Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa
File:                     9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa (raw, json)
Hash identifier:          atdnH19/iOt+LOE8+4A/7sQSghLAtoujqmLMdCMwYQ4=
Subject key identifier:   45:DF:16:3D:30:FF:5E:7C:57:96:12:23:28:41:7D:D6:E6:DA:65:5B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5C10688500497D1D0270
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        136.0.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:5c:10:68:85:00:49:7d:1d:02:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=8ce0a200-a6c3-4d2b-ad1d-d2eb5114aa33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:1c:3f:77:79:a9:2a:67:16:fb:49:a2:4e:
                    21:bf:9e:4a:8f:32:91:f3:16:be:43:46:c9:75:48:
                    04:cf:cf:33:a9:1d:db:8d:43:1b:01:6a:40:7f:34:
                    53:e9:f8:d0:cf:88:19:8b:30:71:25:21:3f:29:0a:
                    8d:89:47:d7:46:26:a2:d7:4d:99:77:2d:25:05:04:
                    74:97:8d:d8:47:c3:69:a2:fe:28:9f:87:ef:0e:47:
                    ab:ca:ea:98:79:06:6a:f7:a8:a1:df:14:de:fb:b8:
                    fb:2c:0e:48:43:d1:d1:48:28:d3:83:22:b8:6f:5b:
                    e2:03:ba:8b:a8:96:09:da:37:5a:0a:2c:d5:0b:b2:
                    3c:2f:9e:97:9a:b6:a0:ef:f0:d8:3e:ca:32:24:68:
                    f3:74:b0:15:46:92:80:89:b2:9b:9d:ab:08:f2:d2:
                    3c:31:83:ae:59:4c:47:ac:46:67:2f:22:4f:ae:1b:
                    78:0c:b6:93:50:3e:79:b1:6f:97:85:a5:83:65:fa:
                    c5:4b:30:55:fa:0d:0e:f5:da:f6:2b:34:36:0a:31:
                    5e:c8:16:25:f7:0d:66:77:d4:77:70:e3:59:4f:7a:
                    ab:51:6c:86:e4:a0:e7:66:58:0f:d2:35:fb:9e:25:
                    ea:68:63:37:eb:55:ce:78:f7:3c:18:4a:85:b6:7e:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DF:16:3D:30:FF:5E:7C:57:96:12:23:28:41:7D:D6:E6:DA:65:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:29:d2:a4:0d:bc:a5:76:28:f3:34:90:03:b4:7a:d6:e4:3f:
         63:43:40:c7:ed:cc:8f:d8:b7:ab:59:f8:8f:54:f3:d9:12:3c:
         73:51:e5:56:e7:3e:8e:ad:38:83:ca:08:30:03:f2:b0:7a:d1:
         28:c3:e7:71:c6:33:34:ab:09:da:e9:87:e3:f3:fd:b0:d3:f6:
         e9:2f:b4:b2:da:5d:f4:d7:ec:c4:e4:d0:ba:33:d0:18:e4:79:
         05:8b:49:0b:25:86:a7:7b:92:45:5a:f8:e7:35:3e:89:38:ed:
         2e:8d:d5:67:29:b4:41:07:e8:38:4e:b2:22:2b:76:9f:c5:ad:
         9b:58:b1:f5:89:14:06:d5:97:bb:b2:6d:1e:7d:10:23:d3:2d:
         a2:06:75:bc:0f:dd:8d:6e:6e:48:eb:95:8b:83:4b:5f:c5:08:
         2f:42:27:5b:1e:a0:2f:c9:cb:74:03:3e:bb:90:71:4d:3d:f0:
         3d:9c:57:55:b6:cf:72:48:4c:70:a6:99:23:86:bf:d1:2b:e7:
         5f:6a:eb:b7:5f:4d:dc:c9:8f:20:80:d4:ad:b3:e7:02:85:72:
         ce:ce:bb:00:b1:60:f6:67:b4:fc:36:14:72:52:0f:94:9c:2f:
         3f:22:63:94:73:47:4e:31:02:f5:44:1a:d1:4b:31:07:38:85:
         42:90:18:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 19:36:42 2025 by rpki-client