Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa
File:                     d952b645-35ef-3f72-a694-b7b692438686.roa (raw, json)
Hash identifier:          juij0PR+22lSFcGcMheJC+OGplaaHghCei3//9XTp/4=
Subject key identifier:   EC:A5:93:40:56:FD:E0:7E:EC:A8:5A:AB:17:F2:19:F9:6A:B6:C6:79
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A94D0E6D8E13184A338884FC2
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        136.0.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e6:d8:e1:31:84:a3:38:88:4f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=c26f8641-7d4a-4c95-93ba-148d49d57029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6a:27:e8:3e:e9:0d:d5:9a:58:66:bd:d9:ee:
                    25:cf:a1:64:d6:a0:43:c1:5d:56:79:31:b8:b3:6b:
                    e0:9e:1b:ad:51:42:bd:f2:bd:39:c3:47:f4:ab:0b:
                    b1:d7:1f:de:eb:0d:f3:87:5f:31:7b:46:7f:7b:34:
                    a5:7b:70:d1:dc:95:20:5b:c9:b1:06:51:1f:c5:21:
                    06:d5:2e:1a:74:9c:1a:5a:67:34:88:88:ed:71:71:
                    8d:81:a6:55:2e:c6:0d:46:d5:d2:00:5e:ed:c6:08:
                    75:f5:5a:17:0e:cb:e0:a5:48:e0:9c:29:2e:43:7c:
                    83:cd:47:6e:5b:93:b9:b3:82:0c:ec:1d:94:a5:05:
                    3f:8c:f6:fa:0c:12:e3:c7:51:f9:c7:db:e6:a6:b3:
                    48:52:63:94:ff:9f:87:e5:e4:00:0c:a3:e1:e1:6a:
                    08:59:b4:e6:f9:51:9f:c7:b7:7c:70:41:3a:66:8e:
                    3a:61:34:b9:e0:78:b2:27:de:24:8d:c3:9a:15:cc:
                    87:c9:fc:04:02:8d:ed:a8:b7:e4:52:dd:c4:1a:93:
                    43:44:77:69:ca:16:77:8d:cf:7d:20:f1:e9:91:0a:
                    04:47:04:cf:53:b5:6f:98:d9:2c:c4:f5:55:47:a7:
                    8f:de:ac:9a:26:e2:5c:f5:e5:80:7e:0f:18:5e:33:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A5:93:40:56:FD:E0:7E:EC:A8:5A:AB:17:F2:19:F9:6A:B6:C6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:a9:4d:5e:d9:48:f8:1a:b9:0b:0e:71:b5:0f:7e:3e:30:
         82:ee:12:7c:77:93:43:f5:bc:a9:6d:fc:cb:d0:c9:9e:cd:08:
         ed:6b:11:fa:15:33:e3:9a:4b:9e:74:ef:e9:a4:c2:ca:5b:0c:
         b3:64:e6:8c:29:96:c9:c5:86:11:57:eb:44:e2:13:1e:c1:3f:
         c4:8d:cf:4f:aa:a7:a1:85:8b:c5:7c:eb:a9:9b:94:ce:eb:15:
         60:f3:33:fa:ab:3f:54:34:1d:77:bd:24:e1:83:35:b6:59:1b:
         f3:c4:df:87:d1:12:ff:2a:21:1a:cb:ef:50:be:29:a7:20:28:
         a9:a0:11:0e:bc:e4:ac:3c:af:ec:85:b6:20:be:11:83:c4:59:
         cc:ee:81:10:78:97:b7:7f:4e:f7:99:87:73:db:72:b7:74:4a:
         53:33:b3:e1:59:35:84:fe:77:29:09:92:80:d2:54:2a:b4:57:
         64:99:9d:97:42:91:b8:47:27:74:e6:06:b8:5f:0d:de:54:5f:
         ac:5b:22:a2:85:56:c1:67:45:31:33:cb:af:b5:ad:4c:5c:59:
         95:42:43:e7:fd:f8:25:62:7f:f8:f2:7b:11:c5:6c:32:2e:eb:
         26:bd:d3:91:d3:d1:f1:64:2c:75:53:cf:35:c5:9a:bf:21:b2:
         83:6a:02:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:38:01 2025 by rpki-client