Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f382ca97-6f48-3bd2-bde5-77813507a2e5.roa
File:                     f382ca97-6f48-3bd2-bde5-77813507a2e5.roa (raw, json)
Hash identifier:          4Vcm9Bo5H1SXwz4hYJvGHTlPzs7S7d6y+G+RLPpy8E0=
Subject key identifier:   BB:54:C7:48:75:97:BC:66:C1:25:9A:44:B7:2D:06:F0:03:81:0D:FC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A71EB589067E9AFCC6D03AF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f382ca97-6f48-3bd2-bde5-77813507a2e5.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     209854
IP address blocks:        136.0.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:58:90:67:e9:af:cc:6d:03:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=63a9cec8-d809-417e-815e-8a5bb5904e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c7:66:37:51:00:72:d6:71:ee:93:7e:b4:de:
                    eb:04:f0:71:22:f4:4f:e7:bd:3e:42:67:9d:73:3e:
                    8c:e5:77:06:9b:0e:72:79:c7:f9:82:79:5f:88:9e:
                    0a:5c:b2:01:98:a3:40:db:2e:b8:0d:b8:55:77:34:
                    3a:b4:60:89:3f:d6:99:89:41:9e:00:fc:6d:fa:dd:
                    f3:e4:e7:a4:27:a7:04:62:02:f7:53:10:5c:b9:ec:
                    3a:4b:30:c8:81:9f:6b:30:41:12:e4:95:bb:4f:b9:
                    d7:f4:44:90:01:7e:05:ef:5f:78:55:08:b8:ed:93:
                    60:9c:e3:af:a3:0d:3f:dc:ad:65:e3:25:bd:72:ee:
                    72:60:df:f5:ff:40:a4:64:a7:1c:3e:82:cb:de:49:
                    18:e3:60:a4:6f:30:8d:6d:6b:f3:2c:0a:24:4b:29:
                    49:be:06:d5:c1:6e:04:82:c9:ee:2d:fb:2a:ff:36:
                    0d:88:ca:4a:31:1f:5e:31:6b:9e:48:d8:2b:cb:82:
                    36:22:eb:29:33:c4:45:33:a3:b3:76:e3:73:88:c0:
                    93:94:5c:92:a9:f5:0b:8d:a2:fe:f0:5e:9c:7a:48:
                    47:31:c5:ff:c3:5a:8e:e0:64:9a:6b:81:ba:39:74:
                    64:50:a4:d2:5f:d8:c7:a4:74:fb:a1:0b:fa:97:cd:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:54:C7:48:75:97:BC:66:C1:25:9A:44:B7:2D:06:F0:03:81:0D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f382ca97-6f48-3bd2-bde5-77813507a2e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c9:df:2e:7a:eb:d2:ca:18:e1:b4:bd:36:be:a2:7e:24:03:
         3d:69:86:6f:cf:2a:1e:d2:ad:d5:5a:b2:e4:2d:c5:b6:17:8c:
         46:e7:91:5c:7c:6c:2f:2e:19:9f:c6:db:59:cd:a3:70:88:0f:
         55:70:2e:19:1d:a2:aa:41:d9:99:47:58:06:34:5e:18:9b:fe:
         8e:c1:ac:90:b4:6c:8f:ff:d0:20:54:e5:6c:77:75:59:a5:5b:
         c6:f0:f2:2f:74:19:46:62:cf:64:e4:30:72:41:24:20:09:1f:
         2b:ed:95:50:8e:24:6f:d6:d2:ec:03:6c:9a:7b:22:11:bf:32:
         73:93:30:67:17:26:b5:36:db:61:d5:b7:be:7d:59:72:1c:1e:
         7c:96:28:ca:f2:4a:df:c4:00:b5:eb:96:3e:c7:71:62:cb:e7:
         e9:6b:06:24:4a:a1:71:c3:c5:32:29:9c:de:25:e7:f0:55:4e:
         98:cc:88:42:f5:37:66:66:92:1a:4f:40:36:7c:92:92:96:80:
         7d:99:0e:09:6e:1a:0a:2c:7f:2e:6f:4a:c6:81:04:55:30:c8:
         ec:32:31:33:dc:41:cf:4c:e1:a6:14:00:73:7d:16:11:d9:41:
         ef:1e:62:40:0a:81:d6:76:b0:3d:1a:2c:fe:ef:ff:75:25:3d:
         f1:0e:54:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61iQZ+mvzG0Dr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
NjNhOWNlYzgtZDgwOS00MTdlLTgxNWUtOGE1YmI1OTA0ZTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcdmN1EActZx7pN+tN7rBPBxIvRP570+Qmed
cz6M5XcGmw5yecf5gnlfiJ4KXLIBmKNA2y64DbhVdzQ6tGCJP9aZiUGeAPxt+t3z
5OekJ6cEYgL3UxBcuew6SzDIgZ9rMEES5JW7T7nX9ESQAX4F7194VQi47ZNgnOOv
ow0/3K1l4yW9cu5yYN/1/0CkZKccPoLL3kkY42CkbzCNbWvzLAokSylJvgbVwW4E
gsnuLfsq/zYNiMpKMR9eMWueSNgry4I2IuspM8RFM6OzduNziMCTlFySqfULjaL+
8F6cekhHMcX/w1qO4GSaa4G6OXRkUKTSX9jHpHT7oQv6l819gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtUx0h1l7xmwSWaRLctBvADgQ38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjM4MmNhOTctNmY0OC0z
YmQyLWJkZTUtNzc4MTM1MDdhMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHJ3y5669LKGOG0vTa+on4kAz1phm/PKh7SrdVasuQtxbYXjEbnkVx8
bC8uGZ/G21nNo3CID1VwLhkdoqpB2ZlHWAY0Xhib/o7BrJC0bI//0CBU5Wx3dVml
W8bw8i90GUZiz2TkMHJBJCAJHyvtlVCOJG/W0uwDbJp7IhG/MnOTMGcXJrU222HV
t759WXIcHnyWKMrySt/EALXrlj7HcWLL5+lrBiRKoXHDxTIpnN4l5/BVTpjMiEL1
N2ZmkhpPQDZ8kpKWgH2ZDgluGgosfy5vSsaBBFUwyOwyMTPcQc9M4aYUAHN9FhHZ
Qe8eYkAKgdZ2sD0aLP7v/3UlPfEOVKw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:47 2025 by rpki-client