Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89fd28d3-c392-3255-b89a-324172a14ac9.roa
File:                     89fd28d3-c392-3255-b89a-324172a14ac9.roa (raw, json)
Hash identifier:          Pcy+Z38lfueFeSIS6AYog0otMg1XVaysSIrjYedDoSk=
Subject key identifier:   C0:E8:47:7F:A6:11:D5:28:66:44:A4:59:B7:64:6E:72:1A:43:62:09
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A87B8AA1C33FC763316A5D920
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89fd28d3-c392-3255-b89a-324172a14ac9.roa
Signing time:             Tue 15 Jul 2025 20:26:58 +0000
ROA not before:           Tue 15 Jul 2025 20:26:58 +0000
ROA not after:            Mon 13 Oct 2025 20:26:58 +0000
asID:                     44559
IP address blocks:        136.0.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:aa:1c:33:fc:76:33:16:a5:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 15 20:26:58 2025 GMT
            Not After : Oct 13 20:26:58 2025 GMT
        Subject: CN=9d42c3b0-5b64-4d1c-8dc7-56257950e368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:3b:5b:0e:c1:d2:c3:d2:17:fb:6d:8a:ad:
                    6f:5f:dc:b8:97:dd:7f:1e:6b:eb:6d:4a:41:17:fa:
                    55:d4:cc:73:92:37:42:a3:2a:b6:db:71:4a:62:94:
                    62:01:a4:a5:d3:ce:c2:e6:a5:b0:b2:09:c1:fa:df:
                    45:3d:65:28:a9:dd:f2:e5:0f:8d:56:0a:c5:64:6c:
                    b4:20:2a:cf:b1:95:55:96:d1:0a:49:6a:03:3e:a1:
                    32:da:a6:bc:aa:9e:f1:d9:21:4c:0e:91:1b:ec:38:
                    94:13:79:7f:b8:80:fc:ba:61:52:de:aa:3b:92:2c:
                    f3:37:4d:1f:18:13:0f:10:ae:b2:78:4b:a3:e7:d7:
                    90:b7:f9:4e:a9:ae:c3:9f:97:97:e5:4a:0a:8b:2a:
                    ce:a8:85:f8:ad:a1:c3:90:8d:a2:03:13:99:83:cf:
                    ad:36:20:d4:f7:09:a1:82:18:c1:a0:c2:ef:72:83:
                    0b:f0:e6:f8:f2:eb:fe:84:4a:2b:a4:04:91:df:15:
                    f4:79:f1:43:01:31:aa:4d:55:f6:48:4b:96:fa:8c:
                    82:c2:50:24:4e:7c:3e:18:62:38:d7:d2:c8:b5:ff:
                    6a:2d:67:f4:07:1f:a2:41:6e:a9:36:c6:b3:eb:e0:
                    d9:d8:00:1e:5c:2b:2a:74:9b:61:56:52:b6:2f:83:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E8:47:7F:A6:11:D5:28:66:44:A4:59:B7:64:6E:72:1A:43:62:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89fd28d3-c392-3255-b89a-324172a14ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:e3:cb:78:77:20:89:4c:31:da:4a:fd:f1:41:06:fb:9c:
         ff:5f:5d:98:bc:3c:c1:81:d9:fd:c5:e7:85:b0:b0:1c:d8:22:
         90:91:4d:14:84:ff:f6:0d:32:e8:cc:67:7b:27:87:ba:03:67:
         35:4d:7c:47:cd:24:43:58:3f:d0:b3:48:c6:81:74:b3:a2:5d:
         6b:72:d4:5c:5a:45:e6:b4:90:96:bd:4d:ff:aa:6f:59:c6:dd:
         c7:0a:7c:33:aa:ba:ea:28:91:f7:c6:14:dd:6f:50:4a:44:52:
         13:93:81:96:27:85:08:26:7c:2c:ec:c9:ab:46:86:7a:bd:2a:
         92:5f:f5:26:81:94:d8:0e:3b:3b:92:c8:9f:0c:fa:be:93:26:
         b9:a0:81:88:1c:5f:f4:de:01:57:51:22:77:2f:09:1a:ee:f0:
         2d:93:cb:6c:f1:43:61:e9:8a:26:32:0e:a8:9f:b5:ee:71:2e:
         8c:f6:c0:2a:8b:0e:29:81:f7:28:6f:28:7c:2c:5d:d9:7d:72:
         44:19:54:90:4b:da:f6:32:1f:df:18:29:13:95:80:e4:5f:5d:
         fa:ee:43:d5:0e:ef:c4:09:e5:63:3d:ca:7f:64:78:60:a3:d6:
         56:55:09:89:77:25:94:c4:0f:8b:cb:30:5c:0e:6a:6c:0f:b0:
         e3:7e:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:39:18 2025 by rpki-client