Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25dc7448-1b8d-3347-b46f-25b9a3d1f742.roa
File:                     25dc7448-1b8d-3347-b46f-25b9a3d1f742.roa (raw, json)
Hash identifier:          v1pFw24DqUAHwL1KKX/bO32qT9S0ImnKvLCJUAF4f+c=
Subject key identifier:   B8:D0:5D:6F:3C:33:22:34:F6:68:EC:B6:61:BF:33:1C:44:18:C5:E7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A761B6421FDCAC42B88D58F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25dc7448-1b8d-3347-b46f-25b9a3d1f742.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     54252
IP address blocks:        136.0.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:64:21:fd:ca:c4:2b:88:d5:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=b9caf7ac-0068-426f-953d-0e63a8bf6970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:11:4f:aa:4e:f3:6e:f1:f7:e6:11:be:8e:37:
                    b0:fe:82:f7:e4:80:4d:39:5b:37:9f:6d:7a:35:46:
                    b3:f5:4f:83:3b:bf:ca:78:32:8d:43:99:13:dd:a9:
                    44:e1:56:36:f2:04:48:eb:59:21:d2:94:75:6d:65:
                    26:39:b8:d8:50:c5:c3:18:17:4d:d5:e8:a5:93:62:
                    c6:f1:8d:e1:77:2e:1b:1d:e5:16:5c:6d:47:12:82:
                    da:cf:29:37:ea:d0:0e:ac:9b:a0:e2:03:63:bb:7b:
                    70:86:22:57:6a:a8:5e:2a:a2:8b:f7:81:70:a1:e4:
                    69:d1:0c:bd:04:39:39:58:c8:16:6b:a9:f2:8a:1b:
                    08:42:73:cb:f8:6e:27:b7:a7:f0:c5:46:4f:78:64:
                    07:53:88:74:4a:db:52:90:ff:6c:a0:cd:e8:99:8a:
                    fb:78:b2:2b:b9:ce:f5:1c:99:08:bf:61:28:24:a0:
                    a7:e5:27:02:76:76:5d:d4:12:f8:e6:d7:05:72:71:
                    04:13:a9:23:ed:32:74:9d:f8:e7:63:38:d2:cb:82:
                    33:94:90:9e:51:3f:e9:7c:c3:64:e4:38:f9:ed:31:
                    a4:75:ee:bf:48:64:d3:6a:5a:36:f7:25:1a:63:7a:
                    20:cb:f4:b1:30:a2:9e:0d:c4:f3:4a:d5:55:89:26:
                    45:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D0:5D:6F:3C:33:22:34:F6:68:EC:B6:61:BF:33:1C:44:18:C5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25dc7448-1b8d-3347-b46f-25b9a3d1f742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:27:d4:d0:b8:01:1b:23:87:f3:bd:cf:32:a4:dc:39:e1:
         a5:59:f0:0f:6a:9b:b3:cd:38:f4:bc:aa:a3:f3:9b:d5:33:db:
         43:04:ec:ac:84:38:a9:20:c4:3f:64:42:11:77:c8:f6:82:9a:
         35:2f:ca:82:c5:be:30:a4:a9:7d:69:a9:e4:45:ec:5a:11:64:
         3f:b9:63:c9:0b:96:7d:e9:43:6c:39:92:c8:25:7a:16:d2:7c:
         e7:8a:1f:28:34:0f:37:a6:cd:fa:7d:8e:39:89:ab:54:ca:ca:
         3b:79:33:3a:28:5e:f9:92:f8:f1:1f:f7:da:8e:7a:c8:6f:53:
         9a:cf:f3:8b:26:d0:ed:9a:0f:3d:d4:f5:dd:16:aa:84:d2:91:
         5c:9d:08:6f:ee:6e:35:6d:19:61:29:5d:6c:6e:47:ac:c2:41:
         95:f1:23:f2:c6:65:c5:24:59:55:a8:70:58:91:44:0b:94:71:
         a6:da:d2:2f:16:63:80:a4:74:ca:79:76:35:f6:01:18:b6:58:
         1e:dd:f9:6b:12:96:16:76:0a:64:0a:63:b2:10:f5:4e:2f:90:
         ad:3e:0c:a7:08:e7:45:6a:88:bf:6d:d5:e0:b9:0e:2f:56:0f:
         39:60:18:02:e3:f2:8c:f7:27:7a:e7:7f:00:12:c7:da:10:bb:
         ce:ab:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:31:06 2025 by rpki-client