Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17be945b-e292-3a74-bba1-c34b82ed01e4.roa
File:                     17be945b-e292-3a74-bba1-c34b82ed01e4.roa (raw, json)
Hash identifier:          rH7JN72K0jFXwbmNfZaq9jpna1tmVi6NDCu1esuGQiE=
Subject key identifier:   E1:97:85:7C:12:F8:C1:55:D0:5A:41:3E:E0:D0:00:9C:A6:71:2B:EF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B56D7323CC763C3C48AEFB1C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17be945b-e292-3a74-bba1-c34b82ed01e4.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     6939
IP address blocks:        136.0.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:32:3c:c7:63:c3:c4:8a:ef:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=dfbcce0b-dbd6-4833-9318-b9c0318b6390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e1:a4:45:6b:11:4b:ea:98:52:9e:3a:a4:84:
                    c5:f9:5b:53:38:56:87:02:7a:36:a4:81:b4:70:12:
                    bc:5a:96:94:44:18:bf:df:b9:94:df:97:45:de:6e:
                    2a:03:c7:38:7c:c3:0a:9a:ca:13:e2:e7:69:bd:eb:
                    d6:8c:da:40:11:d0:43:1b:5c:50:a5:a2:7c:fd:46:
                    a5:10:07:f1:5e:77:8b:11:e3:72:98:7e:6b:d1:38:
                    be:e6:1b:3b:4d:31:ee:fb:7e:d9:97:d6:02:02:72:
                    27:36:fc:3e:56:e8:ff:b8:bb:3e:cf:84:ea:d5:2e:
                    56:9e:13:d9:21:1b:31:87:e9:06:c8:a6:65:a2:d8:
                    e1:dd:71:39:b8:a8:1b:6c:79:1e:c8:54:f4:c4:ee:
                    81:88:92:62:51:f9:02:03:17:07:98:1f:d6:b4:0a:
                    a1:3c:47:83:36:30:43:16:2b:2a:19:18:6f:87:06:
                    11:c1:b3:62:19:c1:1d:c5:47:a5:d6:83:f4:45:32:
                    32:63:34:d9:3e:2e:6c:5f:85:38:ea:c7:1a:5b:a6:
                    79:d2:89:0f:df:ca:fb:57:7b:3a:1c:05:8a:ad:12:
                    d2:f1:92:54:e4:25:a0:d1:86:01:dd:1d:ee:f2:fb:
                    49:5a:dc:26:4d:2d:88:13:27:5f:09:84:a5:dc:94:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:97:85:7C:12:F8:C1:55:D0:5A:41:3E:E0:D0:00:9C:A6:71:2B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17be945b-e292-3a74-bba1-c34b82ed01e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:8d:ca:14:6e:da:08:02:9d:18:9f:7c:49:90:96:8a:eb:3b:
         cc:12:65:4e:d0:e4:f0:1c:3b:b5:1f:b2:56:1b:62:3c:14:cc:
         04:57:f0:be:d5:8f:a6:80:5d:e4:4d:e6:2b:3c:85:c0:5c:98:
         bc:15:03:6b:db:d3:b5:7d:b4:88:26:c5:7f:46:4b:73:55:8a:
         ba:da:71:41:0a:46:c1:05:d6:79:25:88:80:07:1e:71:5e:75:
         3f:4b:33:f6:fc:28:32:08:6f:c7:a5:65:be:3b:d3:8f:7b:ba:
         f3:75:27:9a:25:c6:48:be:4f:9f:5f:43:77:39:53:0a:00:72:
         13:2a:67:b4:72:9e:7c:69:0c:22:79:db:83:06:35:ae:61:2c:
         51:32:c8:64:15:1f:97:f3:f6:8b:bc:e6:56:04:48:c8:51:13:
         ac:9d:ce:66:eb:6d:d0:3c:d0:34:b4:3d:d7:9f:e2:c2:9e:95:
         31:ba:c8:37:ed:fb:66:13:f6:a8:e0:c6:d6:d4:a0:3d:48:7b:
         04:33:25:3d:71:90:b8:df:b1:ed:dc:22:8b:e5:69:e5:c8:15:
         88:17:ba:eb:ac:73:e9:e1:2a:2f:d1:5a:42:de:42:54:bc:47:
         eb:0b:2c:e2:28:84:ec:7b:15:dd:80:d5:90:0c:e8:cb:71:2d:
         b9:63:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:15 2025 by rpki-client