Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fae386c-e301-340e-b5f0-71238d9904b2.roa
File:                     3fae386c-e301-340e-b5f0-71238d9904b2.roa (raw, json)
Hash identifier:          RyPhKRNM7cBOxXIJPJam6D95QkhbVF0VaCZP4im49ss=
Subject key identifier:   63:DD:80:10:EB:A1:1D:D7:FA:54:D7:52:48:9B:92:33:13:61:35:33
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858499294ACE3BEB04FEBCA558430
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fae386c-e301-340e-b5f0-71238d9904b2.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     209854
IP address blocks:        136.0.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:ac:e3:be:b0:4f:eb:ca:55:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=c8222058-486b-4375-b9a3-3f92763156bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:9b:07:96:c1:61:a4:52:7b:67:33:10:b7:
                    70:6b:82:70:f0:e9:df:85:6e:6f:f3:99:78:ec:06:
                    cc:fe:55:68:9a:a1:e9:67:48:6a:cf:a8:d6:95:9a:
                    8a:81:54:4c:ff:1b:a3:cd:89:03:17:db:6b:8c:51:
                    51:f4:50:8f:7a:a6:ad:ff:f1:02:ad:b7:fa:ca:06:
                    6a:b1:7a:ab:0c:16:3c:ab:da:fe:a9:1f:c2:c9:85:
                    4a:71:b9:7c:87:16:89:01:f7:1b:2b:69:00:91:6b:
                    63:11:d1:63:69:5b:73:19:02:62:9b:06:39:0c:0a:
                    52:45:6a:cc:1f:94:90:2a:24:f6:97:b1:ea:8b:6d:
                    88:aa:2e:b0:94:ae:25:83:d0:2d:64:5f:20:11:30:
                    a9:14:63:a7:cd:1a:02:dd:33:0e:ed:ea:6d:7f:8c:
                    3b:0e:38:3d:10:3f:ce:2a:53:37:ce:0c:00:a9:51:
                    53:b7:13:b8:eb:1e:ab:87:43:79:42:67:47:86:45:
                    c6:fa:9e:8c:d1:7f:35:9d:62:ad:be:60:ff:7f:85:
                    a7:19:65:d1:ec:f6:49:67:07:b6:4e:6f:1d:e6:27:
                    c9:0d:24:36:44:bd:95:bc:28:e6:36:0e:3f:31:eb:
                    8a:29:e7:7f:ee:86:77:08:d6:13:d7:a3:4d:47:9b:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DD:80:10:EB:A1:1D:D7:FA:54:D7:52:48:9B:92:33:13:61:35:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3fae386c-e301-340e-b5f0-71238d9904b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:16:f7:11:a8:26:a0:07:26:dc:2c:be:c5:f7:d4:48:88:15:
         4b:4e:85:e3:10:44:ea:3a:18:b0:ef:45:89:e1:87:1d:16:39:
         89:09:ce:57:da:85:3a:22:e6:ff:a1:7f:0f:d8:c7:64:7f:19:
         8a:69:5c:cf:5e:d6:1a:cc:e1:02:a7:7c:11:14:e9:71:7b:af:
         82:50:4d:96:33:67:88:4c:fd:a3:40:a7:c8:20:7b:b4:13:b5:
         86:2e:5f:cb:6b:94:8f:ee:1c:cb:be:83:5c:4a:b3:db:3c:d6:
         6b:e4:47:b9:59:b6:25:96:a7:d8:c9:7d:ab:a8:c6:2e:90:24:
         e8:93:c0:a7:48:05:56:f6:2d:9c:60:98:bd:43:90:51:ba:97:
         c0:7a:54:fe:81:b9:3f:c4:28:bf:26:69:2c:cf:42:c1:5d:6b:
         2a:39:73:6d:93:81:65:cb:08:b1:a4:ea:23:65:e2:5e:bf:6c:
         d9:a7:70:74:a9:c3:70:6c:4e:3b:69:58:e7:eb:01:7f:ce:81:
         00:4c:71:38:ba:3c:22:ab:07:de:45:11:9c:4c:99:2a:c3:69:
         b5:ac:1f:51:20:b2:f7:09:ce:89:69:80:dd:b4:25:1d:a3:fc:
         e2:ca:44:49:2f:4e:e9:a6:a0:b3:87:c1:21:23:39:07:7a:c3:
         87:9b:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:10:44 2025 by rpki-client