Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f4570cae-5032-357c-9fcd-3b53c61fd7f3.roa
File:                     f4570cae-5032-357c-9fcd-3b53c61fd7f3.roa (raw, json)
Hash identifier:          lwSqu7Hc+aNzApEKAztrWObjfJ/ivO7dWDFW4a39wdI=
Subject key identifier:   B0:CD:10:9C:31:15:A7:40:DD:4C:48:D4:8D:7D:D4:2B:99:CE:00:4D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB0BB76CB7813807633331780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f4570cae-5032-357c-9fcd-3b53c61fd7f3.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     44477
IP address blocks:        136.0.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:76:cb:78:13:80:76:33:33:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=079cff83-a175-4193-b2d2-14950211e36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:26:8d:d1:1d:c1:d6:2e:d2:fc:31:e1:d5:d8:
                    ca:b6:3b:fd:44:09:84:df:73:ad:ff:c5:98:2d:63:
                    2f:1d:e9:31:ae:c5:42:0e:a2:e8:c8:b1:28:d3:dd:
                    03:63:88:47:22:f2:27:4c:59:df:94:6c:65:b9:e2:
                    3d:e0:48:60:6d:1d:ab:1c:49:f1:3d:0e:24:66:aa:
                    70:d3:b3:9e:e9:aa:1e:0f:bf:2a:d1:e4:b2:54:55:
                    69:de:a3:7e:9d:f7:f1:f1:24:fb:81:0a:bc:63:fb:
                    28:c6:15:1a:d1:ec:af:37:a7:fc:83:f9:6d:7e:32:
                    5f:e8:78:86:53:b7:79:a1:49:8c:5c:ea:ff:6e:4b:
                    5d:b0:41:94:b7:74:2a:dc:45:65:de:5a:d4:10:5f:
                    63:5d:79:43:de:56:fe:8c:d0:36:44:1b:44:3b:36:
                    6a:3f:50:45:5a:5c:cd:75:21:78:51:af:1d:69:cf:
                    93:2f:6e:08:74:0f:f7:81:6c:19:76:24:a8:95:a7:
                    53:72:4e:07:12:9c:cf:12:5e:50:1f:d0:65:5b:c5:
                    94:62:75:77:80:a2:a5:3b:f5:dd:c8:79:e7:ed:02:
                    0b:28:39:42:41:e4:b6:63:0d:00:fc:6c:10:27:16:
                    48:86:76:66:c8:2d:5a:da:2f:42:ce:1d:e6:78:dc:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:10:9C:31:15:A7:40:DD:4C:48:D4:8D:7D:D4:2B:99:CE:00:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f4570cae-5032-357c-9fcd-3b53c61fd7f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:65:6a:ae:41:88:c7:68:73:3f:d4:ae:6a:2b:87:44:f1:75:
         55:4e:2c:80:07:ae:b6:42:12:49:8b:bf:32:2f:64:40:7f:78:
         a5:d0:d4:1c:19:22:75:e3:8c:d6:94:0e:ab:b8:af:45:f8:90:
         10:d6:3d:9f:a8:8d:66:16:66:17:71:e3:07:dc:5f:a3:95:5d:
         d1:b8:1f:e9:cb:5a:58:71:19:4a:f1:11:b9:12:d0:8e:c9:a5:
         b5:8c:aa:52:72:12:cf:12:d0:23:7c:2f:3e:48:63:9d:77:9c:
         75:21:58:8e:e7:a7:3b:95:87:d3:2d:62:73:95:66:fc:dc:ce:
         0f:96:b8:74:e4:4e:d0:2f:62:58:5b:d8:39:0e:26:c2:37:fd:
         0c:ff:7b:9d:f3:7b:8a:bb:4f:49:a2:f6:c2:dc:4f:00:6c:62:
         b7:9d:3a:0c:31:6c:e1:ae:f6:6e:50:9d:97:04:4a:aa:c9:94:
         26:33:16:03:26:0c:aa:89:db:2a:2d:56:d7:ef:69:fa:83:e9:
         b5:a1:c8:50:f1:84:0b:6c:1e:41:3a:09:dd:2a:af:48:f6:0c:
         00:f7:97:b4:e7:ff:94:5e:3f:4c:a6:89:80:da:2b:94:61:38:
         10:ec:23:52:6e:de:5d:96:a9:f6:42:60:c6:1d:4b:b2:93:16:
         bb:a4:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:38 2025 by rpki-client