Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/71a135ef-7814-382b-9b02-f3624da4613f.roa
File:                     71a135ef-7814-382b-9b02-f3624da4613f.roa (raw, json)
Hash identifier:          2xwJC+xoVqJH1vQWP196EeIRsFGVWv4w/djU+3BxdFI=
Subject key identifier:   0C:37:04:BC:DA:20:51:6E:3D:72:94:8B:AD:E3:3F:5C:77:E4:0F:4F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B52A75BD300C1914D9F117BB0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/71a135ef-7814-382b-9b02-f3624da4613f.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     209854
IP address blocks:        136.0.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:5b:d3:00:c1:91:4d:9f:11:7b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=d0ae0c95-dc3a-46d2-a8a9-90b0d9f518bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:6e:71:3e:a2:7d:f1:63:46:19:5d:b5:5a:
                    21:77:f9:9c:b6:d6:c1:a5:10:f7:53:6b:28:1a:aa:
                    e0:43:4b:f3:f6:41:df:92:bc:29:23:6c:b6:e1:3f:
                    9b:26:e4:19:d4:87:81:4c:be:39:9e:f1:da:a9:f5:
                    c3:37:db:b4:b8:04:02:71:f8:b9:21:ae:40:b1:e4:
                    99:3a:f5:fd:09:e8:81:f4:42:22:0b:2a:fb:8c:98:
                    4b:e7:23:70:6a:f3:7c:f6:3a:73:3e:ba:df:06:c5:
                    d8:01:0b:34:2a:c9:38:9a:ea:69:f9:23:57:dd:c9:
                    67:f2:fb:49:d5:25:ed:d4:cf:2c:e1:fc:0b:02:b9:
                    5e:40:e9:09:3d:ad:60:1c:59:2f:3e:a7:0d:59:30:
                    2e:36:77:f5:ef:fb:fb:57:85:b2:46:a2:ea:7e:16:
                    d4:d2:49:00:93:33:66:63:a4:79:61:2f:63:5d:fe:
                    40:7e:64:52:d5:4e:e7:1f:10:df:46:bf:bc:7f:07:
                    8c:de:c2:c6:49:9d:3f:e0:c6:00:cf:64:41:e1:09:
                    3b:d2:b1:31:e0:a7:f8:9c:a8:c7:74:5e:89:d1:2d:
                    58:89:9c:bc:1b:74:e2:20:a0:b9:aa:4c:d0:2e:17:
                    ad:01:3c:fc:e9:1e:e8:23:50:08:03:6c:b2:cd:2c:
                    97:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:04:BC:DA:20:51:6E:3D:72:94:8B:AD:E3:3F:5C:77:E4:0F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/71a135ef-7814-382b-9b02-f3624da4613f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6f:f2:6e:f0:dc:50:47:7f:eb:cb:98:fa:62:5b:38:b9:73:
         b1:ec:60:f7:68:1b:4e:e9:91:d9:20:cb:d2:39:00:a9:a8:42:
         98:d2:10:1f:ae:e0:7b:8f:ea:29:5e:65:a3:62:02:bc:89:73:
         6f:80:10:0d:6e:09:5e:20:d3:5d:66:b5:27:77:b0:7e:9d:69:
         6b:96:c7:7c:a9:ed:2f:b6:d4:34:30:47:4c:c5:65:2e:d0:f1:
         06:f9:9a:23:07:f8:17:52:28:09:08:0e:92:e7:c7:75:73:5b:
         bf:02:2a:2a:9e:a3:df:f4:d9:7d:56:20:fb:ac:05:45:f5:a1:
         78:21:ac:10:21:df:87:1a:1e:d2:8c:11:0a:ac:ec:07:30:0d:
         e6:e4:6d:68:3b:d5:db:6b:b1:42:08:27:ce:a9:70:71:0c:2a:
         c8:57:f0:b9:66:5c:d4:27:17:75:8e:d5:66:56:12:cf:60:64:
         89:b8:d1:95:bf:78:64:f6:d4:63:c9:62:c5:70:1f:13:6b:2e:
         51:c2:83:6d:84:df:bb:aa:b1:59:51:73:c0:78:8b:ed:8a:31:
         8a:0a:b3:2b:8b:c3:d5:2f:9e:93:91:5e:02:e9:99:66:7a:22:
         2e:8a:4b:69:62:3b:b1:1c:b5:d7:2e:86:6b:65:d2:11:f5:e1:
         b0:2a:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:47:32 2025 by rpki-client