Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16f2eff7-c32d-30e7-a2df-8ee2c2454ff3.roa
File:                     16f2eff7-c32d-30e7-a2df-8ee2c2454ff3.roa (raw, json)
Hash identifier:          lf2QTsIkSiuW1iVLLgPD48w1AbMgxQrlE9gGABB1gvM=
Subject key identifier:   FD:EF:71:CC:CF:D2:30:FF:C1:02:21:67:FD:9F:43:11:53:4F:50:FA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B35570844D76E61F6FAEB4D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16f2eff7-c32d-30e7-a2df-8ee2c2454ff3.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     7018
IP address blocks:        136.0.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:57:08:44:d7:6e:61:f6:fa:eb:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=afbc4272-a400-4b46-b4f5-406a1c205e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:ef:56:4f:1d:67:be:3e:85:98:6a:fa:20:
                    98:aa:2f:56:4b:e9:f2:b4:87:8b:8e:36:63:31:84:
                    2f:68:1f:30:08:07:d9:ce:12:d4:29:54:99:1d:d5:
                    7a:ad:b9:fa:81:ab:34:33:be:10:0f:73:71:c6:2d:
                    62:b4:ae:c9:56:8e:41:6a:52:7e:33:4b:a4:83:64:
                    45:9a:10:c2:ec:41:dd:35:8d:64:8d:61:a3:5f:4a:
                    6c:00:66:25:61:72:ee:57:62:f7:9b:67:f9:a3:10:
                    d9:a1:ac:b0:03:df:91:5b:38:41:2f:7c:cc:91:61:
                    ea:5d:d6:ef:e4:ab:a2:be:18:71:d7:1f:ad:4b:4c:
                    61:b9:3f:39:cb:d6:7b:d9:4c:58:0e:ed:2c:68:93:
                    b5:2d:1e:b0:d0:0a:b7:d4:1e:59:13:90:7d:a1:54:
                    c4:d4:fe:2b:d2:78:41:08:46:d6:61:5b:ca:a9:13:
                    8b:6d:b1:fc:f9:7f:c2:94:bb:0d:c9:20:b0:92:c6:
                    90:10:dc:24:59:d2:10:57:1e:ee:2e:49:a5:e6:86:
                    87:c5:99:99:a7:8f:43:97:79:15:80:ba:b1:cc:a9:
                    fd:1f:0a:2f:30:eb:3f:de:33:7b:31:f9:8a:34:40:
                    97:37:ea:26:5e:98:e3:22:d9:95:24:9c:58:04:50:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:71:CC:CF:D2:30:FF:C1:02:21:67:FD:9F:43:11:53:4F:50:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/16f2eff7-c32d-30e7-a2df-8ee2c2454ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:51:d9:eb:5c:db:dd:d1:2c:c8:ae:9e:5d:1b:02:5d:95:65:
         60:10:f6:cc:9c:73:ef:91:b0:4f:8a:96:38:3c:ee:da:c3:9a:
         28:36:5b:cf:34:a6:f3:67:fd:29:e1:ed:66:8e:c9:41:14:0b:
         4e:bc:f5:1a:30:56:3e:8b:2b:39:d0:82:e0:05:fd:f5:d4:35:
         d4:6f:f2:67:52:fa:69:9b:2c:28:b0:92:57:72:50:5f:30:a2:
         e6:6c:b9:3b:48:e2:f6:4a:35:3f:98:dd:84:a6:79:83:a3:04:
         14:21:fa:9b:3d:8a:c7:2c:8c:73:f5:86:6e:0c:6c:0b:23:87:
         27:a9:86:7a:73:4a:71:46:da:27:56:4d:1f:d2:fb:20:7b:5c:
         d2:53:d9:9c:6b:09:5c:b6:4c:c8:ff:d0:bc:71:dd:cb:de:2d:
         31:be:b1:7d:b8:19:5f:b7:cb:d6:6b:7a:87:ca:1a:30:3a:d1:
         92:9f:fd:95:4f:f7:4d:c9:d3:89:14:f0:f7:36:0e:32:14:43:
         fe:b1:0d:3b:76:0b:9c:37:5b:2b:06:01:f8:9a:e3:5c:b7:10:
         35:8f:26:f7:83:88:07:99:92:31:0d:c9:35:e6:37:7d:22:29:
         49:c1:9f:95:38:1b:1b:85:74:97:99:a9:d7:c3:55:34:1d:c7:
         9a:a3:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:50 2025 by rpki-client