Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4284a39b-03ec-3337-83d3-f393255ebd2c.roa
File:                     4284a39b-03ec-3337-83d3-f393255ebd2c.roa (raw, json)
Hash identifier:          w9/K7ipftIfKJH43YBcp4iXhB14pNHojnw9KbXkVT2k=
Subject key identifier:   16:A4:C5:A7:30:97:59:05:10:41:F0:46:95:1D:32:CB:DD:16:86:C7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5658C325B6EFF6CC4380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4284a39b-03ec-3337-83d3-f393255ebd2c.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        136.0.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:56:58:c3:25:b6:ef:f6:cc:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=1b9f3c8b-607c-4d17-945f-e2bfb8726c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:95:7f:f4:0e:09:6e:39:74:b6:ae:ec:f0:
                    e0:e2:f0:cf:f9:b7:5c:71:d4:2f:cd:07:6b:ab:12:
                    5c:d5:d3:96:14:ca:d8:2f:f0:4b:c2:2e:53:9f:99:
                    66:aa:3e:89:22:ce:b6:ea:21:0e:1d:18:48:7f:61:
                    11:4c:30:8d:fc:73:23:85:75:c7:44:cc:b5:b0:db:
                    d8:ad:99:b9:55:6c:e5:c8:0f:bc:ef:f2:57:2c:7c:
                    8d:5b:c1:e7:26:9f:a3:46:5c:e7:23:30:f7:66:0e:
                    08:7a:74:67:2a:48:1d:f2:84:79:7c:06:c0:5d:74:
                    d1:d7:90:b7:ed:3a:dd:38:8a:4e:60:f4:4e:27:56:
                    0c:47:42:99:0f:0d:7b:b7:e6:32:61:6f:d5:4c:72:
                    aa:2a:21:ad:3d:66:ae:b9:23:6c:04:61:5b:cc:ba:
                    3d:21:95:33:00:ba:47:1f:13:b4:b5:99:34:87:4f:
                    7e:47:8a:fb:88:bf:da:5a:62:fa:27:24:c4:9e:5b:
                    69:6f:34:87:fd:18:b5:6c:15:49:1a:a2:1a:4e:8b:
                    4b:84:34:c3:3a:b8:51:60:c3:64:f3:75:e9:de:98:
                    86:6d:b9:36:ad:06:c9:18:19:ee:7c:7a:14:ef:20:
                    92:5e:62:26:38:df:9a:53:7e:71:ba:c8:da:ea:86:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A4:C5:A7:30:97:59:05:10:41:F0:46:95:1D:32:CB:DD:16:86:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4284a39b-03ec-3337-83d3-f393255ebd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:07:4d:e6:93:3e:a1:ee:9c:d0:f4:dc:51:1f:37:bd:e6:2a:
         f1:58:82:bf:97:bf:64:45:70:c4:38:28:13:11:ef:9a:2c:e7:
         6b:3a:96:54:b6:66:a4:09:ae:93:d0:9a:51:85:25:b2:7f:01:
         0c:6d:71:e2:83:6b:09:18:e9:96:13:2a:1c:12:40:be:b0:08:
         46:f1:e0:8b:0c:b8:78:b1:29:68:61:5d:4e:b9:bf:a9:88:8f:
         7d:61:87:67:8c:d1:5d:e8:6b:96:94:39:0e:02:78:7a:53:b8:
         0f:c7:1d:79:b2:e6:92:89:f6:ce:e2:81:f2:04:fd:e8:3d:c0:
         9c:fc:60:4e:72:8e:0f:9a:73:00:4e:c8:34:a5:8f:da:e9:ca:
         8e:25:c3:6f:91:e1:07:18:1a:a3:5b:af:a8:a5:6b:77:ce:d7:
         2e:b7:df:de:c4:c6:fc:77:25:4c:7a:29:5c:eb:d4:eb:68:62:
         75:a3:52:99:91:d5:dc:86:f6:6c:19:bf:61:3a:a1:5a:0b:79:
         d9:4d:a6:d8:da:82:9f:fa:d6:5b:05:a1:16:da:b0:ee:7d:02:
         8b:21:09:f5:6e:5c:24:5b:66:9d:76:6a:25:54:84:0f:d6:60:
         dd:4b:33:08:be:74:c6:68:d9:9d:97:de:ce:1b:37:a4:c0:60:
         91:9b:a4:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1ZYwyW27/bMQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
MWI5ZjNjOGItNjA3Yy00ZDE3LTk0NWYtZTJiZmI4NzI2YzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv+Vf/QOCW45dLau7PDg4vDP+bdccdQvzQdr
qxJc1dOWFMrYL/BLwi5Tn5lmqj6JIs626iEOHRhIf2ERTDCN/HMjhXXHRMy1sNvY
rZm5VWzlyA+87/JXLHyNW8HnJp+jRlznIzD3Zg4IenRnKkgd8oR5fAbAXXTR15C3
7TrdOIpOYPROJ1YMR0KZDw17t+YyYW/VTHKqKiGtPWauuSNsBGFbzLo9IZUzALpH
HxO0tZk0h09+R4r7iL/aWmL6JyTEnltpbzSH/Ri1bBVJGqIaTotLhDTDOrhRYMNk
83Xp3piGbbk2rQbJGBnufHoU7yCSXmImON+aU35xusja6oZgewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBakxacwl1kFEEHwRpUdMsvdFobHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDI4NGEzOWItMDNlYy0z
MzM3LTgzZDMtZjM5MzI1NWViZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAHTeaTPqHunND03FEfN73mKvFYgr+Xv2RFcMQ4KBMR75os52s6llS2
ZqQJrpPQmlGFJbJ/AQxtceKDawkY6ZYTKhwSQL6wCEbx4IsMuHixKWhhXU65v6mI
j31hh2eM0V3oa5aUOQ4CeHpTuA/HHXmy5pKJ9s7igfIE/eg9wJz8YE5yjg+acwBO
yDSlj9rpyo4lw2+R4QcYGqNbr6ila3fO1y63397Exvx3JUx6KVzr1OtoYnWjUpmR
1dyG9mwZv2E6oVoLedlNptjagp/61lsFoRbasO59AoshCfVuXCRbZp12aiVUhA/W
YN1LMwi+dMZo2Z2X3s4bN6TAYJGbpLY=
-----END CERTIFICATE-----
Generated at Thu Jul 10 19:42:54 2025 by rpki-client