Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c820322a-1d0d-39d2-b297-a3df5b800d1e.roa
File:                     c820322a-1d0d-39d2-b297-a3df5b800d1e.roa (raw, json)
Hash identifier:          /D7+ATBRAJcBr51aW7GpneDAwPNHXX3rpFxwyRklPEg=
Subject key identifier:   B2:4E:11:7E:B0:59:A7:CA:B2:19:9B:5A:7F:64:26:8E:77:52:D5:F5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B52A75D0F151822D472830C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c820322a-1d0d-39d2-b297-a3df5b800d1e.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     209854
IP address blocks:        136.0.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:5d:0f:15:18:22:d4:72:83:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=cdd3923c-0db8-4a78-8a26-d249b985959c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:91:54:cf:f8:6e:3c:26:9c:61:9d:e7:69:
                    d3:30:35:fd:21:83:9d:d4:a0:09:60:38:d9:df:ef:
                    68:ba:e3:6a:ad:b9:24:c7:63:62:6f:7c:60:da:f3:
                    6c:d4:9d:f6:e3:9b:3a:a3:08:21:99:e9:94:bf:c4:
                    2c:74:ff:41:61:a0:37:45:f6:91:2e:89:7d:a4:d9:
                    d7:41:bb:52:d3:fb:14:0a:9c:4b:e2:2f:b2:2c:66:
                    e9:e1:6b:34:ab:de:aa:7c:e8:82:2f:34:0c:a7:f0:
                    51:98:42:73:2c:50:a1:6a:a8:e5:ba:90:37:c1:e0:
                    ea:20:f4:33:9b:f6:cb:f7:e8:c8:92:41:d5:7a:34:
                    d4:4f:35:57:12:71:e4:4e:a2:d7:dd:92:fc:54:58:
                    7f:8e:06:f6:f1:f9:9e:74:29:dc:64:2c:2f:b8:8a:
                    e4:db:5b:65:0c:cb:5d:d3:ef:89:02:53:ff:fb:db:
                    f1:aa:14:93:e0:ff:dd:db:e0:bf:82:86:4d:e1:87:
                    e6:2b:f3:e0:0e:39:fb:31:ff:09:c5:ca:36:52:76:
                    c1:f4:57:58:82:09:16:84:c1:2c:f0:f6:e5:2a:f2:
                    72:36:9f:64:f9:0b:cb:93:94:63:f5:b8:c8:14:08:
                    42:2d:85:fd:b5:ff:6d:de:5b:9f:9f:a8:58:1b:b8:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4E:11:7E:B0:59:A7:CA:B2:19:9B:5A:7F:64:26:8E:77:52:D5:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c820322a-1d0d-39d2-b297-a3df5b800d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d6:31:9b:7e:98:b6:2e:cb:d4:32:26:7f:9e:28:ec:e5:c0:
         7d:70:15:f5:c6:18:c8:bf:48:fd:6c:ad:08:27:24:05:ef:fd:
         db:47:a3:01:bb:ae:b3:9f:01:3c:fa:4b:0f:d8:15:5b:dd:ee:
         67:04:e6:31:d6:02:61:49:bf:e8:94:53:6b:9f:84:10:03:84:
         78:45:87:43:f7:67:ad:0e:62:c8:95:c2:a8:fc:3b:47:30:a5:
         eb:db:7d:82:1f:29:9f:5f:f1:ff:96:14:db:38:f0:32:d0:3c:
         a0:45:03:8e:8a:8f:0d:50:63:4d:d4:6e:09:b0:0f:05:9d:90:
         53:53:39:f6:5d:3f:56:21:19:a1:51:21:4f:da:2e:e9:ce:13:
         85:c0:c9:4f:ac:76:f0:94:7b:a6:b4:5e:e7:7e:60:63:3b:74:
         2f:05:12:fc:76:2b:fd:35:a1:15:32:68:5e:5c:b4:3d:08:e3:
         9b:d8:e0:7f:ea:fa:d3:98:41:a3:2d:ac:d6:1a:dc:77:6b:c7:
         61:f3:d2:c6:7e:5e:d1:dd:37:d2:e7:4c:cb:7b:2e:af:0d:ef:
         cd:cb:c1:8e:6d:e0:44:93:f9:3e:28:fc:bd:2d:83:fa:18:48:
         55:27:85:9b:dc:48:3e:6b:0a:b2:d6:a8:44:f3:14:a5:cb:81:
         8b:33:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:43 2025 by rpki-client