Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0582c949-7118-30a6-b143-f47c6772144c.roa
File:                     0582c949-7118-30a6-b143-f47c6772144c.roa (raw, json)
Hash identifier:          X7KUdtbywoUbX8XFMufGl7H2B4selK6PxpbpLs+4vnc=
Subject key identifier:   CB:88:31:61:E4:5A:23:27:69:BD:74:B9:BB:CC:B1:39:0A:54:91:96
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B78B8816C80B387B52D77300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0582c949-7118-30a6-b143-f47c6772144c.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     211541
IP address blocks:        136.0.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:88:16:c8:0b:38:7b:52:d7:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=82df20f0-5904-4bb8-bc02-0242f8b2e2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:2d:0d:1a:b0:ab:57:6e:8d:3b:2d:a7:77:
                    dd:29:67:34:46:c2:1f:71:b2:3d:01:ee:17:33:72:
                    76:c2:84:e0:d1:0c:fa:da:98:35:f7:1b:ed:f3:f6:
                    55:c0:e3:70:73:f1:ff:8c:39:05:a8:be:83:ca:21:
                    b7:4a:ac:72:f2:7b:89:a0:8a:e3:46:8f:8a:38:9b:
                    1e:45:a0:88:ca:43:52:10:91:f5:c7:43:29:4f:e0:
                    8b:c9:cb:c6:34:8f:0f:be:7f:1f:f5:b8:e5:05:18:
                    47:1f:27:24:74:e3:a6:f3:d9:12:1b:b9:9c:f6:ee:
                    3f:07:c3:e8:88:7b:07:f9:e8:7c:6b:7f:c4:1c:1f:
                    7d:4d:7f:7a:58:a7:1c:00:b2:10:8b:18:da:74:58:
                    16:95:28:62:80:df:9a:cc:1c:31:c1:62:81:28:24:
                    3e:8e:a6:2d:5e:6d:4e:d5:07:3f:5d:c6:82:cc:dd:
                    24:2c:8d:30:ad:f7:bf:f1:83:e3:ac:41:38:9e:41:
                    95:a7:65:fa:2b:b1:70:bc:c5:a0:ba:56:6e:fc:b7:
                    06:67:92:d5:00:37:28:ec:12:b7:bb:ca:75:8c:f1:
                    fb:6d:cf:d4:8c:23:58:3a:d3:57:e3:d3:81:43:74:
                    f5:ad:a5:8d:b5:ec:79:ac:2f:da:a4:50:ba:5f:db:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:31:61:E4:5A:23:27:69:BD:74:B9:BB:CC:B1:39:0A:54:91:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0582c949-7118-30a6-b143-f47c6772144c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:5e:05:aa:29:2a:49:48:6d:72:54:e9:70:59:8f:6b:ca:06:
         93:b2:c3:0a:f4:22:61:b5:4f:2c:a5:4b:03:21:0f:81:a7:ca:
         4e:e3:28:87:52:fc:e0:8c:80:7e:7d:92:05:e0:77:6b:f6:5d:
         cf:51:7d:6a:62:45:26:94:38:4d:26:3e:6c:e6:27:70:34:55:
         b3:62:32:05:7c:ee:a5:84:b3:b3:f3:b6:5b:c3:a2:39:ac:ed:
         f3:14:6f:b7:07:27:3e:d2:08:d6:0d:cb:84:d4:b2:f3:92:49:
         e2:c6:39:78:ee:63:58:3c:cf:a2:18:e7:25:9a:fd:f3:34:13:
         90:ad:4f:3d:2b:7f:60:56:f5:a1:78:9a:f5:4e:cd:03:84:6d:
         ae:fd:c8:2e:65:55:20:4e:be:e8:9f:ff:18:07:43:a2:e7:2b:
         4e:8b:4b:4d:c7:0a:b3:15:b9:5c:79:be:9a:f0:34:20:5d:c5:
         85:74:c1:0d:ee:59:47:b0:68:72:be:64:ac:fe:04:db:b5:93:
         41:73:2e:99:7a:29:35:75:2f:b8:70:04:00:63:3f:fe:71:f3:
         6f:cc:e7:94:b6:0a:65:31:8f:ed:71:61:fa:12:7d:a3:ab:c5:
         4e:66:74:71:89:52:bd:b9:96:be:47:15:57:1f:a3:64:29:d6:
         25:5a:ff:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:03 2025 by rpki-client