Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/78947b36-6b0b-3321-b1e7-de6d31c5502b.roa
File:                     78947b36-6b0b-3321-b1e7-de6d31c5502b.roa (raw, json)
Hash identifier:          vIifFB2VnabjXJ5yq0zTMLBpXzKBYiyIiTtLrlJVxuY=
Subject key identifier:   51:BC:88:27:43:8B:46:FB:5F:57:03:61:96:16:8C:C2:ED:AB:CE:4C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584996C4B400C6A5D3993C29BB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/78947b36-6b0b-3321-b1e7-de6d31c5502b.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     149440
IP address blocks:        136.0.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b4:00:c6:a5:d3:99:3c:29:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=ced25272-7b1e-41b3-8dfa-7e0dc8f8f63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:b1:df:cb:76:5c:fa:ec:78:19:6f:71:58:
                    47:93:ca:4a:f1:7b:14:62:97:b8:03:73:66:ec:a9:
                    b6:89:99:90:68:7a:4b:ed:26:90:5d:1f:71:bd:2d:
                    4f:35:58:6c:89:ef:58:de:3f:85:18:bc:4b:9d:ca:
                    ce:21:bf:6b:b7:af:da:ec:44:ce:ee:07:91:54:1c:
                    c7:ea:cf:92:08:fa:42:a5:e2:62:f8:65:e6:78:ca:
                    07:f6:e5:5f:c4:af:db:54:4d:ee:95:fb:59:29:2d:
                    5d:96:e5:7d:b0:d3:eb:e7:77:8d:d0:60:d2:4c:56:
                    fd:29:b0:34:46:5e:dd:2a:02:97:b3:9b:47:02:03:
                    c4:1c:ab:3b:20:1c:61:cc:7d:70:33:a3:be:8b:e8:
                    6e:69:cf:60:2b:9d:ac:b5:44:5d:6c:8f:9c:31:a0:
                    e1:58:69:c4:67:6d:1b:50:b9:c7:f7:11:4a:72:13:
                    6c:41:24:b4:89:51:b6:e9:0d:c2:9c:ee:c0:fa:b0:
                    7c:fd:d7:b9:36:35:b9:86:a5:3c:06:db:3b:90:3f:
                    84:7f:61:59:23:f7:59:09:50:26:a2:7d:56:dc:6a:
                    ff:67:32:7b:67:ca:16:27:f0:6c:3e:97:26:29:5b:
                    ea:64:e7:01:bd:20:33:73:1a:65:49:a2:aa:ba:be:
                    f8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BC:88:27:43:8B:46:FB:5F:57:03:61:96:16:8C:C2:ED:AB:CE:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/78947b36-6b0b-3321-b1e7-de6d31c5502b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:be:40:8a:7a:26:27:d5:21:ac:66:64:6d:35:24:da:79:57:
         84:19:7d:f6:b9:97:72:3d:80:10:01:38:3b:e7:a6:45:cc:6a:
         6f:ee:20:cd:f0:72:7a:19:4b:87:af:d3:28:01:bf:3b:50:4f:
         70:c6:58:e5:e0:6b:26:71:6e:f3:07:b7:d9:88:3d:c8:77:d6:
         24:39:8d:30:3c:b7:5d:27:f2:ef:bd:09:a0:7e:76:c3:97:7e:
         34:1b:55:78:9c:fe:0e:81:99:8d:65:6b:8a:c5:f7:9f:89:f2:
         68:ac:5b:45:91:af:9f:90:f9:37:30:f0:48:9d:da:0f:fa:da:
         ab:75:85:49:a2:79:4f:a8:83:16:d2:55:85:90:cc:f0:42:9c:
         3e:25:dc:b2:da:30:75:2b:6a:3b:cc:99:e8:00:53:fc:cd:61:
         21:74:92:eb:dd:b1:4c:c8:ad:73:91:0d:bf:db:fb:bc:4d:17:
         7f:ad:db:e2:cf:46:0b:69:50:24:0d:e2:c7:4b:cf:b5:dc:39:
         6d:e4:23:c8:31:69:27:7c:7f:f6:5e:1a:5e:b4:8a:8a:5b:99:
         fa:39:34:28:9f:dc:53:ba:cc:52:01:5b:2d:af:7c:dc:b2:50:
         d6:45:ed:75:b1:98:ef:89:40:8d:d8:35:a0:17:8a:be:22:c6:
         02:fc:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:47 2025 by rpki-client