Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4785d513-3aa6-3de1-a0cd-e6fbf0ea6da1.roa
File:                     4785d513-3aa6-3de1-a0cd-e6fbf0ea6da1.roa (raw, json)
Hash identifier:          N6td+w8Q6pY/w4lpHyDrpmqUB3cV1kR+ftZBy3nTtJM=
Subject key identifier:   AE:66:3E:BA:42:EF:0C:B9:D0:81:85:96:85:F3:56:9E:00:36:4B:FD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B25FC424C6A38293DCDF55000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4785d513-3aa6-3de1-a0cd-e6fbf0ea6da1.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     137409
IP address blocks:        136.0.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:42:4c:6a:38:29:3d:cd:f5:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=7fd7dc69-10c6-4985-978e-77ebc2132493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:d6:d6:10:91:f0:ad:53:f7:ae:0d:a1:ff:
                    ca:d8:b3:40:a7:ca:e5:15:a4:b5:16:6b:83:54:ae:
                    b6:1e:34:90:f5:b0:30:a0:7b:2a:29:b7:21:35:7b:
                    c9:6d:b9:5f:c1:07:44:24:90:aa:fc:09:03:c1:61:
                    e9:a3:53:3a:b2:9f:14:76:7e:8a:67:56:72:ed:aa:
                    8c:fa:84:2f:b5:83:c2:44:0e:50:cc:6a:7d:48:13:
                    e7:bb:d9:c8:21:75:d5:e6:97:7c:15:53:92:5c:93:
                    9d:3e:8f:3f:46:db:f3:ab:38:52:a9:87:c9:c2:a1:
                    1b:24:7a:fd:02:0b:d2:b8:6c:93:74:3e:50:88:46:
                    4e:c5:25:11:a0:0f:6b:fd:e1:d2:13:3e:ca:bb:6b:
                    8e:88:0a:8d:5b:1a:e3:b8:65:0f:4f:f8:f6:30:9e:
                    6c:b1:ba:d5:28:51:dd:6f:01:b9:f8:a5:27:63:9e:
                    c6:ab:2b:15:73:e0:1f:d8:66:3b:6a:3f:8b:b2:f0:
                    07:40:5a:20:ae:e7:f8:39:28:71:2b:11:8d:9a:f1:
                    7e:5a:79:4f:c1:f8:26:d1:3d:ae:ac:87:0d:bb:f0:
                    db:a0:de:b0:ac:28:d3:a7:df:df:9c:61:53:57:b9:
                    43:f3:8a:8c:d1:76:2a:7f:66:f2:ea:57:58:b7:28:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:66:3E:BA:42:EF:0C:B9:D0:81:85:96:85:F3:56:9E:00:36:4B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4785d513-3aa6-3de1-a0cd-e6fbf0ea6da1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f8:0e:6b:ae:a5:75:13:f6:cd:88:27:59:22:10:1f:03:a0:
         1f:e5:93:92:d3:9f:c0:6d:b2:ae:01:b2:ce:6c:07:76:42:08:
         42:69:be:dd:80:ad:35:34:62:70:f4:a3:93:70:19:0d:96:57:
         83:53:88:32:46:50:e7:74:f2:c8:04:01:d1:9f:ab:e3:13:fb:
         04:1b:f8:5b:c0:48:81:b2:b3:d8:ad:87:65:b0:64:08:03:09:
         66:24:47:a5:cd:18:a6:52:ea:d9:b1:b6:22:18:c9:09:be:12:
         73:b3:f0:c3:71:14:94:9e:06:06:3b:e2:d1:a5:36:85:62:55:
         d4:79:99:66:7b:17:be:67:8e:2d:7c:ea:af:28:85:30:41:22:
         42:74:e6:56:c7:16:32:e0:66:f6:9c:c2:04:77:ad:c0:3e:e8:
         46:5c:21:8c:f3:88:e0:34:28:b9:b5:41:b4:2b:ac:e9:f2:c5:
         b2:0d:76:63:db:3f:95:ba:19:07:68:fd:dd:8e:49:bb:03:7f:
         64:c2:0e:28:a4:37:5f:4f:86:d8:ca:63:a0:43:c5:83:17:cb:
         e8:18:a3:59:2f:53:4a:7d:0e:07:ac:2a:b7:0d:33:c8:1d:d0:
         e0:77:1f:db:a5:70:b5:5d:0f:c7:38:3d:8c:33:2d:54:f9:69:
         20:18:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:43:03 2025 by rpki-client