Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ad630ae-6894-318f-a394-c2835b6ac84a.roa
File:                     4ad630ae-6894-318f-a394-c2835b6ac84a.roa (raw, json)
Hash identifier:          OEjfCeVsafK80wwKl2ZZ6cfcgySyXVKp6S3eC2VjdYM=
Subject key identifier:   DB:AE:FC:61:8B:F6:EA:E1:20:42:EF:E1:B4:F8:30:72:B4:EC:6D:9A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B77AAEE8138B481B437744A40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ad630ae-6894-318f-a394-c2835b6ac84a.roa
Signing time:             Thu 09 Oct 2025 19:13:18 +0000
ROA not before:           Thu 09 Oct 2025 19:13:18 +0000
ROA not after:            Wed 07 Jan 2026 20:13:18 +0000
asID:                     401152
IP address blocks:        136.0.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:aa:ee:81:38:b4:81:b4:37:74:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  9 19:13:18 2025 GMT
            Not After : Jan  7 20:13:18 2026 GMT
        Subject: CN=3b1034c9-3fb9-4b1c-b8a2-d23a2eb062ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5d:88:fc:2b:34:5e:ac:98:f3:b5:21:75:c9:
                    24:95:1b:09:9c:7a:be:42:7b:e2:3e:da:03:30:ed:
                    7e:99:7b:4b:d2:bb:ec:f9:03:f4:84:5e:dd:ee:4b:
                    64:fb:fd:c5:87:8b:3e:54:36:f3:56:93:d9:47:44:
                    55:c5:1d:06:59:73:81:4c:16:24:30:35:b8:e2:18:
                    49:6e:f1:2d:c0:11:4b:b0:fd:dc:4c:84:09:9d:1a:
                    d1:85:ef:e6:eb:d8:a7:8f:34:7c:6f:9c:35:b1:74:
                    60:09:16:be:3b:04:f4:68:78:8f:07:d5:23:8e:38:
                    4d:4c:25:dc:b2:00:95:ad:18:fe:bf:e1:5f:19:13:
                    23:33:61:b4:e0:4b:1a:0d:f0:46:f8:94:f7:62:8d:
                    3b:fa:3b:8c:5a:89:50:e2:b7:62:b9:a7:8c:75:9c:
                    5c:d5:63:2d:78:4a:78:fc:bd:30:a9:a8:c8:56:15:
                    f4:75:87:dc:a2:c2:8f:88:45:00:22:e3:6c:9f:21:
                    5f:cf:ae:96:f9:d0:f5:84:9f:da:d5:26:89:5d:14:
                    e6:88:89:a9:00:7c:b0:c8:f8:fc:df:2e:a4:7c:66:
                    cf:cb:86:1e:7f:0f:11:0f:b8:b9:b8:ca:9a:3c:b4:
                    b1:0b:d2:d5:e0:8b:99:63:7c:29:13:53:e2:31:73:
                    35:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AE:FC:61:8B:F6:EA:E1:20:42:EF:E1:B4:F8:30:72:B4:EC:6D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4ad630ae-6894-318f-a394-c2835b6ac84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:16:5c:32:cc:65:43:db:9b:df:9f:5f:40:f6:d7:cf:e5:ea:
         da:8f:ea:0c:a4:77:af:4b:5d:40:76:bc:99:ea:2f:e3:02:ab:
         a0:fa:50:23:28:74:c3:c8:e8:f7:0f:d4:d5:f7:41:c8:fe:6b:
         ea:c1:5c:00:60:74:cc:34:f9:55:b7:dd:12:c2:e1:bf:c6:1c:
         3e:29:d7:c8:9a:6f:62:ad:05:06:57:f3:ed:56:dc:a2:d6:a3:
         98:df:52:ec:6d:bd:bd:28:ce:3b:31:03:b9:ef:63:80:7b:b3:
         36:48:a5:d7:ea:13:07:e6:3b:b4:82:fa:d4:1f:61:0a:0b:8a:
         48:c4:a6:7a:6e:7d:17:6b:19:87:bf:7a:14:78:f3:fb:0f:02:
         46:4a:3a:3c:dd:98:30:73:cb:db:a8:b1:e0:ff:3c:2c:9e:2b:
         9e:20:6c:e6:34:01:17:22:fc:93:55:04:08:a1:fd:06:dc:63:
         89:ec:20:e1:49:ae:98:6f:13:bb:e8:8f:06:e4:9e:f8:ad:2e:
         97:08:db:1b:7b:ca:ea:7a:c5:a2:04:dd:3d:a3:08:7f:47:1c:
         8b:aa:6a:e2:8d:47:a8:5d:97:e1:48:7d:8a:99:2d:ec:42:93:
         5a:bf:8c:74:e2:d2:ff:c4:cd:3f:c0:0c:c2:4b:2b:51:09:c3:
         c7:47:08:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt3qu6BOLSBtDd0SkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MTAwOTE5MTMxOFoXDTI2MDEwNzIwMTMxOFowLzEtMCsGA1UEAxMk
M2IxMDM0YzktM2ZiOS00YjFjLWI4YTItZDIzYTJlYjA2MmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl2I/Cs0XqyY87UhdckklRsJnHq+QnviPtoD
MO1+mXtL0rvs+QP0hF7d7ktk+/3Fh4s+VDbzVpPZR0RVxR0GWXOBTBYkMDW44hhJ
bvEtwBFLsP3cTIQJnRrRhe/m69injzR8b5w1sXRgCRa+OwT0aHiPB9UjjjhNTCXc
sgCVrRj+v+FfGRMjM2G04EsaDfBG+JT3Yo07+juMWolQ4rdiuaeMdZxc1WMteEp4
/L0wqajIVhX0dYfcosKPiEUAIuNsnyFfz66W+dD1hJ/a1SaJXRTmiImpAHywyPj8
3y6kfGbPy4Yefw8RD7i5uMqaPLSxC9LV4IuZY3wpE1PiMXM1+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNuu/GGL9urhIELv4bT4MHK07G2aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGFkNjMwYWUtNjg5NC0z
MThmLWEzOTQtYzI4MzViNmFjODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUWXDLMZUPbm9+fX0D218/l6tqP6gykd69LXUB2vJnqL+MCq6D6UCMo
dMPI6PcP1NX3Qcj+a+rBXABgdMw0+VW33RLC4b/GHD4p18iab2KtBQZX8+1W3KLW
o5jfUuxtvb0ozjsxA7nvY4B7szZIpdfqEwfmO7SC+tQfYQoLikjEpnpufRdrGYe/
ehR48/sPAkZKOjzdmDBzy9uoseD/PCyeK54gbOY0ARci/JNVBAih/QbcY4nsIOFJ
rphvE7vojwbknvitLpcI2xt7yup6xaIE3T2jCH9HHIuqauKNR6hdl+FIfYqZLexC
k1q/jHTi0v/EzT/ADMJLK1EJw8dHCKM=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:02 2025 by rpki-client