Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5684d1c4-4014-3c44-a0e1-fb8935baedfc.roa
File:                     5684d1c4-4014-3c44-a0e1-fb8935baedfc.roa (raw, json)
Hash identifier:          dEYDVbA7zhqtlha+GePKr/wxpLRAHZZEhs9gA3bCB1A=
Subject key identifier:   27:4D:97:E7:35:9E:6B:A5:23:11:55:29:90:33:8A:DE:37:D0:4D:9F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B6797FA6E382E06984CD98AC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5684d1c4-4014-3c44-a0e1-fb8935baedfc.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        136.0.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:fa:6e:38:2e:06:98:4c:d9:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=eda073ce-b24b-4a4c-bf8a-fa80d4c2a891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:a3:d2:fd:df:43:fe:92:02:67:08:9c:6d:
                    dc:66:79:95:c9:7a:aa:7a:77:2d:28:b7:50:6d:9d:
                    02:0c:f0:e7:6e:d1:31:8c:d9:79:64:dc:25:25:a1:
                    88:4f:1f:48:cc:bb:81:66:c4:fc:cd:63:03:aa:42:
                    98:92:ca:0d:a8:b2:7d:df:f8:2b:54:b8:65:86:c6:
                    1b:0c:40:0c:18:ea:7b:94:a2:a4:f2:e1:ae:19:bc:
                    42:2b:92:27:40:61:17:2a:f9:19:c5:fb:43:7a:a9:
                    59:02:10:74:b7:d9:df:35:0c:5c:40:80:e5:4d:0a:
                    57:1e:1e:9b:6c:91:e5:df:2c:76:c5:79:19:6d:41:
                    68:69:80:20:c9:1c:77:3b:72:4a:be:d1:6a:99:6b:
                    15:fc:4b:89:55:c9:db:bd:e3:17:d7:f5:1b:97:6f:
                    12:78:15:76:30:6c:da:db:b4:3f:6c:32:b6:c6:3a:
                    42:9b:6e:9e:0c:16:b7:1a:18:30:87:ae:ea:e4:24:
                    ca:a0:19:76:50:b6:a7:bf:49:12:9f:e9:4c:b0:e9:
                    e2:6c:fc:e5:82:f8:14:25:7c:4a:f1:b0:41:c2:39:
                    99:34:87:65:5f:32:04:f8:59:f1:29:5a:43:9a:a6:
                    46:93:31:09:54:4a:cf:88:c6:17:1a:c3:5b:e8:b8:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:97:E7:35:9E:6B:A5:23:11:55:29:90:33:8A:DE:37:D0:4D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5684d1c4-4014-3c44-a0e1-fb8935baedfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:40:07:29:7b:bc:4d:d5:37:87:32:09:5a:19:89:99:ba:f2:
         80:51:dc:43:8b:77:ee:bf:9a:62:95:5f:7b:0b:9c:de:81:fb:
         80:6c:f7:f0:5e:33:58:2e:fe:a9:4b:b8:85:d4:8e:b2:37:0f:
         49:66:35:80:02:ae:10:77:a3:6e:97:b8:c2:26:f5:55:3c:0a:
         90:24:04:91:af:ae:c9:fb:c2:41:88:d2:a2:98:3e:bf:bb:0b:
         be:dd:5e:db:03:43:01:04:0a:84:08:cf:19:4b:2b:70:00:9f:
         ed:1b:61:00:31:b7:1a:6c:78:8c:f4:1d:5b:c7:e7:a1:a4:63:
         9d:c9:77:cf:ce:1b:d3:66:1a:35:f7:8a:27:f8:4b:86:8e:7c:
         28:02:90:aa:ad:94:56:ef:eb:27:00:f6:44:5d:35:69:c4:84:
         fb:77:23:06:d9:33:a4:6a:bb:39:9b:ed:53:77:47:cc:ea:b5:
         13:6b:5c:59:03:7c:a8:57:44:99:22:21:6b:65:93:c5:16:d1:
         ab:b7:f4:eb:2c:03:ca:72:b9:bd:7e:15:28:7c:74:51:7e:59:
         78:ba:0f:a1:db:d3:0d:f2:ac:a8:94:91:be:fb:2d:51:01:41:
         a3:e8:95:81:3c:14:42:82:92:05:0f:16:50:ff:20:01:53:a6:
         96:85:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:01 2025 by rpki-client