Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b45cf6b6-6c7f-3908-a057-b10c33ceff69.roa
File:                     b45cf6b6-6c7f-3908-a057-b10c33ceff69.roa (raw, json)
Hash identifier:          KPLpUm15KsEV5Yw6DrpnMucRgHcBwiBJEEW4MsRJ/dw=
Subject key identifier:   4E:C8:73:BE:39:B2:B4:4B:54:E9:29:A3:C7:B6:90:2E:55:17:05:FA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B239BD8D46FE66B4391711580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b45cf6b6-6c7f-3908-a057-b10c33ceff69.roa
Signing time:             Tue 09 Sep 2025 16:35:00 +0000
ROA not before:           Tue 09 Sep 2025 16:35:00 +0000
ROA not after:            Mon 08 Dec 2025 17:35:00 +0000
asID:                     214238
IP address blocks:        136.0.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:9b:d8:d4:6f:e6:6b:43:91:71:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  9 16:35:00 2025 GMT
            Not After : Dec  8 17:35:00 2025 GMT
        Subject: CN=f7788241-f3a2-48ef-968c-604ddbd1c147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:8f:92:0d:05:09:be:a0:17:04:cf:04:3f:
                    9f:77:79:e4:4e:2f:ce:d5:da:1e:f4:e2:93:9d:d9:
                    8b:5e:a5:18:42:55:5a:44:b8:07:a9:36:67:4d:20:
                    df:5c:17:43:5b:70:d2:13:c6:63:9c:c0:fa:92:4d:
                    22:f2:17:31:59:9b:f5:75:7e:ed:96:52:9e:81:58:
                    1d:90:7a:17:f4:a7:f0:a4:f1:0f:4b:cd:32:8f:ab:
                    d4:df:26:da:32:5e:c8:2e:fe:76:0b:f9:b6:79:5b:
                    1a:5a:84:78:0f:77:38:2c:54:8c:6f:02:2d:ed:7b:
                    14:9c:5a:a1:b9:87:5c:4e:ce:95:5f:73:d7:10:f8:
                    3b:1a:ac:9a:64:29:05:7f:11:2d:ce:66:d9:3e:df:
                    44:7b:62:8d:7d:d1:52:e2:7b:e0:f2:ad:ab:48:ee:
                    c8:74:09:52:36:82:2b:c9:94:41:b8:f7:c9:c8:ba:
                    50:64:b3:6b:be:22:ab:a5:08:00:cd:74:06:a8:16:
                    12:98:f3:5a:1f:ce:53:2a:63:19:80:07:42:ad:a7:
                    65:30:b8:83:9c:cc:43:c2:af:a2:b1:b7:2e:34:d0:
                    f9:9f:80:ec:9c:66:f7:ab:34:44:55:74:2a:ff:4f:
                    d9:0f:31:0e:fd:bf:f7:62:8b:69:b9:53:31:e9:07:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C8:73:BE:39:B2:B4:4B:54:E9:29:A3:C7:B6:90:2E:55:17:05:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b45cf6b6-6c7f-3908-a057-b10c33ceff69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:72:6d:b5:e2:f8:38:eb:3c:d4:7d:7b:87:d8:21:03:e5:d8:
         bd:f5:01:d9:db:a9:52:94:fa:72:33:93:0e:f1:07:5d:2e:00:
         5e:a8:e1:59:7a:f2:ee:bf:64:7b:2e:0b:ba:9e:e8:44:b4:27:
         50:07:05:59:b9:ac:7b:a0:0a:f5:19:4e:67:fa:58:63:d5:d1:
         aa:cb:c9:73:55:3d:2e:37:59:c9:61:7c:ed:ea:12:da:d6:99:
         18:15:f6:30:ac:94:23:0f:80:dc:5e:9e:65:f3:4e:94:e8:d8:
         12:75:8e:ce:47:54:d0:ad:21:fd:6e:68:25:5a:a3:ae:3e:51:
         0b:76:38:5c:0b:97:fc:07:cc:76:8c:83:d9:6a:db:ec:77:1f:
         22:79:01:97:06:4c:16:56:69:f3:ba:8d:eb:98:be:68:94:ee:
         af:5e:bc:0e:95:a8:b2:82:0c:a2:53:c8:45:d4:22:57:5a:2e:
         f7:43:98:18:13:ad:e8:26:fd:b0:8f:50:4c:41:7f:da:9f:eb:
         7e:31:45:af:6f:b1:0f:00:b7:10:1f:39:cc:77:78:11:fd:ef:
         2c:5d:4f:67:93:6a:f6:e9:35:f2:55:87:1c:c0:7b:4c:4d:eb:
         0b:e4:e3:d9:0d:fa:20:9f:36:0e:4e:ee:f9:bd:2a:75:19:04:
         7f:c1:90:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:12 2025 by rpki-client