:e9:72:bc:f6:69:20:48:9b:12:ec:95:33:8d:45:62:c4:a5:
         66:15:d4:3c:64:84:9a:0e:cc:cb:f8:88:32:aa:59:e5:f7:56:
         51:3c:1a:99:d8:45:89:e9:00:1c:72:55:e4:a2:0e:eb:de:c8:
         98:5a:10:b0:40:57:aa:89:ed:99:0d:41:d4:ad:06:e1:46:89:
         4d:4f:99:95:d7:e5:07:d2:8b:24:2f:77:2d:5c:68:6c:64:b5:
         1d:b1:88:29:50:4e:9e:99:95:f7:c2:3a:ae:7e:b3:7d:3b:57:
         b7:ad:d3:1c:a1:9d:31:f5:50:78:c2:c8:f0:ba:30:10:37:bf:
         41:3c:b7:31:9b:5a:45:b6:2e:0d:88:b7:6a:2b:43:de:d4:11:
         94:04:29:dc:ad:dd:48:f2:7d:ba:f2:b0:5e:cc:a8:3d:78:83:
         f0:79:f0:4b:c5:c9:44:2d:67:90:3f:91:3b:af:2e:6a:86:48:
         5e:70:cf:c8:3e:fc:e2:29:22:cb:e9:54:c2:a0:74:66:f6:ae:
         89:0b:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:45:59 2025 by rpki-client