Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4cf6e63f-4471-3104-a84e-84137a0ea1c4.roa
File:                     4cf6e63f-4471-3104-a84e-84137a0ea1c4.roa (raw, json)
Hash identifier:          C/7nlOH1RwvX8X/q46lNvd3OlZ5jK20jP3sg/6RNv1U=
Subject key identifier:   49:DE:9F:E2:B1:BC:2F:21:9E:AC:3C:68:1A:CB:EA:F7:2E:1D:B1:6A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB7B634D3F49A70F2A8F6C700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4cf6e63f-4471-3104-a84e-84137a0ea1c4.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     7385
IP address blocks:        136.0.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:34:d3:f4:9a:70:f2:a8:f6:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=4b8b8cd1-3488-4344-97ad-f7bae146942d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:c0:ea:46:11:97:df:9f:85:07:7e:38:16:
                    f6:7a:f9:5f:c4:c4:13:24:c7:00:b8:ae:aa:f2:23:
                    4c:82:84:57:46:71:97:88:cc:36:bc:35:7c:cb:88:
                    65:bc:6f:a3:b1:23:c1:c0:4d:83:6c:d6:fb:d6:af:
                    a8:bf:ec:4c:62:54:eb:2f:14:75:ab:d2:ac:fe:37:
                    e2:1f:10:90:7f:fc:c1:14:74:54:05:4a:72:87:03:
                    82:ef:9d:11:8f:68:b7:00:14:62:0b:41:d9:ec:83:
                    49:b3:c0:dd:e0:e0:bb:1c:9c:8b:c2:88:e8:9f:b0:
                    d1:89:f4:4b:ff:b0:b6:62:df:7e:41:33:2d:18:8b:
                    03:7c:33:de:4a:0b:0e:d4:34:f5:ad:f1:a4:e2:43:
                    01:12:b7:cd:58:0d:2a:09:b3:1b:26:f5:19:4b:15:
                    39:eb:33:15:32:a7:78:98:13:48:b4:90:69:35:75:
                    be:53:49:f4:06:b1:15:e7:78:9a:ff:ae:59:11:b3:
                    6c:34:da:97:61:86:5f:a5:73:b1:b7:bc:1d:78:9a:
                    e0:2e:92:71:15:a4:39:f2:03:21:c7:fc:72:95:63:
                    5b:2b:d1:73:14:4c:da:5e:f3:e4:75:03:95:25:a6:
                    a2:73:11:75:9d:d5:eb:36:08:be:49:6e:b4:00:a2:
                    fa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DE:9F:E2:B1:BC:2F:21:9E:AC:3C:68:1A:CB:EA:F7:2E:1D:B1:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4cf6e63f-4471-3104-a84e-84137a0ea1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:14:bc:ff:68:5b:4e:05:c4:bf:ce:c0:cf:18:91:30:de:ac:
         d0:e5:07:67:c9:d0:92:2b:07:88:18:2f:3a:dc:47:eb:59:ba:
         59:b7:4b:c9:b2:c3:82:03:a2:8b:f7:43:67:4f:5e:d9:dc:59:
         07:3e:bc:fd:e9:1a:48:7e:85:91:88:19:fe:04:bd:f3:f5:1a:
         b6:0e:55:fa:94:56:fb:9d:aa:65:b9:32:1d:34:73:48:25:ea:
         a4:f2:db:c6:77:cb:69:06:ae:b9:93:b0:6c:24:5b:20:df:13:
         ad:99:b7:53:4a:8c:bd:cf:c6:e0:69:fa:2a:79:56:68:db:78:
         50:de:e8:2a:87:8a:96:16:b8:2c:93:fc:6e:bf:6d:c3:a0:5e:
         41:af:16:6a:f7:bd:86:e2:18:14:10:62:2e:8b:6b:b4:f0:a3:
         75:fd:c7:fa:15:6e:6d:b8:ed:ef:fc:2f:63:99:0d:bc:30:04:
         66:81:e5:63:0e:22:c5:a1:8d:99:82:a0:6e:04:2d:ef:7b:f0:
         f3:3c:af:c2:76:1c:47:28:2c:64:d3:45:f2:22:fb:dc:f2:ba:
         ba:ee:8e:93:be:8f:7a:f6:63:57:52:db:3f:31:43:0c:95:66:
         c1:19:8e:12:e6:a7:1c:f7:cc:2d:4e:e8:82:0c:ab:30:a0:3a:
         f7:f8:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:20 2025 by rpki-client