Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d97cf89b-4e71-39ff-ac39-7e272b28d860.roa
File:                     d97cf89b-4e71-39ff-ac39-7e272b28d860.roa (raw, json)
Hash identifier:          cERay8/da/XdSXb/zbHR9UyWzpFPhhajlTe+ZcISx24=
Subject key identifier:   57:69:5C:B7:BB:66:FE:AE:8E:40:FA:31:3D:6D:A5:CB:0E:01:81:C2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A331B05E182BCDB58558A7200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d97cf89b-4e71-39ff-ac39-7e272b28d860.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     9009
IP address blocks:        136.0.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:05:e1:82:bc:db:58:55:8a:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=e63a2809-e1e5-409e-9e7c-f41f94a7aab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1e:ee:bd:00:ee:a1:ba:34:45:65:d7:95:ce:
                    84:ba:ff:a4:61:8e:92:4d:a4:b5:e0:d8:02:73:6a:
                    bc:4c:34:c7:fd:e5:45:c3:15:f2:8f:b5:13:d7:61:
                    a9:ae:7a:62:74:69:6f:8f:e6:8e:8f:e3:39:b9:e0:
                    88:e4:20:43:3a:7f:c1:42:35:dd:11:44:03:03:41:
                    e7:a2:c5:d1:ab:76:35:09:80:39:30:89:e8:12:16:
                    95:16:2a:01:de:ed:a0:25:48:37:4d:ac:9b:43:59:
                    7c:6f:02:83:e4:63:bb:b3:10:2d:bd:45:a4:d3:20:
                    d2:64:b5:c4:e4:5d:61:3e:49:05:37:f5:2c:c5:74:
                    57:f7:57:c8:6c:5f:7f:d0:f6:71:91:fd:56:11:7d:
                    3e:50:40:06:11:a2:58:94:9c:39:1a:28:63:1e:c1:
                    c2:8d:3d:7e:64:6e:53:e5:65:50:df:98:e9:f8:08:
                    df:6c:4a:dd:3a:ad:37:80:03:43:a7:80:14:ff:21:
                    b1:6a:32:aa:f0:b6:80:42:f9:17:2b:a7:fa:d0:f4:
                    3d:8b:87:aa:70:e3:cd:e2:70:e6:4d:2d:dc:41:ad:
                    c5:c7:fc:64:a4:a5:77:97:ca:de:75:78:74:a1:67:
                    81:c9:21:5e:3b:fa:48:bb:f6:de:59:8c:c4:1e:0f:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:5C:B7:BB:66:FE:AE:8E:40:FA:31:3D:6D:A5:CB:0E:01:81:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d97cf89b-4e71-39ff-ac39-7e272b28d860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:38:36:0c:30:b2:47:7b:2f:3b:bb:46:92:24:20:b6:4d:66:
         65:47:0e:7b:d1:50:22:02:8e:88:f9:42:8b:0a:b1:90:48:4d:
         61:15:66:0e:21:9e:ad:cb:84:22:92:e5:ad:d1:c3:62:14:d8:
         4e:ac:c3:a9:28:12:2c:19:cc:47:78:ac:d0:cf:78:83:b7:a3:
         8c:d3:f1:f3:76:6c:85:1a:91:9b:88:89:44:2d:83:0b:83:e0:
         80:ab:02:57:4a:3d:ea:2b:14:68:01:39:d0:fc:41:ae:d9:93:
         44:dc:15:7e:31:b2:09:a9:47:ed:52:ca:e0:17:fd:18:e4:9e:
         3d:c3:dd:4c:9b:76:66:f6:cc:5f:45:84:49:b9:a8:76:20:c6:
         6c:3d:d2:35:7a:ac:61:c3:af:d9:90:fb:cc:1f:64:e2:a1:e5:
         63:89:1c:b0:84:d5:f9:8e:51:f6:1e:61:76:0f:ac:ce:42:ce:
         c1:2f:95:56:29:4a:4e:bb:8d:79:73:1e:e2:73:42:d7:a5:15:
         8b:0b:00:91:d3:aa:5f:2d:9f:6f:d6:8b:13:4c:b6:ea:6d:27:
         5e:97:61:4b:5b:3a:98:59:f8:4b:f3:15:1d:6d:e5:ec:c1:3b:
         fe:6b:69:46:a3:7a:28:9a:f0:22:c4:1f:ce:a8:be:e9:7f:11:
         a9:97:8e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:10 2025 by rpki-client