Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/461a8d2c-d072-3009-9eb9-f170fa17b3fa.roa
File:                     461a8d2c-d072-3009-9eb9-f170fa17b3fa.roa (raw, json)
Hash identifier:          gNACG+c6z7MI+O3wUqqJ48LoHGo0gibH+E3y8WqLh+g=
Subject key identifier:   CA:01:7C:19:8B:73:76:54:EA:09:62:E3:D5:8B:B3:37:EF:BE:6B:45
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584996C4B5153FF9F5F8AD87CF00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/461a8d2c-d072-3009-9eb9-f170fa17b3fa.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     3561
IP address blocks:        136.0.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b5:15:3f:f9:f5:f8:ad:87:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=9b0dc2c5-1997-4030-a815-e98ecc3c0a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:34:cc:15:c6:ec:2d:4f:02:dc:04:68:ee:
                    be:47:de:4f:ca:cd:a4:21:63:12:ca:2e:2f:88:2b:
                    d1:29:36:26:b2:62:e1:fc:e8:01:80:72:f8:25:e4:
                    8f:0c:62:16:5f:32:b9:71:bc:74:4a:13:db:d5:48:
                    fe:86:be:0f:5e:10:4f:e9:ce:f1:33:df:42:28:b9:
                    92:88:e9:fb:13:a3:e3:a8:61:44:95:5b:dd:e2:ca:
                    c8:35:4c:70:54:74:be:48:b1:aa:01:7c:1d:ea:27:
                    3b:cc:ed:3d:35:47:2c:4a:96:d1:75:d8:d7:e4:6e:
                    39:ab:b1:a4:47:dc:45:e5:98:4b:79:4a:ef:c0:14:
                    c3:d8:1b:7a:12:b4:75:1b:f9:7b:ed:65:f0:9a:06:
                    87:80:a3:25:bb:ba:d2:fd:25:8f:50:c7:8e:a3:dc:
                    de:99:88:c5:2f:44:d7:6a:5d:03:2c:97:41:4a:7f:
                    b6:97:b6:65:6c:f3:7c:3b:ac:be:e5:fc:01:99:63:
                    d6:4c:e5:27:e9:1b:ea:47:5e:43:b7:1f:6d:f4:2f:
                    33:55:42:e6:c1:b8:5f:33:27:de:99:6f:1b:27:a7:
                    d7:f0:ec:91:aa:23:4a:1b:64:ec:5e:df:c6:9b:10:
                    02:9c:f3:2e:50:d9:0b:c1:b6:17:cf:f1:bc:05:70:
                    7a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:01:7C:19:8B:73:76:54:EA:09:62:E3:D5:8B:B3:37:EF:BE:6B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/461a8d2c-d072-3009-9eb9-f170fa17b3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d7:a8:09:76:7a:fb:bc:72:5b:75:30:fa:1c:33:6c:26:ce:
         05:e9:c1:bf:c3:07:8d:16:82:a5:18:57:0e:f5:47:7b:f5:75:
         35:fb:52:66:e1:f4:58:74:e8:c6:80:b0:df:3d:52:b8:2b:2c:
         ab:23:5f:36:01:73:62:ef:0e:e1:0f:58:0e:bb:53:f9:08:f7:
         44:a5:b2:ec:96:ed:fa:7a:80:42:a4:f8:67:a0:f7:72:14:bc:
         91:8c:68:a6:21:43:58:c0:21:34:27:fa:cc:7f:4c:42:4e:1e:
         10:84:54:d7:ba:14:ac:1c:79:f8:6e:9c:32:ad:ce:9b:55:a4:
         ba:32:4b:6b:e8:69:3d:eb:b8:70:ed:d6:ca:1b:7e:59:1c:ae:
         74:60:30:c8:dd:2e:18:e5:09:a0:a5:5a:e1:b7:ee:34:98:03:
         66:cf:86:b1:04:d7:1a:6c:d6:b6:05:04:25:84:d1:2c:72:e7:
         bd:c4:41:5e:6a:a8:d7:33:b0:4a:a6:df:57:26:7f:80:80:6f:
         6b:6e:11:e7:f4:cc:1c:69:99:ab:ac:6d:61:44:fc:23:5a:5b:
         8a:99:0e:f4:5a:67:cd:12:00:5e:fe:8c:69:8c:77:26:03:e1:
         44:f6:88:53:7f:09:d6:40:d0:c6:9f:f9:77:77:af:ea:31:9f:
         07:1b:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:16:59 2025 by rpki-client