Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/71064e7a-e71a-3a3b-a50c-53e36b661cde.roa
File:                     71064e7a-e71a-3a3b-a50c-53e36b661cde.roa (raw, json)
Hash identifier:          m7jW2vY/5B3Ox8QUezVCdeH5tmrMzFiWn7WcZTsr6m0=
Subject key identifier:   4F:F3:C2:64:63:FB:82:92:CD:E9:7D:86:82:BD:5F:2A:96:BF:C7:2A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B59A1DF7689F20724B8DE4900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/71064e7a-e71a-3a3b-a50c-53e36b661cde.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     213823
IP address blocks:        136.0.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:df:76:89:f2:07:24:b8:de:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=53e3220d-245a-416f-a5f7-7c14cc009878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:4d:c8:4e:31:d1:b8:85:9d:fc:47:24:57:
                    89:7c:9a:4b:44:73:82:02:f7:e2:0b:e5:44:69:2b:
                    06:d0:7b:aa:a2:75:0e:b9:8e:b5:bb:94:94:67:8f:
                    20:34:a5:db:e4:3d:13:2e:60:b8:e8:a6:a2:77:38:
                    fb:81:9d:e4:8b:37:08:69:5e:b9:ae:f7:ed:4b:39:
                    88:81:9f:15:1d:77:a8:ef:83:b9:3f:4a:31:6f:7d:
                    a8:f0:6f:fd:78:9c:56:26:fc:c0:df:60:63:9d:2c:
                    44:55:9b:77:64:59:7c:d1:8c:d1:a6:e2:03:90:ac:
                    db:dc:62:fd:ca:b2:79:55:0b:ac:1e:82:85:74:d6:
                    93:7b:54:e4:54:19:df:45:49:ee:d6:65:f0:a7:4c:
                    60:03:8c:b4:10:33:f0:3d:48:ee:8a:3c:e8:03:91:
                    c3:d9:8d:55:3a:0d:88:70:65:cb:7e:57:d3:32:2f:
                    00:f3:b0:71:f1:06:d3:cd:96:56:ca:6e:b1:be:f2:
                    2a:68:dc:20:01:6c:bc:8a:2d:c2:f2:5c:a1:3b:d5:
                    e9:47:25:f6:d8:aa:ee:7b:10:b2:a3:26:8d:26:06:
                    3f:58:a0:6d:5a:c9:fe:49:5c:af:2f:25:32:94:fc:
                    54:40:3c:a3:72:c1:10:41:0c:58:3b:12:62:54:ca:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F3:C2:64:63:FB:82:92:CD:E9:7D:86:82:BD:5F:2A:96:BF:C7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/71064e7a-e71a-3a3b-a50c-53e36b661cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:3a:cb:e3:7e:76:d0:b2:a4:e0:8b:46:5f:f7:b5:2b:a0:14:
         f4:3c:8b:42:fb:63:dc:00:ec:cf:6e:8b:23:50:e8:e4:d0:06:
         d0:15:57:28:a7:88:d9:18:1d:ee:bd:03:45:09:36:2e:48:c0:
         f5:84:25:30:24:7d:5f:4f:13:11:51:68:3b:bb:ff:7e:81:d7:
         4b:a4:37:8a:86:15:7a:65:d7:1f:79:f1:bb:3b:c1:6e:34:b5:
         14:b2:38:a1:00:39:50:9f:9d:03:6d:90:b9:d0:a3:58:c7:e5:
         6c:5d:7d:b0:3f:4d:2e:be:49:4d:11:5c:79:f9:c7:29:f2:0c:
         0c:8f:54:ff:57:66:16:32:9d:83:11:08:6e:f8:60:0c:4b:54:
         64:bb:be:c5:f1:64:0d:29:0c:47:1e:16:73:e2:1f:44:9f:82:
         ce:59:1b:cd:6f:19:5a:65:0a:a9:42:6d:a2:15:02:3a:7e:3a:
         d5:72:a8:54:26:39:38:99:9d:67:2c:0e:a6:38:81:b1:c3:6c:
         a0:a3:37:cf:cf:79:9c:ec:83:13:94:f4:0f:94:ea:27:63:2c:
         db:49:9e:70:e0:12:ee:39:45:a9:28:d7:45:0f:2b:1e:fd:06:
         96:43:56:e1:64:84:8b:d0:e3:bd:0f:28:31:76:37:d0:30:f6:
         ab:c2:7a:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZod92ifIHJLjeSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk
NTNlMzIyMGQtMjQ1YS00MTZmLWE1ZjctN2MxNGNjMDA5ODc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ1NyE4x0biFnfxHJFeJfJpLRHOCAvfiC+VE
aSsG0HuqonUOuY61u5SUZ48gNKXb5D0TLmC46Kaidzj7gZ3kizcIaV65rvftSzmI
gZ8VHXeo74O5P0oxb32o8G/9eJxWJvzA32BjnSxEVZt3ZFl80YzRpuIDkKzb3GL9
yrJ5VQusHoKFdNaTe1TkVBnfRUnu1mXwp0xgA4y0EDPwPUjuijzoA5HD2Y1VOg2I
cGXLflfTMi8A87Bx8QbTzZZWym6xvvIqaNwgAWy8ii3C8lyhO9XpRyX22KruexCy
oyaNJgY/WKBtWsn+SVyvLyUylPxUQDyjcsEQQQxYOxJiVMqldQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/zwmRj+4KSzel9hoK9XyqWv8cqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzEwNjRlN2EtZTcxYS0z
YTNiLWE1MGMtNTNlMzZiNjYxY2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADg6y+N+dtCypOCLRl/3tSugFPQ8i0L7Y9wA7M9uiyNQ6OTQBtAVVyin
iNkYHe69A0UJNi5IwPWEJTAkfV9PExFRaDu7/36B10ukN4qGFXpl1x958bs7wW40
tRSyOKEAOVCfnQNtkLnQo1jH5WxdfbA/TS6+SU0RXHn5xynyDAyPVP9XZhYynYMR
CG74YAxLVGS7vsXxZA0pDEceFnPiH0Sfgs5ZG81vGVplCqlCbaIVAjp+OtVyqFQm
OTiZnWcsDqY4gbHDbKCjN8/PeZzsgxOU9A+U6idjLNtJnnDgEu45Rako10UPKx79
BpZDVuFkhIvQ470PKDF2N9Aw9qvCerg=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:43:02 2025 by rpki-client