Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fec06e6b-355e-3207-9516-1dc2330a28af.roa
File:                     fec06e6b-355e-3207-9516-1dc2330a28af.roa (raw, json)
Hash identifier:          s+lbIO4Liyl4FVxvU5X3F1ZOTMO1KXPlf1y3JBqKQWc=
Subject key identifier:   2C:7D:1C:56:51:AF:B2:F8:E4:0D:B2:34:20:BC:60:07:9B:63:59:AA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B0FA6C2E82972C7CB081B9740
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fec06e6b-355e-3207-9516-1dc2330a28af.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     8881
IP address blocks:        136.0.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:c2:e8:29:72:c7:cb:08:1b:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=74d9b604-3525-4040-bddb-d7d0d94a4526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:ee:12:69:9e:96:5e:88:a2:00:16:0d:58:
                    69:b0:87:92:3c:2f:83:58:a2:ea:a3:59:35:49:e5:
                    9f:9b:ea:19:ff:55:bd:5c:4a:d1:ba:9e:24:7d:cb:
                    5a:53:41:05:7b:20:7c:fd:66:80:89:ef:23:09:64:
                    8b:ec:2c:9f:76:5d:35:57:fe:ce:95:38:13:39:36:
                    49:d6:b3:79:28:90:16:24:75:d7:27:3b:ac:f3:8b:
                    24:c7:cb:d5:15:2e:51:22:56:0a:03:f5:9f:65:e1:
                    1c:95:2e:b2:0a:01:ae:8e:d5:fe:d6:4c:fe:3a:d3:
                    1b:db:22:2c:04:e7:d9:18:e1:18:c3:d4:23:60:6a:
                    13:7d:f4:aa:cc:17:d3:83:30:ca:cd:dc:52:09:0e:
                    e0:2c:4c:d9:7f:cb:fa:75:ec:71:ee:6b:35:c3:5b:
                    a4:ea:f0:67:b7:2e:f0:2a:9d:fa:db:44:25:11:1d:
                    a0:a3:39:13:e8:da:9a:45:79:1e:c2:f4:58:c0:d9:
                    74:37:42:f7:c4:c9:e7:92:fd:6b:96:63:40:67:7f:
                    31:1b:b4:22:0d:93:40:d8:72:00:ee:5a:cd:d6:b3:
                    8b:ec:02:16:b6:7c:de:d3:96:71:f7:b8:4f:b4:0d:
                    63:7a:35:ab:60:f6:04:19:1d:89:67:91:91:bd:51:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7D:1C:56:51:AF:B2:F8:E4:0D:B2:34:20:BC:60:07:9B:63:59:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fec06e6b-355e-3207-9516-1dc2330a28af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:cc:a4:db:66:1d:ce:96:3c:93:18:a4:9a:da:53:2f:85:f8:
         d8:50:e9:88:41:da:8c:3e:b3:25:9c:c8:1a:de:2a:35:84:b5:
         13:4f:34:68:e1:b1:8b:75:52:24:d9:61:a2:f3:b3:d0:47:81:
         02:d3:33:6d:7b:ab:a2:68:57:bc:bb:3f:5c:2d:3e:9f:84:b2:
         a3:2e:31:b1:d3:c9:83:43:84:42:81:36:0d:8b:c4:2b:f3:e1:
         4a:25:fb:7e:ef:60:0d:c2:98:11:61:4f:a1:08:5b:9d:ea:d3:
         b3:3f:58:b6:86:de:2e:b2:ec:9d:bc:fa:e1:86:f9:48:69:d8:
         29:47:fa:d2:78:c4:0c:a4:59:9f:07:7b:35:86:5c:1c:37:d8:
         13:0d:28:98:c1:ef:16:8b:45:87:81:67:fe:6f:f1:33:73:c8:
         a1:34:21:51:4f:53:81:70:5b:48:40:dc:37:c1:6f:df:61:b4:
         a3:0e:93:63:1b:21:40:90:17:af:47:1d:a9:25:9e:5d:16:40:
         21:07:3e:80:36:83:75:5f:2e:df:2b:73:12:42:e9:b5:d5:fb:
         d2:c7:c8:c6:d8:4d:4d:09:e6:92:4b:04:d9:da:18:65:b0:2d:
         38:8b:17:bd:71:c1:5d:5e:0d:fd:a9:b7:62:26:6c:57:82:6e:
         f9:fd:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:47:21 2025 by rpki-client