Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fe1f2d1-0c5e-33cb-8670-a3bb30e71f12.roa
File:                     2fe1f2d1-0c5e-33cb-8670-a3bb30e71f12.roa (raw, json)
Hash identifier:          aQPw5J5MZuDjOnwAAuiQhZ2fcWOLWJFUZhpVPWTvXf4=
Subject key identifier:   86:93:23:AB:8C:28:8E:C9:EB:1E:B1:15:C9:77:A7:4E:37:DA:DA:8B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B2C548A3FD54036FC01567A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fe1f2d1-0c5e-33cb-8670-a3bb30e71f12.roa
Signing time:             Fri 12 Sep 2025 19:33:36 +0000
ROA not before:           Fri 12 Sep 2025 19:33:36 +0000
ROA not after:            Thu 11 Dec 2025 20:33:36 +0000
asID:                     401152
IP address blocks:        136.0.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:54:8a:3f:d5:40:36:fc:01:56:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 12 19:33:36 2025 GMT
            Not After : Dec 11 20:33:36 2025 GMT
        Subject: CN=cd7b35c9-0133-4f75-a3f4-155dee2a7675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:e3:7b:49:99:91:5b:e4:6a:0a:58:7f:d7:
                    67:cb:5a:ff:a9:97:74:1c:c1:25:d5:ff:b2:d2:09:
                    df:4a:2b:b4:cc:d4:67:cc:43:d4:c6:d8:f2:c6:3e:
                    40:74:d6:04:3a:1a:58:56:43:8a:d1:e5:c0:ec:c9:
                    c6:4c:57:c2:ba:01:67:6c:15:2e:ab:77:ac:97:80:
                    30:20:59:0a:24:e3:15:65:e0:41:78:60:30:d3:a4:
                    d0:fe:44:67:79:7d:ab:9f:ca:e7:5d:28:8e:df:11:
                    2d:65:66:20:83:39:01:81:6b:a8:ff:06:73:b0:54:
                    a9:e5:d1:62:16:9a:16:27:33:c6:31:be:c4:8e:57:
                    37:d9:19:1a:21:42:9a:ad:4a:86:8d:82:7a:8e:bd:
                    d6:5b:ac:6c:b1:d3:d7:46:86:e8:c3:8a:a7:b9:ef:
                    28:da:fe:e4:bb:d6:4c:88:d0:a7:3f:1a:b2:ee:9a:
                    46:36:cd:15:a4:7f:e8:0b:b3:19:98:c9:e7:fa:f6:
                    c8:c7:1e:7e:e4:4c:52:38:78:a3:2d:3f:5d:6a:58:
                    35:72:b7:85:c8:47:57:2e:8b:98:16:17:d9:7c:fc:
                    d5:31:c3:9d:d6:8c:0f:72:5c:0d:23:bc:a9:b2:08:
                    eb:0e:a6:72:8c:24:52:c7:5b:57:91:f3:3d:ec:48:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:93:23:AB:8C:28:8E:C9:EB:1E:B1:15:C9:77:A7:4E:37:DA:DA:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2fe1f2d1-0c5e-33cb-8670-a3bb30e71f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e6:69:c5:59:40:de:4b:50:5d:7d:7f:c2:e6:cf:c1:cd:1f:
         8a:0b:7f:e6:d8:19:49:88:a0:e7:e6:c2:b2:89:6d:e2:50:dd:
         30:72:33:41:09:b2:70:46:bf:13:71:39:11:26:96:11:44:e7:
         a7:6d:11:16:da:92:dc:a7:2f:8e:9c:ee:3c:c8:a9:17:a0:57:
         93:84:7d:dc:3a:6b:06:87:f4:0a:83:3d:5a:3e:4f:fe:eb:1c:
         5a:0c:4f:00:d7:cd:92:25:28:0e:0a:7a:58:5c:d8:c7:99:6c:
         35:ff:14:ea:1f:b3:4f:fd:41:bc:c7:ae:6b:fc:b9:60:3d:e3:
         93:98:c3:2b:d3:64:43:3d:13:27:d6:ce:02:b4:8e:9a:96:59:
         60:65:0d:57:2d:87:4c:56:7e:8b:60:ae:73:05:be:4f:d5:7c:
         4e:41:c5:26:d8:c5:c8:6b:f3:53:71:e7:b2:e2:36:09:d4:9f:
         e5:0e:53:d4:58:33:6f:9a:58:6b:67:13:f7:19:65:2d:44:5d:
         23:3d:1c:de:b8:c2:ce:ca:2f:4c:78:df:c2:d0:c5:98:e9:d0:
         e6:c7:93:1a:83:6b:14:84:12:b7:b3:55:c6:d8:46:8b:fa:ff:
         9f:ad:30:7e:8b:a8:ec:ab:d8:02:d7:48:14:8b:d7:55:3b:a5:
         75:03:a2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:14:33 2025 by rpki-client