Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c18d5d8-c724-3fd8-90f8-3a3448660bc5.roa
File:                     6c18d5d8-c724-3fd8-90f8-3a3448660bc5.roa (raw, json)
Hash identifier:          qyqcarsGOQL/JRfjUxQm1UKthNPN54mLyNXFTzlvL1E=
Subject key identifier:   B5:95:4B:DA:91:2F:3C:25:62:88:BD:1A:DA:D6:F3:E7:C3:CD:B7:F0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6C55E7EEF2CEEE8D0F568700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c18d5d8-c724-3fd8-90f8-3a3448660bc5.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     10753
IP address blocks:        136.0.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e7:ee:f2:ce:ee:8d:0f:56:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=339d04ea-0ff9-4764-ac8f-5a47d1e2e409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:2a:69:3b:fa:b4:01:bd:d5:58:c0:eb:ae:
                    51:4f:5d:9a:07:03:67:6b:d8:4d:04:9a:b6:5e:ee:
                    d3:4e:4d:d2:7a:fa:cc:55:83:83:0a:d7:b5:f4:35:
                    5f:bd:49:8b:a0:2f:f7:7f:81:2b:cf:b2:a9:f9:2e:
                    3b:b7:1e:0b:8d:d7:8e:b4:29:97:19:44:7d:af:d2:
                    1a:bd:01:7f:b7:bb:d0:ac:c3:a4:c8:3c:76:1b:c5:
                    93:4d:9b:4a:ef:03:3e:61:07:39:84:3e:f0:c6:d7:
                    d9:c1:c1:56:f7:fa:13:d8:c8:05:9e:ad:34:a6:5c:
                    e4:b7:69:a2:b2:e9:97:46:86:35:e1:82:c8:24:62:
                    85:2c:96:84:5b:0b:08:28:d9:57:0f:f0:b1:bb:c8:
                    84:a9:f6:d1:32:b8:a3:18:3b:7b:b7:cf:98:0e:d0:
                    cb:34:d0:13:e4:72:38:ce:ac:0f:30:55:3f:08:8d:
                    aa:a4:35:a0:12:bb:cf:f1:24:7b:d2:c5:a7:75:5b:
                    41:ef:e7:21:b8:28:fb:31:e6:b7:4b:4e:60:2f:35:
                    f9:8b:25:ea:99:85:f0:84:34:a7:10:4b:97:15:96:
                    9e:a3:04:64:3d:fe:91:17:52:28:4f:01:fd:8d:c6:
                    d2:1b:5e:e2:5c:8e:60:79:21:59:ee:6a:e3:8e:5c:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:4B:DA:91:2F:3C:25:62:88:BD:1A:DA:D6:F3:E7:C3:CD:B7:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c18d5d8-c724-3fd8-90f8-3a3448660bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:cb:c4:58:18:95:5b:7d:3f:b2:c8:0b:66:15:a4:64:fd:
         a4:4f:ae:08:15:fa:4d:4b:d1:88:11:6d:30:38:35:ac:b8:e4:
         22:90:31:f0:f1:80:53:d3:e4:18:58:51:04:27:f3:c9:82:9b:
         19:a6:0d:e9:39:9d:87:94:98:e2:f6:fc:2c:f2:47:a4:52:91:
         51:82:bc:48:bb:c2:21:b2:07:79:95:12:96:e9:00:50:9b:0b:
         72:d5:5e:f2:d7:f7:22:f0:d9:b9:fd:60:3d:7e:d4:51:79:64:
         65:f8:a7:cd:9a:93:e7:55:14:92:d6:e3:1d:25:41:31:37:28:
         44:e6:21:d1:5f:c1:a0:9d:c8:ee:a4:97:1a:b1:3e:6a:66:c5:
         76:ad:bc:ef:86:95:1a:3d:3e:20:8b:af:8b:f6:2c:8b:ad:11:
         66:9b:3b:45:36:6f:22:0a:07:1a:db:1a:41:38:3e:17:f3:24:
         8c:b4:e8:12:06:1d:fe:0f:1f:7d:8c:62:74:1e:60:79:12:48:
         38:9e:2b:c4:82:c1:0e:5c:92:e9:c7:f6:e1:e4:7d:97:0d:f0:
         35:3c:71:fa:8d:45:39:b5:76:fe:e2:2e:43:2f:a0:b5:a1:5d:
         d0:db:0f:ce:4b:51:fe:60:d8:5c:87:7b:74:30:1c:71:f0:5a:
         8c:18:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 16:42:55 2025 by rpki-client