Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2b4c9f8-327e-320d-8508-bb3383b13e10.roa
File:                     f2b4c9f8-327e-320d-8508-bb3383b13e10.roa (raw, json)
Hash identifier:          +cSrAwGRTMUFkt7efJAD04lw+/n84OkDQ9Og9bjx7F0=
Subject key identifier:   75:CD:CC:C1:EA:A5:4D:45:B1:6C:10:96:A5:7D:86:09:27:A2:C8:4E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B52A75CB51738C71E9EE40C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2b4c9f8-327e-320d-8508-bb3383b13e10.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     209854
IP address blocks:        136.0.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:5c:b5:17:38:c7:1e:9e:e4:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=73ba10bb-fa86-4b62-a7c7-aae4268ed213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1e:0c:60:f7:49:52:b4:2b:33:00:11:1e:fd:
                    38:9c:70:cc:b8:13:3a:e1:30:c6:20:65:f1:3b:4a:
                    08:b1:4b:b7:16:49:fe:dd:7d:7a:f0:a3:1c:35:f6:
                    5c:7d:59:08:6e:44:8c:25:45:d4:f2:86:d1:61:b6:
                    ea:a0:48:ce:40:d9:c2:d1:6a:7a:3e:3d:e3:04:db:
                    18:ce:f3:10:cd:c4:04:e6:d6:08:45:92:3b:a7:48:
                    85:04:77:ae:c0:62:ff:14:5b:d3:f8:a0:2f:47:13:
                    37:11:6a:9f:8e:38:75:01:53:35:73:ae:4e:03:26:
                    8d:c3:6f:c0:42:fb:12:e2:32:68:a2:00:b4:ce:22:
                    c2:6c:22:5d:a6:03:f9:57:ed:e0:6d:dd:27:9a:67:
                    4a:cd:70:fa:e4:61:cd:10:63:ee:72:79:d1:59:93:
                    3e:a8:be:b0:1a:0d:90:74:32:5b:08:2d:8b:6d:ac:
                    bf:41:5f:6e:dd:07:2a:fb:60:cb:e8:5a:b4:89:97:
                    c6:0f:1d:39:11:22:57:b3:84:16:d5:7a:1c:f7:52:
                    7f:09:1b:ad:a6:79:bf:9e:9d:50:47:16:aa:82:a3:
                    b7:e5:ea:ce:d6:b4:cc:b2:1b:89:a0:1a:22:4c:80:
                    19:e3:21:b8:df:04:37:60:64:c0:3f:c6:02:bc:87:
                    1e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CD:CC:C1:EA:A5:4D:45:B1:6C:10:96:A5:7D:86:09:27:A2:C8:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2b4c9f8-327e-320d-8508-bb3383b13e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:26:d6:d8:ff:4c:48:e7:b0:ae:7e:73:d9:17:9a:c1:5c:
         c8:6a:cd:7b:f4:3a:ca:1a:a6:91:ad:7e:31:dd:59:47:c8:4a:
         09:76:68:18:b8:87:ac:60:f2:76:fd:da:4c:c8:2d:ee:3a:53:
         1a:88:a1:82:2a:22:de:fd:95:f9:88:3c:1a:69:70:9a:16:0a:
         e5:65:58:5f:0b:9c:64:30:4f:c7:f6:32:64:84:e6:d2:53:25:
         91:2c:1d:c0:a7:28:78:b6:34:a7:0e:b9:4b:c5:5e:be:98:d7:
         c6:9a:68:9f:40:d4:49:8e:8f:fb:76:ce:a0:98:e2:8a:a2:6f:
         a4:46:aa:74:e3:75:73:cf:59:84:27:bc:c0:d4:aa:22:ed:95:
         66:1b:2a:5b:55:66:38:8b:75:c8:77:04:1a:2b:97:42:2d:d3:
         65:66:be:d6:93:11:80:55:bf:c2:3e:36:e1:f3:20:6a:95:f3:
         8d:f4:42:d2:28:4c:69:cb:d7:6e:61:b5:2a:01:2d:e8:f0:04:
         f5:d7:8a:e3:af:68:26:1d:fa:5e:90:28:1d:97:fb:12:c0:60:
         54:18:42:44:6a:4f:bf:7b:d8:f4:ff:21:91:94:e6:26:ba:ae:
         bf:65:ec:87:81:4f:5f:59:30:f7:14:0d:b4:ba:2e:8c:af:4a:
         d9:e2:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:16 2025 by rpki-client