Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/77932ede-261d-3c56-9676-83660505da00.roa
File:                     77932ede-261d-3c56-9676-83660505da00.roa (raw, json)
Hash identifier:          vbr0gbX1ccTqAXW/i03CRKNCgP6lPeQwFL5lUVE7r10=
Subject key identifier:   20:B4:A9:F1:5C:F2:7A:D5:13:74:F7:A9:B5:C7:37:F2:64:25:EB:9F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A96368284836CE0F8C91C0A40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/77932ede-261d-3c56-9676-83660505da00.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     401152
IP address blocks:        136.0.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:82:84:83:6c:e0:f8:c9:1c:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=3beaaa1b-6fe0-4470-9189-7878a8fddf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:83:3c:a4:20:ea:2a:93:ed:b6:db:27:74:
                    e9:1d:31:c6:d2:54:2e:0e:f4:2a:8d:e0:7a:7d:f3:
                    fb:d5:62:61:41:1c:79:ba:64:b9:85:f7:5d:8c:ed:
                    f7:31:2b:ac:68:2d:1a:bf:fa:18:47:9a:ed:50:22:
                    c2:ce:bf:d1:5a:ed:47:87:12:5e:5c:26:14:65:b0:
                    97:b7:e3:50:a4:b6:a3:bb:13:d3:50:9b:41:86:25:
                    30:51:c0:f8:e6:dc:f4:7e:a1:1f:34:ca:ce:da:be:
                    fa:05:63:12:61:a3:80:63:31:05:da:bc:0c:82:be:
                    c9:95:c0:ba:a9:b1:80:ee:f6:b1:50:0f:58:26:ee:
                    bf:30:19:86:e5:a1:87:35:77:89:5a:b2:e2:cd:3f:
                    22:de:c5:59:a4:3f:6b:98:89:81:02:40:75:80:bb:
                    ac:ce:ce:da:90:28:b5:57:a7:ae:c4:a2:18:fa:3e:
                    45:85:ad:e8:f0:0b:2b:13:fa:b4:fe:6c:81:38:ce:
                    2c:af:88:4b:1d:55:27:a1:57:b7:eb:7a:7e:26:18:
                    e5:aa:38:a8:ce:2f:d0:70:8b:c7:2f:5c:18:ee:65:
                    05:e4:1b:2e:a1:49:b3:84:16:4c:ce:6a:49:3f:23:
                    22:3c:8a:cb:72:fe:9c:4b:d7:71:e9:78:19:18:33:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:A9:F1:5C:F2:7A:D5:13:74:F7:A9:B5:C7:37:F2:64:25:EB:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/77932ede-261d-3c56-9676-83660505da00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:60:1c:a6:44:a8:6a:8d:a2:20:fb:e0:85:0c:bb:55:71:
         fa:f2:bd:2d:b5:11:f2:62:cf:7b:a1:73:ae:ce:b3:d2:17:49:
         c6:b5:42:91:7e:0d:74:72:01:90:d6:d9:0b:d5:7c:a0:aa:f5:
         e7:76:9d:1b:6b:bf:2c:59:a4:c1:0f:70:4d:22:91:df:77:aa:
         fb:fd:52:8f:55:cb:ae:fb:b2:52:f4:ad:51:02:7c:7c:95:c9:
         5d:b3:86:10:de:3e:84:6e:4e:12:80:45:ab:d9:11:33:60:08:
         75:73:b2:bc:f1:d8:6a:ad:10:d3:5b:7e:0b:82:eb:0e:0c:f6:
         76:01:e9:e3:08:ff:71:d9:9a:5e:d1:f3:af:aa:ae:f8:40:68:
         ca:f6:73:01:42:0a:f5:1d:56:bf:85:dc:84:04:97:21:00:0c:
         29:7e:34:cd:2f:3a:5c:fc:74:d3:94:59:52:ed:56:e9:8c:0a:
         e2:2d:30:cb:43:f0:0b:a3:95:ee:1a:f7:18:fd:02:ed:b8:6a:
         58:a4:3a:2d:e7:d9:85:80:af:9b:a3:d7:b1:e3:65:b3:eb:bb:
         6b:38:68:86:c0:70:78:83:8f:91:22:5b:83:86:22:0a:51:32:
         ab:be:d0:78:73:bd:8b:26:02:aa:98:a9:d9:fa:ea:75:c5:4b:
         20:d9:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:53 2025 by rpki-client