Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c7f32b76-966d-3e66-b6ec-00d4bf1df20d.roa
File:                     c7f32b76-966d-3e66-b6ec-00d4bf1df20d.roa (raw, json)
Hash identifier:          boPjB6/gqVHbjnPJmKUZVpclythEThNyPSFxCMqYrs0=
Subject key identifier:   64:E7:65:84:17:35:E9:3F:24:6E:90:D1:A2:C8:1D:F9:80:03:6D:DB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584911A00671E6409F551DC10120
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c7f32b76-966d-3e66-b6ec-00d4bf1df20d.roa
Signing time:             Mon 03 Mar 2025 20:25:00 +0000
ROA not before:           Mon 03 Mar 2025 20:25:00 +0000
ROA not after:            Sun 01 Jun 2025 19:25:00 +0000
asID:                     401152
IP address blocks:        136.0.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:11:a0:06:71:e6:40:9f:55:1d:c1:01:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  3 20:25:00 2025 GMT
            Not After : Jun  1 19:25:00 2025 GMT
        Subject: CN=b7b63654-1548-49e9-a1a8-7f3ed433e99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:38:18:08:58:85:93:c7:a8:99:ec:43:77:37:
                    c6:bc:1e:95:9a:8f:4a:aa:63:d7:a5:6f:71:51:c7:
                    e4:ab:16:6a:73:b0:e6:0a:69:49:b1:00:68:73:84:
                    f6:87:4a:24:ea:5e:60:de:2d:d9:bc:a3:55:be:4b:
                    80:75:0b:9f:23:53:3a:b0:bc:13:7e:16:6d:01:67:
                    5d:01:b3:f4:35:61:3a:bb:df:06:ba:d6:90:e4:c9:
                    2e:ca:e9:d0:bf:fc:62:99:5c:40:73:29:22:b8:fd:
                    95:83:6d:b4:63:9c:2d:61:fd:35:fd:08:33:a6:0e:
                    b8:31:29:f3:c0:68:0a:31:84:40:a1:b4:66:a4:a5:
                    ec:17:fb:c9:d0:db:7b:32:da:c7:41:35:7c:14:d1:
                    c6:18:c4:34:7f:27:84:c0:e8:26:26:9c:c5:35:91:
                    27:0a:6a:87:86:c8:01:06:00:7e:72:a6:04:ea:17:
                    f9:d6:c2:2a:75:2d:dd:29:da:1c:d5:4e:42:c2:e3:
                    ad:3a:a9:e8:c2:33:c4:5f:07:0e:1c:01:d6:ea:44:
                    47:f8:dc:b4:e3:1a:0e:91:ab:5e:fd:2f:7b:f3:8f:
                    28:28:2e:45:fe:fc:93:9a:ca:23:96:d1:ca:3e:9f:
                    36:9a:a1:94:a4:13:3d:b3:f1:38:b6:03:e5:39:31:
                    5c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E7:65:84:17:35:E9:3F:24:6E:90:D1:A2:C8:1D:F9:80:03:6D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c7f32b76-966d-3e66-b6ec-00d4bf1df20d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:de:ff:ce:84:62:9d:47:0e:0f:5d:e1:5c:5e:5b:10:05:
         6f:08:23:ff:00:ab:91:53:60:70:1b:a2:b7:4e:87:25:23:d6:
         fc:d5:8e:c7:1d:9c:bc:4b:06:ab:48:40:e5:45:d0:bf:8e:4a:
         23:5f:13:b6:b7:a0:da:93:a6:78:ed:86:94:c3:84:6a:58:3f:
         11:e1:31:8a:a4:24:56:91:b3:60:81:ac:a1:ee:06:69:74:99:
         05:30:f1:13:95:8b:a5:86:0d:e6:d8:08:13:7c:4b:50:de:21:
         1f:35:60:c5:f9:17:b0:f3:07:d6:07:7c:6a:36:01:ca:85:9c:
         37:24:ae:cf:01:88:05:92:8b:57:35:9c:0e:86:2e:c9:ff:cd:
         12:2a:01:d5:9e:b7:64:9e:1f:12:07:84:85:ec:bf:fa:9a:8e:
         05:b0:d7:20:6f:b9:64:28:4b:ad:b7:33:26:8b:dd:03:e3:2c:
         26:66:48:65:fe:c1:8f:76:20:a7:e2:29:1f:b3:16:b4:1e:eb:
         b5:7f:05:7c:e8:db:67:55:55:b6:44:c8:0a:d1:8b:19:7c:86:
         b1:f4:9c:ce:21:1e:c2:6d:a0:09:e1:8e:ef:f6:ad:33:31:92:
         b0:bc:f7:17:57:cf:8c:a1:63:eb:e1:5a:0d:a1:ff:7f:27:8a:
         0f:ac:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:17:31 2025 by rpki-client