Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/13a238df-f53c-3979-b283-3f928eed6183.roa
File:                     13a238df-f53c-3979-b283-3f928eed6183.roa (raw, json)
Hash identifier:          EpHMySSZ96KOQ4/THL1EYphS05gw770r7amDY2ubidE=
Subject key identifier:   07:0A:C0:10:CC:74:73:53:6D:CA:A6:B3:BD:3E:07:E7:3A:6F:AA:AC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5B9BDF81C8BA0E64ACC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/13a238df-f53c-3979-b283-3f928eed6183.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        136.0.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:5b:9b:df:81:c8:ba:0e:64:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=d364327c-386a-4f9f-a1db-6da0e63d463d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:17:a5:c1:f3:da:08:92:bf:9e:23:34:71:e3:
                    03:b3:0f:89:6c:75:2e:48:eb:19:3a:02:eb:6d:58:
                    e4:30:ef:97:33:88:8c:e1:4a:45:d1:31:71:b1:59:
                    b9:79:c3:13:30:e3:5f:17:87:68:00:b3:c3:3a:f7:
                    2f:07:45:eb:ff:e5:c6:4c:81:70:3e:a8:db:db:78:
                    bc:51:21:d8:ec:73:4c:fa:45:73:42:04:06:d1:0f:
                    52:48:9d:58:a4:84:b8:bf:88:b2:2c:2b:de:b3:d8:
                    65:af:55:4b:1a:14:53:ae:c7:d6:0c:d7:b4:81:17:
                    de:8d:eb:13:64:34:cf:43:13:df:5b:94:7d:87:4d:
                    97:8a:0a:6d:5e:a8:b6:5d:c3:92:85:da:32:e5:a5:
                    74:54:ad:75:d1:4c:a5:75:c0:e3:f9:9c:61:e5:12:
                    a4:fd:e4:17:20:c0:d0:8d:de:36:fe:ee:a2:2e:52:
                    90:a7:66:3e:87:6a:64:1a:5c:95:21:ff:6f:03:60:
                    55:53:bd:df:7f:cd:e5:22:fd:cc:f0:1b:89:55:75:
                    96:25:30:08:53:19:60:97:30:71:e9:b5:8c:fc:b5:
                    60:9f:da:88:30:82:56:1a:be:c0:87:b5:fd:0c:9a:
                    df:39:76:0c:c1:df:d9:fd:5f:2e:89:4e:5b:46:23:
                    f0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0A:C0:10:CC:74:73:53:6D:CA:A6:B3:BD:3E:07:E7:3A:6F:AA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/13a238df-f53c-3979-b283-3f928eed6183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:8a:39:ff:3c:4c:da:a4:3d:2b:88:bb:65:99:22:56:2a:
         42:96:19:75:c3:27:19:93:3c:4a:19:24:71:79:b3:ff:28:1a:
         81:37:f7:77:7e:1b:7a:2f:61:ed:ca:1c:9b:0e:5e:99:de:f7:
         85:b9:88:7a:f0:2b:67:4c:68:3b:d2:db:cf:18:6e:a8:2a:ee:
         52:ff:85:ee:81:5a:64:5e:ef:83:56:99:4c:49:d1:83:9f:e4:
         26:3c:08:ab:3c:3e:6b:26:77:a2:c5:1a:98:2f:0c:1d:3b:31:
         f0:f3:99:48:ba:6f:8c:7c:e7:ee:32:4b:33:49:3d:8d:48:06:
         99:35:91:45:bb:bd:62:17:04:55:14:e7:74:d3:4e:39:e0:7c:
         63:a7:81:b5:7b:c2:3a:8c:70:fa:c5:b5:62:c7:81:cd:ef:01:
         72:c8:b4:31:10:de:f1:07:38:cc:e9:7f:b8:3b:fa:b4:5e:c9:
         2b:dc:a5:2f:8b:7a:ef:52:e6:2e:0a:a1:0c:89:ad:2f:5b:ce:
         12:ab:21:92:48:38:79:4e:8a:4f:5e:6c:d3:af:c0:19:30:ef:
         37:cb:d7:5d:d4:db:f9:dc:cf:33:46:ab:aa:02:b4:5e:7a:ec:
         35:5e:05:d7:1a:45:7c:f7:f1:12:4c:db:b7:9c:36:50:52:22:
         a5:12:95:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 17:12:13 2025 by rpki-client