Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9baee27-e6ba-3f81-a65a-8c870ed3c529.roa
File:                     d9baee27-e6ba-3f81-a65a-8c870ed3c529.roa (raw, json)
Hash identifier:          zgS/BoFvbkXMlq/G7I262m1kOz+DLY06VuzyMP6w+Qs=
Subject key identifier:   DC:EA:DB:38:4D:70:EC:91:00:DB:9D:16:85:5B:B0:09:48:DF:42:4A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584965E983B10912DC4ED6F329C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9baee27-e6ba-3f81-a65a-8c870ed3c529.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     401152
IP address blocks:        136.0.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:83:b1:09:12:dc:4e:d6:f3:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=2b244da6-815a-456d-9787-e6b7273f8895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:83:7f:47:90:37:99:e0:2b:d6:3a:e2:c1:
                    98:93:09:03:07:c2:80:e0:11:56:47:d0:06:2a:35:
                    fa:af:fd:7c:1d:31:75:79:f3:a0:8d:93:2a:e7:94:
                    e2:ef:12:fa:4a:fb:5d:32:d3:bb:96:f5:0f:f2:42:
                    a5:f6:44:a6:5a:6f:48:21:ea:4e:58:bc:09:c9:27:
                    62:fd:4d:2e:ee:64:e3:de:b9:fc:57:55:6c:e4:ab:
                    ab:87:5a:34:ea:8f:4b:a2:15:10:64:88:c4:74:9b:
                    84:6a:2c:a3:4e:c7:e6:2d:67:82:cd:3d:ea:14:ea:
                    b9:b8:93:d4:39:6f:55:f8:81:0d:7c:38:29:ff:6f:
                    f1:a2:d8:0e:b3:a2:dc:30:9d:4a:1c:d7:9c:88:ed:
                    e8:55:96:4d:7f:87:d3:b0:d4:46:21:2d:97:1b:19:
                    3e:5b:7a:ac:01:1a:ec:96:dc:86:41:12:e1:c5:9b:
                    40:ab:81:a5:34:de:62:fb:be:92:8a:31:98:18:cd:
                    38:0b:93:c6:05:a7:72:c4:25:d7:aa:96:19:b0:57:
                    88:7d:a9:4a:d7:1b:be:20:54:b9:98:5a:35:a5:f9:
                    c0:2c:d4:b6:56:da:26:f2:5c:44:fe:88:c2:be:cc:
                    7d:ef:62:3d:ce:fa:a1:4a:f4:7e:4b:bd:45:53:45:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EA:DB:38:4D:70:EC:91:00:DB:9D:16:85:5B:B0:09:48:DF:42:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9baee27-e6ba-3f81-a65a-8c870ed3c529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:07:71:06:9d:d7:4f:d9:97:9e:50:31:db:7c:b3:f8:e0:38:
         09:49:a7:ad:31:d7:22:ed:0c:8d:bd:e7:21:1e:f2:3c:4c:9b:
         83:cf:5a:34:5a:e8:46:10:45:6f:b0:43:2f:df:62:49:b7:dd:
         e1:1e:8a:7f:74:7c:16:73:2e:0e:6a:b1:cf:0c:f5:27:ea:61:
         69:84:1f:9a:8f:47:df:a9:15:b9:1a:1a:50:80:d7:05:65:00:
         0a:97:91:a0:ad:bf:ae:d6:94:2f:54:60:2f:a7:93:b0:f6:dd:
         f7:f4:f5:6b:07:11:93:73:d4:28:10:be:92:c5:af:3a:70:81:
         cb:1b:1a:54:ed:25:91:4b:b4:a1:27:37:52:80:bb:1b:e9:c7:
         f4:9b:8f:15:d8:ee:8d:ad:9b:c1:73:b9:2b:57:ff:79:6f:b3:
         58:15:97:52:17:de:33:4b:3f:3d:68:dc:65:e9:33:14:63:9c:
         04:4f:91:73:a1:63:4d:37:11:77:e2:d0:27:68:81:62:9b:90:
         ba:34:a6:1d:fc:d3:d1:50:c6:bd:32:60:fd:a6:d1:d2:e9:35:
         0a:80:6f:2f:23:b1:56:12:b5:8e:8b:07:6b:5d:bc:f2:fb:6a:
         e6:ea:c3:d1:70:53:19:8e:98:ae:07:f3:00:19:bf:bd:f3:16:
         a0:71:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:45 2025 by rpki-client