Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d25187f-d385-3904-bec5-b15e1c528a26.roa
File:                     2d25187f-d385-3904-bec5-b15e1c528a26.roa (raw, json)
Hash identifier:          tJT7SN0k5XdBR+9qlo4SXHS4YlguqBTpnJ1hwO7UTtA=
Subject key identifier:   14:1A:2B:46:FB:00:CE:37:18:04:F3:71:90:DB:88:78:E0:37:87:EC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B758CAAB0249B8BCF5849AD80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d25187f-d385-3904-bec5-b15e1c528a26.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     7018
IP address blocks:        136.0.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:aa:b0:24:9b:8b:cf:58:49:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=829e4580-49a5-4251-b847-40b4bf08d065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:55:d3:2d:1c:dc:71:86:91:fc:52:1f:84:
                    2a:99:24:fc:4a:7b:d4:a8:c2:75:36:36:92:53:a1:
                    7c:ec:3c:1c:69:a7:89:b8:48:ce:4d:5d:07:ac:a0:
                    0c:1d:03:f1:29:75:65:5f:4f:34:f3:ad:27:38:24:
                    7a:de:20:8c:05:23:86:c3:19:13:29:24:56:e7:9c:
                    40:dc:f8:cb:7f:ba:ad:fe:d1:56:08:19:c6:ad:ef:
                    e1:97:64:36:8c:42:76:83:b6:ad:0f:c4:9e:19:ed:
                    8f:c7:84:18:40:87:bd:c1:4a:63:0d:fd:16:27:95:
                    e8:e6:18:b7:30:0d:44:57:0e:6d:69:b3:52:ff:f0:
                    60:98:49:4a:a1:0d:f8:35:13:b1:37:e7:6c:89:22:
                    08:24:f3:b8:24:23:22:37:5b:6a:37:f2:f5:50:cd:
                    34:49:a5:6a:4b:ad:60:fa:0a:32:a9:22:62:a9:86:
                    77:9c:23:16:65:f6:22:2e:41:8e:4a:58:bf:e0:12:
                    60:b7:21:ec:11:b1:a5:6c:94:b9:d7:2e:48:26:24:
                    0f:a3:5d:63:b7:5e:04:db:45:aa:de:cf:9d:e9:49:
                    55:eb:24:d3:57:69:c7:b4:2a:88:2b:82:e7:14:95:
                    b2:e7:ca:a8:50:7d:56:f9:b1:06:64:04:9a:ec:71:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1A:2B:46:FB:00:CE:37:18:04:F3:71:90:DB:88:78:E0:37:87:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d25187f-d385-3904-bec5-b15e1c528a26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8b:99:1a:a4:7b:20:64:cd:d8:6b:b9:ef:a6:b4:46:c3:be:
         b2:e0:8b:7d:f4:d1:4f:51:9d:16:ce:b2:6b:cb:1e:3a:d7:4a:
         14:23:a2:7a:81:b6:24:fa:a2:cb:9a:f9:63:bf:fb:e4:67:7a:
         83:c1:3e:85:9d:63:6d:0e:77:af:ea:70:b4:0c:38:8e:31:b2:
         eb:05:f7:67:e4:a7:5a:61:7f:92:33:b4:35:a8:bb:21:38:45:
         03:26:7a:43:42:e4:e0:4c:4e:5a:45:20:d0:ea:5d:73:d9:9c:
         4f:3d:ff:50:30:8e:ae:4f:cc:57:15:aa:b6:3b:37:bd:22:aa:
         61:b7:09:19:06:72:a4:5c:5a:21:aa:01:29:4d:28:52:9b:16:
         27:57:87:dd:13:69:74:10:87:c4:a2:22:9a:11:6d:55:2c:a3:
         cd:b2:90:2b:3e:62:11:89:51:28:26:5a:e1:d4:fc:72:c9:fc:
         38:4d:c8:df:5f:4d:91:8c:35:13:2b:75:cb:5f:b7:f9:44:98:
         dd:e8:3c:3e:4c:42:0c:6b:c3:da:31:d6:fa:70:3b:52:c6:39:
         30:cb:d2:9f:c2:b5:30:cc:a2:c6:1e:a4:5e:8d:ff:9f:80:f7:
         33:f3:40:e0:f3:72:9a:b4:d7:9a:e8:96:d5:b7:c4:52:82:c7:
         c8:f1:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:47:24 2025 by rpki-client