Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/729f1276-dc64-39c5-9b67-e31aa4eaf6bf.roa
File:                     729f1276-dc64-39c5-9b67-e31aa4eaf6bf.roa (raw, json)
Hash identifier:          qRB/B5b7baFPgB9l25q7vtv0Cr+V1pITSETdcWJ+x+k=
Subject key identifier:   23:4E:17:42:79:87:C8:37:39:59:DA:2D:E7:B7:48:8B:82:89:D7:61
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B56D73360F3696B4571F060A0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/729f1276-dc64-39c5-9b67-e31aa4eaf6bf.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     18530
IP address blocks:        136.0.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:33:60:f3:69:6b:45:71:f0:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=94d3b580-4039-4e49-9e3d-89a69af69fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:c5:a4:c4:16:df:72:18:f7:c3:f1:2d:80:
                    57:c5:12:cb:f7:3f:33:52:90:a6:5b:6b:c6:89:7c:
                    e4:03:24:98:92:ef:b4:ce:06:07:8d:c8:ed:3f:78:
                    11:fb:54:24:cd:e6:38:8e:98:81:82:78:f4:53:64:
                    6b:27:77:76:3b:cd:dc:69:43:6a:51:b5:04:eb:14:
                    c1:78:a4:90:f2:d4:81:dd:fe:91:00:b8:6e:5c:6d:
                    15:c7:c2:e3:c5:af:89:a8:74:0e:db:0d:31:8f:0c:
                    f5:e2:6e:8b:99:6b:50:ee:3e:8c:db:e4:bf:a8:9d:
                    73:1d:a7:56:34:c6:48:0e:94:d0:f8:e6:8f:d8:7b:
                    1a:ee:ad:99:3b:20:28:0d:81:94:f4:9c:09:0f:66:
                    2c:91:06:8e:c5:60:e2:13:64:ad:ca:56:39:11:c0:
                    2a:57:c5:51:11:72:4f:bb:9f:d5:f5:27:0c:43:98:
                    a5:13:71:44:ed:60:02:8e:d0:0a:49:cf:6d:47:10:
                    81:54:c2:22:d9:55:21:89:77:13:b6:d1:29:3d:81:
                    4f:ba:9a:8b:75:7f:1b:7d:7b:07:68:8c:33:c9:0f:
                    b5:03:63:c5:8b:a7:40:77:46:bb:c3:e0:5e:8b:42:
                    f6:ce:e5:85:31:c0:9d:99:55:cd:8d:31:ed:5f:d5:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4E:17:42:79:87:C8:37:39:59:DA:2D:E7:B7:48:8B:82:89:D7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/729f1276-dc64-39c5-9b67-e31aa4eaf6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:18:28:6f:3e:13:41:cf:81:6c:db:f6:84:83:5e:3a:84:
         a0:32:b0:f2:67:8c:c4:bd:46:05:8d:7b:bb:29:73:5d:7a:75:
         b4:ed:1a:81:61:39:95:81:af:54:17:79:a8:b6:cd:1d:d5:d9:
         48:3e:e4:42:5a:34:e2:8f:5a:d5:d3:af:73:28:ed:5b:0b:61:
         34:5c:0b:b3:3f:83:a7:96:4f:e2:22:a5:cc:78:9c:28:1f:5a:
         fd:a3:b2:80:1f:b1:f4:74:ff:0d:2c:3e:06:66:2e:2a:30:e1:
         47:c5:a7:fc:30:6b:a8:34:df:d7:73:34:22:c2:81:21:a2:61:
         d2:83:ff:75:ba:35:b4:c3:b0:2e:b6:f3:4d:47:dd:3d:fe:e5:
         da:7b:7e:90:b8:1a:0c:2e:82:40:d2:f1:28:f5:d3:ef:29:70:
         2b:e2:d3:4f:92:1a:9d:05:42:18:69:56:ab:f1:e7:3a:b8:ce:
         75:84:4a:bd:6e:d5:f9:61:b5:57:8a:cb:02:b3:ba:0a:b7:ee:
         7e:91:f6:24:9d:dd:2c:9c:e4:e4:46:3b:29:47:58:57:98:d5:
         d3:70:97:bf:9d:25:5f:a5:1c:ec:bf:86:81:f1:0c:7a:db:92:
         c5:eb:97:3e:09:7d:ee:32:e1:6e:dd:d3:d6:bd:f6:78:0f:09:
         fd:f9:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:16 2025 by rpki-client