Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e6d8f215-e2c4-3a4a-a2b7-649967dc6481.roa
File:                     e6d8f215-e2c4-3a4a-a2b7-649967dc6481.roa (raw, json)
Hash identifier:          PXT32kqVznHfgX3Oe/R6F1TKWttybE3JyGwPIzGZ3TQ=
Subject key identifier:   2B:62:9A:8B:6E:4B:20:1F:5A:59:C4:70:0A:83:33:11:3C:8D:78:3F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B56D732E5ECCCC829CEF47780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e6d8f215-e2c4-3a4a-a2b7-649967dc6481.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     212238
IP address blocks:        136.0.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:32:e5:ec:cc:c8:29:ce:f4:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=d2c5981d-fb0b-4c17-a807-a3d65b8cb3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:e9:00:19:dd:0e:6d:5f:4f:75:56:f6:fe:
                    f0:e6:d1:a1:a4:52:2d:76:1d:4a:27:18:43:b8:9d:
                    fe:1f:cd:f2:86:be:70:9e:02:ee:03:ff:58:fa:5c:
                    f9:fb:d8:7d:d2:c4:5d:88:99:a7:8a:37:03:74:f2:
                    f3:d8:39:cf:dd:cf:f6:80:a0:9a:38:9b:31:06:fc:
                    66:ad:3c:0a:a1:26:fc:8f:3a:ba:37:a7:9e:bf:51:
                    17:d2:98:5f:a0:06:92:0b:16:17:51:94:03:57:81:
                    21:ef:7d:2c:ca:da:6c:d4:46:ca:6e:07:6f:ff:ec:
                    95:33:17:05:35:23:aa:41:72:ba:6a:02:8e:31:d9:
                    cd:8b:43:83:fb:32:e2:df:c1:ac:f6:e3:b2:4e:50:
                    99:73:a0:a8:e3:b6:a8:4e:09:90:83:8d:0f:b4:40:
                    7f:06:95:02:83:de:c4:09:3b:d9:15:75:a7:8a:e2:
                    2f:7b:72:dc:b1:0b:95:fe:35:46:02:e9:bc:5f:75:
                    fc:16:66:64:a1:92:e3:51:1c:ca:2e:d3:71:fa:64:
                    6a:0d:89:d0:a6:4f:bc:34:1f:03:13:f3:8f:af:67:
                    ff:97:7a:35:7c:f9:8d:46:b2:dc:28:45:81:d0:a7:
                    1b:dc:f6:8e:b1:cc:58:15:46:44:8c:a2:81:ff:ce:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:9A:8B:6E:4B:20:1F:5A:59:C4:70:0A:83:33:11:3C:8D:78:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e6d8f215-e2c4-3a4a-a2b7-649967dc6481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:92:be:0a:0b:2e:9c:d7:2b:5e:3a:f6:05:b7:8f:c0:32:0a:
         0e:b6:db:e9:b4:b3:1c:35:2c:cf:ac:6e:46:88:1d:62:5d:76:
         37:c7:9a:b3:1e:38:02:af:bc:65:89:2e:f1:a2:92:86:31:b2:
         83:e8:3f:ef:6c:e2:9e:01:de:37:c3:99:9c:1f:16:67:35:22:
         22:32:e7:64:ee:83:d5:0d:26:33:26:b3:97:00:3c:46:87:90:
         42:d8:60:0e:98:94:5a:50:83:24:69:7c:5d:0f:f8:3f:cb:d7:
         61:b8:f7:58:19:9e:69:ef:12:89:86:52:b7:94:1d:f7:8e:b9:
         34:bb:4f:ea:8f:8c:ba:c7:c2:a0:8c:f8:51:22:dc:d8:11:66:
         ce:1f:c1:ca:ea:72:67:a7:c1:fd:dc:e4:33:38:f2:f3:2a:77:
         c7:93:f7:bc:11:75:45:2b:12:9a:ce:3f:d3:89:4f:d9:f1:18:
         32:7d:36:c1:c0:25:4b:a9:a7:2e:ab:74:89:47:d0:c3:c5:f6:
         ef:66:3c:dc:5e:8d:44:f7:db:a2:f2:64:e9:01:9d:b5:3d:38:
         7f:b2:b6:25:a0:37:04:0a:b1:84:68:5c:e4:21:bf:f1:db:cb:
         7f:67:67:9e:bf:2c:e4:cb:40:68:d7:f2:bd:4f:a1:10:a3:38:
         40:e4:72:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:46:38 2025 by rpki-client