Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f8cae5b-5a81-3740-8369-33edf847d887.roa
File:                     8f8cae5b-5a81-3740-8369-33edf847d887.roa (raw, json)
Hash identifier:          24iiD7UglQVVzn0DNW3doEBP11lrci8t3aAyFpowsxY=
Subject key identifier:   0B:79:00:A5:5D:02:DE:55:F5:A3:1A:F5:CE:0E:E2:ED:33:7F:B0:97
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858496A19B2C518120A4C4EE26BC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f8cae5b-5a81-3740-8369-33edf847d887.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     400402
IP address blocks:        136.0.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:b2:c5:18:12:0a:4c:4e:e2:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=7ea44ec3-9e66-4d29-af76-877b30d3cbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:9a:c1:72:be:76:a4:b0:50:dd:b6:51:4d:
                    6e:1e:98:25:d0:10:19:4d:65:c2:2d:29:ac:e7:d2:
                    98:23:0f:c4:a8:1f:a0:d5:6c:6f:f9:2e:af:73:1e:
                    e8:e9:35:01:b1:ab:3d:41:99:0b:98:ae:a0:ee:92:
                    bf:12:7e:6f:51:7b:bd:d5:3a:8d:b1:75:9d:ad:c8:
                    5d:22:e8:78:d0:12:04:b5:e7:88:0c:b5:41:0b:70:
                    d3:1e:5a:2e:54:d9:12:3e:6a:c9:e2:60:75:37:4b:
                    5b:e6:b0:2a:a7:cf:74:15:d8:65:91:8b:32:38:bd:
                    21:78:a0:56:ee:ab:dd:db:02:39:72:cf:16:00:ad:
                    ba:de:2f:47:27:b5:14:4c:75:00:3f:8c:40:31:e0:
                    e1:2f:b9:c1:e5:57:69:65:f7:7e:23:b8:0a:37:eb:
                    ac:06:89:8f:5f:7a:3d:51:3f:e1:de:28:49:41:02:
                    e3:99:15:3d:d6:b4:66:b5:94:5e:73:a5:c2:97:6a:
                    5a:57:31:97:55:68:4e:3c:c8:1c:27:93:ad:27:3c:
                    e9:f2:4a:71:29:90:c5:d4:e6:56:e6:57:4c:df:9a:
                    65:a2:1c:76:c1:d1:bc:d8:ee:06:2d:f7:96:c5:74:
                    29:ed:be:cf:89:85:0b:23:66:75:b2:3a:23:1b:55:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:00:A5:5D:02:DE:55:F5:A3:1A:F5:CE:0E:E2:ED:33:7F:B0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f8cae5b-5a81-3740-8369-33edf847d887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:82:8c:88:cf:d5:de:28:4f:05:08:77:bf:b3:ff:75:76:e9:
         f3:0e:be:ab:9f:a2:ea:b2:ed:5b:98:79:0f:65:32:bb:04:8a:
         6e:60:d7:69:fb:04:2f:1a:ac:e4:c1:ed:fe:11:21:98:d1:1d:
         5a:ee:31:07:17:6d:a6:e1:6d:5b:d7:b5:39:41:8f:b9:ed:1b:
         13:54:fa:46:80:d4:ba:be:8a:89:7b:3f:6f:c2:5d:9e:66:2d:
         59:63:07:31:ff:d1:61:dd:da:d4:8f:45:90:c8:d3:d7:2a:f0:
         ea:95:a3:3f:2b:c0:09:b6:70:14:79:0a:65:02:07:53:86:41:
         62:21:27:33:1c:96:1f:e1:bc:b6:87:21:ff:91:a5:98:a7:c4:
         72:d3:fb:1a:93:24:a6:b3:b0:6e:b3:28:24:a1:6b:2a:5a:a5:
         fb:af:5c:e7:20:cd:10:91:82:0e:8e:ae:00:0c:f7:7f:6c:db:
         81:f7:7b:09:20:09:cd:6a:82:dd:44:35:af:14:70:66:cf:79:
         e9:26:3c:0e:7d:0a:a4:47:f4:4e:0e:cd:56:ad:79:fc:d0:84:
         34:65:d9:1a:80:21:1c:92:c9:80:ae:9d:d6:7a:1f:9c:7b:f3:
         88:0d:92:a5:5f:56:5e:03:2c:35:25:be:7d:38:e2:d9:94:74:
         ee:78:28:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbLFGBIKTE7ia8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
N2VhNDRlYzMtOWU2Ni00ZDI5LWFmNzYtODc3YjMwZDNjYmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/eawXK+dqSwUN22UU1uHpgl0BAZTWXCLSms
59KYIw/EqB+g1Wxv+S6vcx7o6TUBsas9QZkLmK6g7pK/En5vUXu91TqNsXWdrchd
Iuh40BIEteeIDLVBC3DTHlouVNkSPmrJ4mB1N0tb5rAqp890FdhlkYsyOL0heKBW
7qvd2wI5cs8WAK263i9HJ7UUTHUAP4xAMeDhL7nB5VdpZfd+I7gKN+usBomPX3o9
UT/h3ihJQQLjmRU91rRmtZRec6XCl2paVzGXVWhOPMgcJ5OtJzzp8kpxKZDF1OZW
5ldM35plohx2wdG82O4GLfeWxXQp7b7PiYULI2Z1sjojG1UYsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAt5AKVdAt5V9aMa9c4O4u0zf7CXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGY4Y2FlNWItNWE4MS0z
NzQwLTgzNjktMzNlZGY4NDdkODg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2CjIjP1d4oTwUId7+z/3V26fMOvqufouqy7VuYeQ9lMrsEim5g12n7
BC8arOTB7f4RIZjRHVruMQcXbabhbVvXtTlBj7ntGxNU+kaA1Lq+iol7P2/CXZ5m
LVljBzH/0WHd2tSPRZDI09cq8OqVoz8rwAm2cBR5CmUCB1OGQWIhJzMclh/hvLaH
If+RpZinxHLT+xqTJKazsG6zKCShaypapfuvXOcgzRCRgg6OrgAM939s24H3ewkg
Cc1qgt1ENa8UcGbPeekmPA59CqRH9E4OzVatefzQhDRl2RqAIRySyYCundZ6H5x7
84gNkqVfVl4DLDUlvn044tmUdO54KHo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:28:12 2025 by rpki-client