Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25285223-04c1-35e5-98cb-b7f8a599cc7b.roa
File:                     25285223-04c1-35e5-98cb-b7f8a599cc7b.roa (raw, json)
Hash identifier:          fgNhOIWiVfGW0LGJNm1RdKhH6kJoY7/qrkGgNIvRpZc=
Subject key identifier:   3D:09:37:43:16:B6:D9:16:6A:0A:CC:FE:AD:10:7E:5B:F9:8A:4C:6D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B758CAA8BCF321604BD75D680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25285223-04c1-35e5-98cb-b7f8a599cc7b.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     7018
IP address blocks:        136.0.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:aa:8b:cf:32:16:04:bd:75:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=a8196843-908b-46e5-8ff5-e577e898d13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:a3:e9:a8:da:80:eb:9f:22:5c:8d:fe:0c:
                    85:5c:03:e0:16:0a:6e:64:47:9f:9d:9f:76:ad:ac:
                    69:41:da:01:b0:bb:99:1f:84:b3:0c:ce:26:24:b2:
                    54:21:2e:4a:29:45:08:fa:1a:dc:c7:a8:2e:e0:29:
                    c9:de:a6:58:32:54:31:00:14:fd:19:b2:78:e8:42:
                    26:66:f4:e0:ac:7b:57:e4:05:d1:8b:bc:95:37:6c:
                    52:64:5d:04:e4:7c:3e:2a:04:0b:77:96:6c:1f:a7:
                    c1:4c:d1:62:56:27:c9:ff:19:0c:d3:1e:9d:22:35:
                    75:7a:60:51:3b:69:c7:86:fa:63:95:c9:ea:c5:99:
                    a3:f9:58:c0:fc:d3:35:e1:31:ab:7c:8b:ae:e6:ac:
                    a8:bd:bf:99:57:8d:88:f6:72:b6:b4:fe:e3:b9:7e:
                    bf:d7:4a:49:79:ae:80:22:15:67:d2:74:e6:c2:03:
                    54:7b:ed:cd:9e:97:37:41:52:c7:a5:d4:46:08:83:
                    d9:c8:1d:85:f5:2d:b9:fa:af:e3:6b:32:89:0f:ca:
                    3d:85:bc:51:b7:34:4a:55:45:4f:63:e1:cd:d0:83:
                    dc:91:03:ff:97:95:c9:cf:74:c5:98:81:6c:e9:e8:
                    71:85:2e:d2:00:86:4f:b4:c1:74:10:f7:e5:fa:2e:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:09:37:43:16:B6:D9:16:6A:0A:CC:FE:AD:10:7E:5B:F9:8A:4C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25285223-04c1-35e5-98cb-b7f8a599cc7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:05:a3:ca:e7:99:c0:a2:61:af:7e:f0:7c:c0:77:e7:58:e8:
         5a:1e:a6:64:d0:3d:5b:df:f2:30:4f:ac:fe:8d:4c:ff:eb:f1:
         a6:76:c3:4f:c9:9d:cf:5a:ba:ec:63:9b:81:7a:0f:da:c7:2f:
         bb:4a:29:3d:fc:de:17:40:c8:7f:26:36:81:ab:1a:b3:0e:2c:
         ad:3c:8a:4b:32:2c:7f:6d:18:6b:07:3f:57:e7:2d:1e:f4:e4:
         d7:11:1e:59:f0:52:c1:17:93:8b:45:e1:7b:82:45:f2:28:72:
         9c:5d:f1:a2:3e:32:63:a4:89:12:29:5d:47:8b:ad:04:17:53:
         b0:b6:5d:4f:c9:64:64:33:16:43:ea:28:81:97:05:d0:1d:3e:
         f5:d4:dc:a7:c9:c2:c3:62:73:7f:fc:87:30:22:70:c6:d3:05:
         d0:82:a1:7b:94:dc:7d:ad:61:47:53:e5:e0:91:1a:73:02:24:
         5c:08:24:41:6f:41:99:76:59:ab:99:f5:d3:55:63:36:f0:2a:
         42:75:a1:e6:46:49:ba:18:1c:1c:a7:4c:c4:6b:ae:83:31:bb:
         b0:f0:42:bc:70:57:2b:3b:2c:c5:22:42:1c:7a:7f:90:e3:54:
         a5:ca:91:76:cc:ac:f6:a4:36:b9:f6:e4:5e:73:76:e3:fc:bf:
         75:81:d5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:47:19 2025 by rpki-client