Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b959d668-322b-37bd-853d-2f98ff3d0d2e.roa
File:                     b959d668-322b-37bd-853d-2f98ff3d0d2e.roa (raw, json)
Hash identifier:          izYFxCuMjmOT+Oc0lgJBMIo16wUrzL3ABvrvZzGT4Lg=
Subject key identifier:   C4:54:48:B3:F2:14:F0:FC:BF:2E:03:B6:47:A1:83:98:69:30:F7:CE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849F17FABED0F544C8C7A158600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b959d668-322b-37bd-853d-2f98ff3d0d2e.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     401152
IP address blocks:        136.0.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:ab:ed:0f:54:4c:8c:7a:15:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=9dbe9df7-f327-4a72-b0e1-789010881193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:22:6e:b8:5e:e8:58:2f:b6:96:10:fd:e4:
                    6c:ae:ec:1d:00:0c:ed:d5:81:55:b2:15:83:2c:23:
                    94:90:08:12:65:94:5e:c6:06:0d:5b:3a:ed:a3:e0:
                    10:80:fe:ca:35:74:5a:78:d9:bb:ee:54:1b:65:51:
                    1a:11:6d:8f:28:2f:c7:2b:78:85:23:b1:0b:30:23:
                    2d:45:2d:62:a1:8b:dd:9e:24:f1:6d:66:be:4c:73:
                    5e:92:c5:b3:73:10:6a:5b:a5:06:74:0b:d0:ff:2e:
                    25:15:6e:b2:26:73:76:a9:f3:27:3f:7a:fb:b9:08:
                    c4:cf:ab:5d:2d:66:fc:0c:a7:8e:2d:95:f2:2e:dc:
                    27:37:56:8b:8f:b9:8f:25:f6:8d:87:c3:1c:fb:03:
                    10:46:8a:17:25:cd:d0:73:8a:6c:89:9a:5b:6c:b4:
                    05:6d:01:66:47:15:29:e0:c9:88:9f:e7:d3:24:d1:
                    b2:c9:6e:1d:fe:95:2f:9e:c2:81:66:61:40:bb:eb:
                    6a:e8:d1:55:d4:45:b9:df:2a:e2:da:80:52:c1:2c:
                    09:62:f3:cf:50:e7:e6:b0:f1:6d:05:90:2a:38:1e:
                    2f:10:1f:b5:ed:c6:4e:c2:21:91:fb:3b:44:dd:e5:
                    81:24:16:bd:8c:8b:25:14:69:ab:3f:1f:b9:3c:70:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:54:48:B3:F2:14:F0:FC:BF:2E:03:B6:47:A1:83:98:69:30:F7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b959d668-322b-37bd-853d-2f98ff3d0d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:88:d9:b5:57:74:f9:3d:58:1a:4f:cf:d1:1a:c5:1b:5a:b5:
         99:9f:84:4a:aa:8b:01:a5:69:67:3d:ae:af:3f:e4:00:c2:f4:
         b8:b4:38:4b:6a:4f:3e:15:f6:b9:2f:1c:ca:da:37:07:7e:e8:
         99:81:f9:07:6c:ea:c7:2f:9f:00:0c:de:49:18:30:b4:7e:2b:
         ef:b1:d0:92:d7:7d:bf:3b:29:f0:17:64:48:e1:37:8e:1c:74:
         9d:ba:67:ce:b4:7f:f5:d0:6f:d6:68:be:36:59:44:d7:dd:1d:
         dd:e8:05:7d:4f:c4:63:4a:94:7e:24:15:66:03:c0:c0:ad:ba:
         19:fd:91:bb:5d:ed:fc:26:b9:69:82:0f:d1:e7:83:38:5e:c4:
         ec:4e:b9:01:5f:fe:3c:cc:6d:53:a0:e6:fc:ff:97:26:f3:09:
         6f:8e:d2:14:c9:fc:04:53:38:ff:4e:72:0f:2e:8b:b1:aa:aa:
         5e:e8:0c:38:64:e7:6d:9c:99:df:dc:51:ba:da:7c:05:9a:fa:
         94:b3:79:c1:53:1a:7f:0d:43:e4:60:f8:86:b0:80:b5:86:90:
         84:2a:c0:24:02:01:44:46:b9:59:82:f6:b1:8a:56:1b:07:64:
         15:a2:73:99:47:75:38:ac:1e:1c:e2:e1:4e:14:90:d2:ca:6a:
         2c:37:52:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:02:48 2025 by rpki-client