Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4e9f2a17-6b86-3860-a752-f2a5ab4ac7c5.roa
File:                     4e9f2a17-6b86-3860-a752-f2a5ab4ac7c5.roa (raw, json)
Hash identifier:          TPmtiOi95UPthVWW7jxBvug/CvABDfF8HUrTUyUNlaA=
Subject key identifier:   AF:35:B2:26:78:AA:83:54:22:3A:F3:DF:86:9E:DB:7C:CB:9A:DC:31
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AADF13170DDB9AD0E678A9A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4e9f2a17-6b86-3860-a752-f2a5ab4ac7c5.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     15083
IP address blocks:        136.0.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:31:70:dd:b9:ad:0e:67:8a:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=82d28eb1-8bf3-43e9-9c60-68a054c5ce63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:7c:23:84:93:d0:0e:cc:1a:e6:a2:29:cd:
                    af:6f:d2:bf:12:f0:60:97:1c:f5:f8:33:9c:1f:f8:
                    38:8d:8f:0f:bb:4b:43:2e:eb:30:67:da:f5:07:ab:
                    0e:a0:d9:af:3b:3c:fe:4b:c9:8d:e5:a1:91:0a:36:
                    11:dc:00:2f:c2:60:01:dd:f8:0c:21:8a:c9:fb:ab:
                    29:16:ce:a6:55:9a:02:ce:6e:a5:52:d3:61:5a:b1:
                    2b:33:92:78:b0:83:c7:57:08:fe:72:45:24:8e:17:
                    9c:cf:8a:56:a7:80:75:69:b8:28:53:4c:42:b3:a7:
                    c5:ae:29:a9:1d:6a:81:e9:31:4d:a0:fa:cd:f0:42:
                    a2:9c:c5:ec:8c:81:6d:1b:5c:92:8b:dc:e7:67:c1:
                    34:19:b8:17:a5:0d:1a:25:8b:ae:3f:46:ff:44:8b:
                    65:96:e8:fb:55:7a:7b:e5:00:da:5c:e0:80:e7:92:
                    5d:93:58:1f:79:1a:bc:a2:01:3a:04:49:52:02:9f:
                    8b:3d:b1:0c:f8:76:2d:ec:61:7d:9c:e2:cd:c1:66:
                    a2:45:cd:55:ad:24:42:a2:98:38:8e:2d:25:40:d3:
                    80:96:bf:26:09:06:fe:b3:af:d3:23:e9:10:02:4b:
                    29:1d:07:d3:c6:0c:4a:05:f3:9b:7c:10:21:a3:c1:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:35:B2:26:78:AA:83:54:22:3A:F3:DF:86:9E:DB:7C:CB:9A:DC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4e9f2a17-6b86-3860-a752-f2a5ab4ac7c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:20:5c:4c:62:37:38:22:33:cf:8c:df:38:a5:ae:13:ae:17:
         c6:30:21:cc:35:cc:5d:48:cc:74:f6:6e:bc:64:fb:51:28:cb:
         82:ad:09:26:27:a5:20:8d:e2:e8:b5:cb:3d:56:c3:00:37:29:
         88:ba:aa:76:34:50:a5:0b:87:84:d5:5f:ba:e0:a0:45:17:19:
         52:d7:b2:b0:32:6e:5e:21:72:98:46:d9:73:a2:3a:ae:86:9c:
         52:b7:7e:a2:9b:3d:40:12:a2:86:86:15:7a:61:ed:c2:ae:37:
         82:32:7c:36:45:7b:90:11:1d:d9:fe:3f:51:5f:5c:38:ea:19:
         19:19:e6:e0:f0:3c:a4:85:c8:5a:7a:27:56:b8:6a:8d:e9:04:
         c4:14:06:85:9c:8c:05:1b:fb:7c:16:69:0b:a5:6c:41:b0:63:
         68:0d:92:96:dc:74:bc:88:9e:27:47:04:80:47:be:03:08:ce:
         97:9f:f7:ea:56:ef:73:78:c9:0f:63:56:fe:fb:d0:68:ef:ec:
         2d:b5:8f:03:33:52:8e:8b:22:10:c4:41:ef:12:8e:69:6b:66:
         02:bb:40:6b:1a:39:4e:ce:ac:f7:16:93:7c:31:1e:04:fb:a6:
         13:ff:fb:79:ac:2d:20:10:ff:7a:55:7e:f3:29:bf:de:92:70:
         00:bd:04:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:45:25 2025 by rpki-client