Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa
File:                     d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa (raw, json)
Hash identifier:          maVI/o5gig/ng/yqumA1CWy96YHbXQashmuFLEDWLa8=
Subject key identifier:   ED:DE:7C:F7:13:77:68:9B:D6:59:04:39:A5:C4:26:84:9B:10:42:3A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849F71530834C03EFA46D283CC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     399646
IP address blocks:        136.0.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:30:83:4c:03:ef:a4:6d:28:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=a8483e51-4703-4ff6-9d5e-f875e805e2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:b4:54:c8:7e:e7:06:91:45:a0:00:90:dd:
                    36:13:65:19:5d:7c:5a:6e:8c:3f:4e:41:2a:88:dc:
                    60:29:50:cb:36:0d:5f:bb:19:3a:95:dc:03:80:a2:
                    f6:cb:6d:83:fc:de:36:97:0b:a0:0a:b3:44:6d:c0:
                    84:4f:03:64:f9:e4:33:af:e4:83:bc:cc:51:94:70:
                    48:1f:1e:ac:ea:6c:3f:9e:6b:e7:d5:42:28:1a:25:
                    5b:ff:a2:1e:7d:85:bf:1f:8a:3f:a2:25:27:52:78:
                    9b:37:16:8b:71:bc:82:e2:62:83:94:7d:a1:c9:f9:
                    25:52:64:db:ce:74:87:d1:23:df:ef:1c:74:aa:73:
                    54:14:c5:c8:00:79:71:1b:5f:24:11:a1:81:c3:e5:
                    63:7c:13:6f:16:5e:96:7f:fb:ec:8c:6e:07:5d:b8:
                    d3:8a:68:01:68:06:ad:1f:5d:2c:ce:81:e2:8b:ba:
                    60:81:8a:6b:e8:cd:f6:5a:70:bf:18:2a:7c:d2:4e:
                    32:68:e2:c3:a7:00:1c:36:83:dc:da:85:88:18:93:
                    0e:9c:12:f4:8f:42:a9:c4:9d:0d:a9:d8:6c:6a:80:
                    e0:9b:0a:8e:99:b0:5f:ff:81:60:fe:57:fc:58:eb:
                    53:93:34:d8:7b:b8:ef:ba:24:4a:b3:80:07:52:9c:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DE:7C:F7:13:77:68:9B:D6:59:04:39:A5:C4:26:84:9B:10:42:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d81d9c91-d7b3-3d65-8396-49c69e5e66dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:eb:2b:e0:e6:45:52:0b:bb:e8:1c:24:1c:6b:e8:47:63:f8:
         4d:fc:6b:8c:73:17:8f:4e:df:66:e7:c3:92:4a:08:4c:7f:cf:
         b1:40:4b:d9:dc:c9:b1:ef:87:05:68:16:54:54:16:c0:79:61:
         67:90:b6:2d:0d:21:06:54:20:f8:2f:b3:d8:9c:e6:49:56:11:
         54:45:28:e0:cf:1c:64:c5:e1:5c:8b:c6:e7:eb:00:af:cd:a1:
         4a:f8:02:59:21:8b:e7:35:cd:71:49:92:e9:9c:7c:7e:4d:fa:
         7b:4e:31:9c:3c:c0:76:28:7d:f5:07:86:2c:6b:16:a3:b1:37:
         3a:76:0e:31:5c:f2:a3:74:dc:6b:88:e6:62:95:26:26:9e:e4:
         c9:da:5c:5c:47:ed:d3:ff:ad:7e:42:cd:fb:9b:4f:14:77:18:
         93:c6:b0:73:fd:ce:08:80:77:3e:ae:d1:8c:f8:68:86:05:78:
         e9:67:5d:1e:38:ba:94:03:3c:f3:4d:83:89:3f:ca:85:8a:69:
         a4:b1:73:73:ea:99:ed:b9:92:7c:2e:ee:16:e8:6a:a2:29:fd:
         24:a3:c3:86:0e:31:86:28:2b:f8:c2:f1:6f:89:0d:ef:6d:09:
         9b:73:1a:3d:8a:72:cc:66:0f:ce:f0:ca:bd:a4:37:1a:a3:1c:
         93:a1:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:05 2025 by rpki-client