Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/64c1bfd7-8ab9-3575-9d9d-ab2c455f5a6a.roa
File:                     64c1bfd7-8ab9-3575-9d9d-ab2c455f5a6a.roa (raw, json)
Hash identifier:          GnInoALZN1gArsSFjIYt1174lEms+VIp7zMDDRJ1UUA=
Subject key identifier:   4D:CE:07:EA:4F:37:08:D6:96:6A:9B:E6:84:97:60:09:87:80:E2:72
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B52A75BE003CCAD59E20C6A00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/64c1bfd7-8ab9-3575-9d9d-ab2c455f5a6a.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     209854
IP address blocks:        136.0.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:5b:e0:03:cc:ad:59:e2:0c:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=d2af72fe-8e33-4614-a98e-4e94f9e6a0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:b2:d5:99:8f:bf:19:eb:29:f1:07:08:fa:
                    f9:db:98:00:a7:58:8b:81:d4:c0:f5:56:e3:ae:10:
                    52:92:87:49:54:b7:9d:5d:c4:2d:d4:17:74:1e:9c:
                    90:f4:5f:e2:ea:59:0d:a3:bd:0d:e3:e9:9e:9c:62:
                    82:f1:33:0e:23:82:78:fc:a0:29:76:56:48:45:aa:
                    af:5c:02:5e:fd:a8:1d:33:2f:eb:59:ce:fc:62:dc:
                    21:d7:41:9c:8e:a0:77:af:4c:8c:fb:11:b5:b2:30:
                    1c:90:cb:7d:a7:d2:56:63:c0:44:ad:38:0f:ed:36:
                    96:94:0f:1b:10:0a:e5:1e:93:e7:8f:3a:b0:b6:40:
                    9c:42:ba:ef:3b:03:cf:6b:41:98:92:dd:68:d6:c8:
                    e7:3b:0e:01:8b:5a:9a:91:87:40:ac:c9:8b:e6:1a:
                    49:f4:8b:1f:fd:1f:bb:64:0b:d6:6e:c8:6e:de:3e:
                    14:48:15:70:48:bc:7b:2d:4b:6e:5e:4b:9c:7e:3c:
                    43:98:6b:40:58:4a:40:c1:ed:1e:29:24:71:4a:9c:
                    00:f6:43:5c:eb:c7:9f:fd:f8:aa:55:ed:74:b2:5f:
                    02:3e:76:f4:34:6c:3a:18:5c:a4:89:8d:d4:24:ec:
                    08:ae:11:a9:a4:40:ad:c9:7c:38:b9:3b:90:93:85:
                    33:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CE:07:EA:4F:37:08:D6:96:6A:9B:E6:84:97:60:09:87:80:E2:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/64c1bfd7-8ab9-3575-9d9d-ab2c455f5a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b6:7a:29:7c:99:2f:80:ef:cf:a4:a3:e2:34:bc:07:cb:d1:
         b6:2d:2d:4b:4d:d2:5a:f5:53:51:12:96:b1:e7:93:26:4c:c5:
         a6:a8:98:42:e8:3d:38:2d:5d:aa:1a:e5:df:a8:56:65:d3:b0:
         d6:84:98:58:6f:10:ed:f2:96:e3:3e:d8:fe:45:0a:73:0e:8d:
         6a:53:24:77:84:f2:32:03:d2:b1:f7:97:8f:c7:a5:50:cf:1f:
         e9:49:d7:9a:7f:4c:f4:7a:65:b3:9b:0f:a1:ab:22:98:ca:6e:
         3b:29:a8:9a:07:69:b6:a6:e2:7f:eb:4d:a9:74:d4:47:da:d6:
         42:a1:59:8e:8b:53:97:26:5d:57:fa:2c:f5:3d:e9:14:c7:9d:
         62:ea:b9:df:b5:5e:80:09:7b:30:8b:87:d5:6e:10:f1:36:ce:
         27:60:5f:8e:be:e8:00:c1:bb:b2:32:27:61:4d:f2:b0:d8:1f:
         55:7b:8d:45:8f:ff:eb:d1:80:eb:a3:46:cd:83:ca:0a:12:90:
         87:41:38:67:1f:d0:9b:6a:33:ee:73:2d:90:eb:df:9d:19:5c:
         b2:c5:99:6a:7e:b3:06:4c:c8:79:89:7c:dd:18:52:59:d8:e4:
         8c:35:6e:99:2a:88:fb:36:c6:3d:51:66:0a:90:56:6f:67:64:
         16:2e:f9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:21 2025 by rpki-client