Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2570737-2714-3ef3-b37a-132911b033fc.roa
File:                     f2570737-2714-3ef3-b37a-132911b033fc.roa (raw, json)
Hash identifier:          nHUP/fDEfpIu+n0AtJga8mDHzWITJkarIPArGJ7acQk=
Subject key identifier:   76:CF:72:91:EC:32:67:92:CD:44:72:00:E0:B6:2A:7D:52:D1:3A:72
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6826391062E0A8F16065A100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2570737-2714-3ef3-b37a-132911b033fc.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     398252
IP address blocks:        136.0.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:39:10:62:e0:a8:f1:60:65:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=b532bc6b-897f-4a7a-8d9c-acbb13aaca57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:6d:05:dc:ab:64:3e:87:29:92:1b:be:66:
                    51:5e:54:70:f0:d9:bc:d3:db:d9:af:21:d0:83:6a:
                    fc:dc:dd:f5:6d:e7:b0:54:38:aa:fc:48:66:2b:8c:
                    61:2d:71:c0:e1:2a:5e:ca:c3:df:fd:08:93:1c:0f:
                    04:cd:b7:90:fb:ee:6b:5d:d2:4c:c2:5c:93:20:24:
                    f5:03:50:b1:43:0f:52:27:b3:be:13:be:8a:76:1f:
                    1b:3e:98:4d:bd:40:4c:5b:16:6c:58:7c:64:7d:32:
                    b3:ca:9f:70:aa:68:7a:6b:69:80:68:97:5f:44:69:
                    23:83:6e:fc:6c:89:9f:89:ef:4a:da:e5:7d:48:7c:
                    ec:27:a9:7b:60:9d:a6:59:1d:33:df:d4:f7:1a:9a:
                    ab:83:69:2c:5a:58:19:ec:46:57:34:95:ca:27:c1:
                    1a:e2:e4:a6:4f:78:92:12:38:3f:74:c7:9e:e9:bb:
                    04:33:7b:10:72:8d:08:70:23:50:5a:1e:8a:02:ef:
                    ae:52:72:e1:f2:57:66:81:7f:3e:b6:81:7f:92:39:
                    ea:51:d8:6b:6d:f0:63:f4:f4:ad:3f:7f:82:f0:19:
                    03:7a:1c:0a:2a:75:91:1e:b7:fa:e8:c8:62:a7:60:
                    c1:ff:e6:3b:3b:03:7e:ba:4c:8f:1c:e7:ee:57:12:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:72:91:EC:32:67:92:CD:44:72:00:E0:B6:2A:7D:52:D1:3A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2570737-2714-3ef3-b37a-132911b033fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:20:ef:6c:f7:87:20:51:12:82:73:b8:ac:9d:09:d5:b3:03:
         10:d3:ed:be:61:13:3e:d8:07:01:01:8c:1e:0b:bf:26:15:b1:
         b5:4a:be:cf:94:0e:bc:7a:77:1c:28:a5:8b:fb:b8:a9:21:72:
         61:a7:aa:9b:34:68:02:12:6e:b7:75:67:14:8b:16:71:9c:9a:
         3b:d5:55:82:9a:f2:7d:f1:e6:23:6f:8b:1b:b6:e2:59:c0:0d:
         a1:eb:8e:cb:65:46:ae:90:c0:22:2b:c6:63:ad:3f:0e:39:40:
         b3:15:36:24:80:e6:02:6b:14:06:5e:9c:85:ed:5a:6a:19:47:
         42:9b:43:16:b2:28:90:b3:4a:c6:fd:2f:c9:1c:aa:b7:15:7e:
         cd:32:fb:05:21:24:f2:5e:bf:b8:09:0b:21:46:c3:f7:ff:2e:
         8b:b8:15:58:73:09:61:30:00:34:f0:d6:5f:c4:53:66:1e:34:
         fd:c4:cf:ea:b4:18:ad:e6:b7:47:23:11:80:b0:19:21:78:3a:
         56:00:a4:07:07:76:0b:71:dc:bb:d8:a4:75:9d:09:92:49:da:
         53:86:4c:4a:a9:74:bc:e0:e0:a0:b0:ee:2a:3d:df:b4:a8:93:
         ef:a8:8c:2f:c9:c6:9e:28:32:82:a7:5a:d0:a6:3e:60:09:48:
         95:29:8b:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJjkQYuCo8WBloQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
YjUzMmJjNmItODk3Zi00YTdhLThkOWMtYWNiYjEzYWFjYTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOttBdyrZD6HKZIbvmZRXlRw8Nm809vZryHQ
g2r83N31beewVDiq/EhmK4xhLXHA4SpeysPf/QiTHA8EzbeQ++5rXdJMwlyTICT1
A1CxQw9SJ7O+E76Kdh8bPphNvUBMWxZsWHxkfTKzyp9wqmh6a2mAaJdfRGkjg278
bImfie9K2uV9SHzsJ6l7YJ2mWR0z39T3Gpqrg2ksWlgZ7EZXNJXKJ8Ea4uSmT3iS
Ejg/dMee6bsEM3sQco0IcCNQWh6KAu+uUnLh8ldmgX8+toF/kjnqUdhrbfBj9PSt
P3+C8BkDehwKKnWRHrf66Mhip2DB/+Y7OwN+ukyPHOfuVxLG7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbPcpHsMmeSzURyAOC2Kn1S0TpyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjI1NzA3MzctMjcxNC0z
ZWYzLWIzN2EtMTMyOTExYjAzM2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiADsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADog72z3hyBREoJzuKydCdWzAxDT7b5hEz7YBwEBjB4LvyYVsbVKvs+U
Drx6dxwopYv7uKkhcmGnqps0aAISbrd1ZxSLFnGcmjvVVYKa8n3x5iNvixu24lnA
DaHrjstlRq6QwCIrxmOtPw45QLMVNiSA5gJrFAZenIXtWmoZR0KbQxayKJCzSsb9
L8kcqrcVfs0y+wUhJPJev7gJCyFGw/f/Lou4FVhzCWEwADTw1l/EU2YeNP3Ez+q0
GK3mt0cjEYCwGSF4OlYApAcHdgtx3LvYpHWdCZJJ2lOGTEqpdLzg4KCw7io937So
k++ojC/Jxp4oMoKnWtCmPmAJSJUpixI=
-----END CERTIFICATE-----
Generated at Thu Jul 10 17:32:23 2025 by rpki-client