Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/435a4c7f-3b59-32f0-a73f-afc1a683194f.roa
File:                     435a4c7f-3b59-32f0-a73f-afc1a683194f.roa (raw, json)
Hash identifier:          RD+WUmzCL8Zab0jledGSk0Jt90yz8lA9F22E9fq7Lxo=
Subject key identifier:   39:E5:A4:5F:11:18:45:B4:AC:19:92:FF:C7:19:17:4F:B5:C4:F8:4D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849849EF2A0B93DD79C2C384250
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/435a4c7f-3b59-32f0-a73f-afc1a683194f.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     14315
IP address blocks:        136.0.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f2:a0:b9:3d:d7:9c:2c:38:42:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=7121268a-7342-40ce-bacb-4ca393c96888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:e9:cb:80:43:65:9f:a4:e5:65:1c:be:b7:
                    1c:07:8f:11:f4:ba:7e:fa:c0:52:ee:27:5f:11:96:
                    19:e6:5c:e0:18:0e:14:62:a7:f3:8e:51:45:91:0f:
                    b4:b9:50:aa:39:c5:63:5d:7d:41:6f:4f:1f:cd:78:
                    7d:18:55:d4:99:ce:4e:f1:ba:bf:ea:87:4c:3f:df:
                    c8:a6:1c:ac:b9:4c:83:f8:cf:1e:04:04:5f:5c:cb:
                    ae:aa:43:88:63:96:e0:d9:ab:31:ca:78:06:30:a8:
                    c3:4f:00:e5:b0:98:18:b5:9b:f2:e7:ea:23:87:45:
                    e0:df:85:8e:77:76:bb:2a:2f:e9:49:65:4e:3a:8a:
                    7d:45:c4:56:87:99:26:f7:75:1a:32:86:39:80:3b:
                    8d:0f:0c:d6:ae:d4:1e:4d:4d:8c:77:b9:a0:45:17:
                    9a:ba:ca:18:0b:38:9b:52:ed:8f:98:ef:0a:17:cb:
                    5e:56:62:11:a7:e0:ce:2b:21:6f:56:4c:ab:b2:3d:
                    5f:45:9f:b1:bf:95:10:b0:af:fc:d4:04:ee:48:00:
                    5e:3e:ba:70:6d:1b:22:62:93:58:38:06:90:c6:b0:
                    4d:85:1b:85:c6:d0:6f:9b:f2:58:21:17:cf:2a:88:
                    af:db:5d:a3:3b:2d:7a:83:e7:da:78:70:f8:13:69:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:A4:5F:11:18:45:B4:AC:19:92:FF:C7:19:17:4F:B5:C4:F8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/435a4c7f-3b59-32f0-a73f-afc1a683194f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ee:3f:6d:5c:8c:1c:44:79:68:e3:6a:61:57:79:53:db:e3:
         10:40:17:23:33:7a:09:80:f9:22:68:e6:da:a7:6b:47:f6:7c:
         f1:a5:a4:d5:89:fe:29:c8:41:96:76:bf:31:1c:9c:b5:f9:a2:
         b7:a8:69:20:b3:31:9f:ba:20:97:8e:c9:48:17:16:56:9e:4a:
         c7:6b:f9:e0:ec:d9:f6:c7:17:f8:9f:c2:c6:31:3d:8a:9d:2d:
         c8:86:09:05:83:44:08:42:7d:59:1a:f2:b4:44:b6:3c:61:22:
         6c:59:f0:3a:75:69:d6:e2:1d:55:b2:93:3e:ef:30:37:39:59:
         e6:dd:fb:1b:3b:b8:1f:c0:0e:cd:4b:9a:ed:4e:bf:7f:7a:0b:
         6c:1e:09:58:4f:3b:54:e1:6e:1b:78:bd:f3:83:30:f8:24:66:
         8e:9f:80:fe:bb:64:e8:86:65:d1:8d:ee:b5:af:e4:c6:e3:5c:
         69:be:8c:4b:91:8b:cc:ad:62:f0:9c:28:26:6d:b1:14:db:ae:
         be:e7:9d:ee:d5:77:3e:ae:27:44:1b:7a:58:3b:54:d9:02:6b:
         44:a6:f5:f8:78:6f:07:8d:2b:19:71:58:74:f8:b6:31:88:68:
         cd:04:85:2d:8b:2a:c1:d6:e6:d7:d0:9e:e3:31:d6:c6:31:65:
         be:46:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:12:05 2025 by rpki-client