Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f35242f0-6e1f-37e5-8434-a2fca681402f.roa
File:                     f35242f0-6e1f-37e5-8434-a2fca681402f.roa (raw, json)
Hash identifier:          xyzP0VUsVvOkif19+FV2CCNKGyFJjmPMfZvQHMGCOao=
Subject key identifier:   32:AB:FF:52:58:8D:5B:8F:EB:7A:AA:EC:DF:26:A6:58:46:1F:32:F2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A9E65336E02CA755565D17B40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f35242f0-6e1f-37e5-8434-a2fca681402f.roa
Signing time:             Wed 23 Jul 2025 23:22:23 +0000
ROA not before:           Wed 23 Jul 2025 23:22:23 +0000
ROA not after:            Tue 21 Oct 2025 23:22:23 +0000
asID:                     7385
IP address blocks:        136.0.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:33:6e:02:ca:75:55:65:d1:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 23 23:22:23 2025 GMT
            Not After : Oct 21 23:22:23 2025 GMT
        Subject: CN=98ddbcfe-2b17-4801-ba13-2c1b30e5555d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:0c:41:49:a4:1e:b9:75:36:57:6c:d8:1e:
                    57:d5:86:ec:b4:f8:a8:18:c0:c8:8e:fd:5f:3e:25:
                    62:e2:60:e8:b1:8a:e2:d2:fa:eb:9a:96:02:91:05:
                    c0:cd:3b:6b:10:1a:7d:a6:28:46:73:d2:82:d2:38:
                    7a:9c:ad:4e:cd:43:a6:03:89:90:2c:c3:69:cd:89:
                    05:c0:67:e8:f6:4f:c7:06:25:f1:bf:0e:5a:e7:6e:
                    86:51:1f:a9:c5:99:6d:5e:b0:49:74:f4:bd:02:ec:
                    5b:9f:82:a6:92:e3:ff:a8:c0:1f:75:88:57:7b:eb:
                    a6:5c:44:b6:56:34:4e:e7:71:8f:25:8b:41:cd:d7:
                    7b:ce:5f:88:8a:33:19:0a:12:c8:ba:d4:a3:b7:d9:
                    cd:25:a5:4e:dd:e7:00:44:3c:8f:db:d3:e1:43:96:
                    94:9d:ed:4d:59:06:df:a0:0c:01:51:1f:f3:dc:2a:
                    5d:37:28:40:9e:60:35:eb:6e:88:26:39:59:09:2a:
                    3f:9c:69:16:25:6f:41:ef:49:25:d1:14:38:82:2e:
                    74:76:40:cc:5a:9b:a9:74:a8:96:73:f8:6a:30:ee:
                    f7:20:c2:f9:09:34:a9:35:b5:6d:27:8c:da:d7:46:
                    77:fe:a4:95:75:90:26:eb:c5:59:a5:df:5e:9d:82:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AB:FF:52:58:8D:5B:8F:EB:7A:AA:EC:DF:26:A6:58:46:1F:32:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f35242f0-6e1f-37e5-8434-a2fca681402f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:33:57:ef:17:82:5f:70:23:cd:9a:be:4e:98:22:d9:ee:60:
         10:a4:50:75:fb:f6:37:37:b6:93:d8:01:bb:ce:3b:51:b8:db:
         66:a6:5f:34:ee:54:38:da:24:1d:4e:82:a0:87:53:38:69:25:
         df:25:07:8a:6f:05:5c:f6:9d:41:d3:1e:2b:4a:65:f2:5e:db:
         ba:19:ae:bc:1d:c9:03:1f:67:45:88:f2:68:0b:cf:20:8d:43:
         69:d6:03:84:88:23:2e:68:4c:96:8f:22:9a:8b:5f:0e:f1:c4:
         7c:0f:f7:27:56:0c:6b:f6:53:3c:a6:14:25:bc:88:48:d6:6a:
         3c:0b:bf:70:28:cb:f1:66:88:ef:40:e3:25:b6:86:38:22:ec:
         74:79:3e:e6:e9:65:74:b8:dd:90:a0:22:e1:bc:ff:7c:6d:91:
         3e:22:46:00:c5:e3:c0:02:f8:f4:bf:59:75:d5:0a:cf:de:3c:
         51:ae:3f:ea:06:e7:28:33:83:63:4b:7e:78:8e:00:17:dd:79:
         ea:b0:60:37:d5:dd:93:31:c3:d9:18:67:85:ca:af:67:e4:74:
         f9:70:fa:06:e0:0d:e7:b3:fa:e1:7c:69:be:1f:6d:5d:cf:6f:
         fc:4c:b0:cb:69:99:d4:12:29:a1:e9:0f:bb:b0:ab:38:5b:75:
         3a:ee:2e:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqeZTNuAsp1VWXRe0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcyMzIzMjIyM1oXDTI1MTAyMTIzMjIyM1owLzEtMCsGA1UEAxMk
OThkZGJjZmUtMmIxNy00ODAxLWJhMTMtMmMxYjMwZTU1NTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJcMQUmkHrl1Nlds2B5X1YbstPioGMDIjv1f
PiVi4mDosYri0vrrmpYCkQXAzTtrEBp9pihGc9KC0jh6nK1OzUOmA4mQLMNpzYkF
wGfo9k/HBiXxvw5a526GUR+pxZltXrBJdPS9Auxbn4KmkuP/qMAfdYhXe+umXES2
VjRO53GPJYtBzdd7zl+IijMZChLIutSjt9nNJaVO3ecARDyP29PhQ5aUne1NWQbf
oAwBUR/z3CpdNyhAnmA1626IJjlZCSo/nGkWJW9B70kl0RQ4gi50dkDMWpupdKiW
c/hqMO73IML5CTSpNbVtJ4za10Z3/qSVdZAm68VZpd9enYIiiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDKr/1JYjVuP63qq7N8mplhGHzLyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjM1MjQyZjAtNmUxZi0z
N2U1LTg0MzQtYTJmY2E2ODE0MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEzV+8Xgl9wI82avk6YItnuYBCkUHX79jc3tpPYAbvOO1G422amXzTu
VDjaJB1OgqCHUzhpJd8lB4pvBVz2nUHTHitKZfJe27oZrrwdyQMfZ0WI8mgLzyCN
Q2nWA4SIIy5oTJaPIpqLXw7xxHwP9ydWDGv2UzymFCW8iEjWajwLv3Aoy/FmiO9A
4yW2hjgi7HR5PubpZXS43ZCgIuG8/3xtkT4iRgDF48AC+PS/WXXVCs/ePFGuP+oG
5ygzg2NLfniOABfdeeqwYDfV3ZMxw9kYZ4XKr2fkdPlw+gbgDeez+uF8ab4fbV3P
b/xMsMtpmdQSKaHpD7uwqzhbdTruLpk=
-----END CERTIFICATE-----
Generated at Sat Jul 26 13:04:50 2025 by rpki-client