Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa
File:                     9e945d0e-3397-3db2-8c77-78d048e45730.roa (raw, json)
Hash identifier:          1zsqQXtrGjoTLYashAGXiy5JkEZ3gZFyDnd+kieuJ4c=
Subject key identifier:   87:CF:6A:46:D9:9F:BA:B7:D2:7A:31:95:B5:37:74:BD:17:1E:8C:8A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584953C42274F3095CA047828F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     9009
IP address blocks:        136.0.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:22:74:f3:09:5c:a0:47:82:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=739f2052-aa59-4d5b-9643-f6cbd4b21543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:d9:a1:11:f5:9d:74:ea:aa:c8:0c:e8:aa:
                    55:21:8f:d6:5e:23:22:cd:4d:ca:dd:2e:4b:ab:80:
                    87:43:75:36:3d:75:ea:07:6e:ac:31:fc:e5:34:30:
                    c2:b5:f0:a8:f7:4f:62:58:95:b4:a2:37:3b:97:f9:
                    85:15:c0:0e:de:e6:a4:bc:7a:86:b8:23:8a:19:69:
                    ec:c3:17:24:49:a9:2a:36:fb:f8:32:7e:9e:74:fa:
                    18:fb:4b:ce:6f:bc:10:81:9c:38:c4:c6:c9:fb:fd:
                    41:8e:54:44:1e:1a:f1:5a:75:68:c5:fe:fd:c7:9f:
                    28:d4:30:a5:75:d3:55:dc:e0:21:ff:3d:8d:a8:e0:
                    d4:8b:27:cc:00:00:7c:87:c0:58:3e:f6:e1:de:e1:
                    91:3e:66:6a:87:f7:1d:88:88:77:59:67:da:71:42:
                    c5:3c:f8:17:b0:55:dc:67:df:da:60:4e:fc:ce:35:
                    0e:e9:d9:f9:e4:22:5b:b1:04:2f:47:64:2d:84:de:
                    95:4c:d6:8a:8f:8f:ed:f0:18:50:4c:77:48:59:87:
                    b4:04:5e:da:1d:ce:77:ea:94:99:20:07:15:55:d2:
                    6c:9d:4e:d3:a7:54:b9:93:e6:82:28:1c:bb:1b:81:
                    26:79:10:cc:90:9f:4a:4a:92:c2:dd:61:af:84:37:
                    a7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CF:6A:46:D9:9F:BA:B7:D2:7A:31:95:B5:37:74:BD:17:1E:8C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:d8:7b:6b:67:54:e0:a9:56:13:37:72:f8:a1:90:c2:de:
         35:3c:7e:89:8e:0a:c3:ef:b9:4b:49:e1:be:1b:07:5b:18:e9:
         d1:c0:89:b4:15:c8:5d:a9:08:8d:38:8c:50:b9:cf:15:0d:9a:
         03:b7:a6:dd:bc:6f:2e:d1:d9:19:e7:22:44:93:f2:3f:c6:2d:
         c5:49:5a:e7:0d:59:17:9c:22:cc:2a:8b:86:6d:db:ef:93:57:
         72:fa:e4:dc:72:9d:92:82:93:cb:2f:f4:f2:c0:26:67:7b:59:
         3f:50:74:d4:ec:09:25:0f:f6:ef:10:2f:fe:7f:7e:77:00:01:
         3f:00:ed:93:7b:a9:a8:b3:f0:9d:08:a7:7c:71:9e:70:2b:cf:
         8b:41:7c:ba:bb:3f:51:cd:25:1d:42:40:99:cd:bb:f7:b1:00:
         95:49:16:c0:88:46:a9:5b:94:f8:90:eb:59:98:5e:96:c0:29:
         4c:46:80:0a:89:b5:39:e0:c0:59:e3:bb:19:fd:c7:0d:2b:01:
         7f:f8:be:32:a3:0d:63:7b:ab:e2:19:9a:d8:86:53:1f:20:ad:
         9c:a9:2b:0a:52:83:49:a4:67:54:2c:09:8a:35:f2:66:b7:98:
         fd:9c:67:f5:65:fa:0b:b3:91:5b:a7:d7:23:d7:09:ea:54:38:
         d8:56:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:43 2025 by rpki-client