Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ee8cf4e8-9e53-35d0-bec3-b735247caaa8.roa
File:                     ee8cf4e8-9e53-35d0-bec3-b735247caaa8.roa (raw, json)
Hash identifier:          A6RtHCHzZTnYryX0mKpiXYo3uvyEPBnHXU6WLVVYO00=
Subject key identifier:   19:0E:C8:DA:C6:13:87:65:E7:FA:B4:3F:41:5D:45:7C:8B:AD:9A:62
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A0F3E023719DCDAF9D722B820
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ee8cf4e8-9e53-35d0-bec3-b735247caaa8.roa
Signing time:             Mon 02 Jun 2025 16:42:50 +0000
ROA not before:           Mon 02 Jun 2025 16:42:50 +0000
ROA not after:            Sun 31 Aug 2025 16:42:50 +0000
asID:                     401152
IP address blocks:        136.0.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:3e:02:37:19:dc:da:f9:d7:22:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  2 16:42:50 2025 GMT
            Not After : Aug 31 16:42:50 2025 GMT
        Subject: CN=f019eaec-f3ff-49d2-b056-13752daa5a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:af:72:52:62:4f:e0:1e:13:a5:ed:d0:d3:0a:
                    ca:18:6f:04:81:5c:8f:3b:57:7f:a3:8c:3d:15:b4:
                    a0:e0:fe:85:00:3f:be:c1:fc:fb:1a:fd:cd:0e:ca:
                    93:7d:9d:e4:28:54:93:81:cc:84:f8:0e:b8:be:7a:
                    91:88:06:67:a0:d2:28:22:cf:09:78:80:92:2b:dd:
                    e1:dd:90:a3:5a:10:3a:38:26:6d:5d:16:5a:19:b5:
                    05:ef:6b:00:ba:73:4b:d0:3e:a7:bb:1f:2f:98:b2:
                    07:08:17:1d:da:42:8f:55:71:9c:38:49:d3:1c:8b:
                    dd:7b:68:ed:2c:24:4e:67:9c:2a:89:c9:69:af:b9:
                    e1:9c:81:c1:12:20:d5:42:92:f3:20:5c:23:83:a2:
                    66:ae:74:be:8e:2b:ff:1e:e8:03:30:cf:e9:8e:9f:
                    c8:3c:9f:74:46:83:09:d5:74:35:7e:c8:c4:b8:1f:
                    3c:e1:49:91:99:65:08:62:29:70:ce:54:31:54:c2:
                    39:5d:f3:35:17:45:3a:ec:7e:e2:0c:bb:16:86:36:
                    9c:78:d1:db:ac:ae:83:d2:81:9b:44:3c:48:64:94:
                    ae:e8:ef:2e:7a:85:7c:72:f8:c4:30:4a:57:b6:52:
                    c3:64:61:5d:8f:77:aa:43:64:e5:94:13:80:07:ad:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0E:C8:DA:C6:13:87:65:E7:FA:B4:3F:41:5D:45:7C:8B:AD:9A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ee8cf4e8-9e53-35d0-bec3-b735247caaa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e7:bc:89:1b:7e:fd:ca:49:00:05:7f:09:1f:fe:95:e8:bf:
         dc:3f:bb:52:42:b0:29:ca:e8:66:9f:a0:d1:3c:53:72:34:89:
         0b:04:4a:ad:4c:52:6e:ef:88:17:98:6c:f6:5d:44:35:a2:46:
         bf:22:31:3f:9f:f1:a9:2e:67:e5:d5:69:14:fa:d5:dc:d2:72:
         ec:6c:22:30:84:84:bf:fe:89:f7:06:41:05:5b:cb:9b:4f:b8:
         88:3c:ec:53:44:23:44:96:5e:a8:49:70:05:82:55:83:eb:c1:
         fa:1a:0b:b1:75:e0:c2:45:b3:ca:96:4e:7c:4a:e6:55:fc:99:
         33:c6:5e:42:f3:a3:92:54:67:d7:73:a8:a0:da:df:87:1e:53:
         c3:2c:87:1e:07:b2:5f:9b:38:ce:91:9d:cb:4d:14:9f:ef:46:
         c7:bc:59:48:90:1f:b4:4a:d2:0e:3f:55:b5:09:c3:30:d7:6a:
         7a:69:78:af:20:f6:00:f0:f6:5b:66:ad:f3:e2:84:c6:a8:00:
         3e:db:9f:6e:15:98:72:63:24:db:1f:a4:ea:23:2b:76:ce:50:
         2a:3d:59:f5:c5:32:f4:b3:99:ad:5a:a8:99:3b:92:96:e9:8a:
         e0:9f:04:a5:8a:52:78:c2:92:68:7b:60:88:23:32:d5:73:3f:
         c9:ee:a9:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoPPgI3Gdza+dciuCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDYwMjE2NDI1MFoXDTI1MDgzMTE2NDI1MFowLzEtMCsGA1UEAxMk
ZjAxOWVhZWMtZjNmZi00OWQyLWIwNTYtMTM3NTJkYWE1YTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK9yUmJP4B4Tpe3Q0wrKGG8EgVyPO1d/o4w9
FbSg4P6FAD++wfz7Gv3NDsqTfZ3kKFSTgcyE+A64vnqRiAZnoNIoIs8JeICSK93h
3ZCjWhA6OCZtXRZaGbUF72sAunNL0D6nux8vmLIHCBcd2kKPVXGcOEnTHIvde2jt
LCROZ5wqiclpr7nhnIHBEiDVQpLzIFwjg6JmrnS+jiv/HugDMM/pjp/IPJ90RoMJ
1XQ1fsjEuB884UmRmWUIYilwzlQxVMI5XfM1F0U67H7iDLsWhjaceNHbrK6D0oGb
RDxIZJSu6O8ueoV8cvjEMEpXtlLDZGFdj3eqQ2TllBOAB63I6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBkOyNrGE4dl5/q0P0FdRXyLrZpiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWU4Y2Y0ZTgtOWU1My0z
NWQwLWJlYzMtYjczNTI0N2NhYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvnvIkbfv3KSQAFfwkf/pXov9w/u1JCsCnK6GafoNE8U3I0iQsESq1M
Um7viBeYbPZdRDWiRr8iMT+f8akuZ+XVaRT61dzScuxsIjCEhL/+ifcGQQVby5tP
uIg87FNEI0SWXqhJcAWCVYPrwfoaC7F14MJFs8qWTnxK5lX8mTPGXkLzo5JUZ9dz
qKDa34ceU8Mshx4Hsl+bOM6RnctNFJ/vRse8WUiQH7RK0g4/VbUJwzDXanppeK8g
9gDw9ltmrfPihMaoAD7bn24VmHJjJNsfpOojK3bOUCo9WfXFMvSzma1aqJk7kpbp
iuCfBKWKUnjCkmh7YIgjMtVzP8nuqaY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:09:14 2025 by rpki-client