Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63a54a56-f7d7-3a61-9670-f72453b11c40.roa
File:                     63a54a56-f7d7-3a61-9670-f72453b11c40.roa (raw, json)
Hash identifier:          6TpQ1tDK1Z6Zfohqi/ti/ShlayChgnCZ4JekD2NR3DM=
Subject key identifier:   42:A3:68:D6:C5:F0:CF:F4:25:51:AF:E2:51:97:3A:8C:27:F2:A7:3D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AEE269AC8E81DAFDCF3E327E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63a54a56-f7d7-3a61-9670-f72453b11c40.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     395954
IP address blocks:        136.0.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:9a:c8:e8:1d:af:dc:f3:e3:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=7705dffd-4f5e-4c47-b8f5-a5c84e48c5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e6:65:3c:92:a5:e2:8c:0d:e7:1c:8e:a6:34:
                    82:7e:80:38:c9:68:d9:5d:35:bb:82:36:02:d2:cc:
                    33:18:01:b3:db:7a:e2:5b:0b:da:09:47:4a:ac:78:
                    57:5e:f5:99:97:e8:b2:0e:ef:c0:52:0c:23:0a:1e:
                    c0:93:4d:99:c3:54:79:19:a2:b5:af:fc:54:e8:64:
                    25:8d:de:43:1a:2d:f3:93:cf:d1:1a:a4:c1:a3:f0:
                    62:90:5e:be:16:27:0a:84:4e:38:7c:5b:78:38:ba:
                    82:2d:15:cf:6a:ee:a1:67:f9:0a:d0:b7:67:d6:83:
                    28:80:55:3b:17:93:1a:eb:6b:12:22:97:5d:ad:c8:
                    38:22:1b:51:45:24:cd:96:96:b4:b9:72:c9:0f:1f:
                    37:36:80:09:90:1c:ef:e7:1e:91:6f:0d:7e:a1:5f:
                    d2:b0:94:fc:8c:22:be:d6:b6:2a:ab:d8:59:7d:09:
                    e2:39:c5:c5:14:90:6c:10:e7:b1:68:c0:4f:af:23:
                    a3:d1:af:89:4e:3b:95:84:93:a9:0a:0e:5f:46:b0:
                    e9:59:e0:53:01:c4:92:53:0f:7d:fb:fa:d7:62:ac:
                    e1:b6:0b:d9:14:0f:83:42:12:18:7a:9f:97:da:a5:
                    1e:48:71:16:cd:a8:08:f4:dc:dc:ae:ce:58:34:e6:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A3:68:D6:C5:F0:CF:F4:25:51:AF:E2:51:97:3A:8C:27:F2:A7:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/63a54a56-f7d7-3a61-9670-f72453b11c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:31:36:96:28:0a:05:8c:ba:c0:04:ce:29:15:6a:65:b9:54:
         3d:b6:46:17:09:9b:ba:6c:62:61:b3:58:d6:ce:22:c8:3f:79:
         30:a6:9c:19:9c:12:3b:79:4f:b5:b4:35:32:cd:06:47:23:b8:
         b0:61:9d:1b:f3:7f:9f:7b:c0:7b:04:f4:f6:97:b2:40:31:f2:
         8b:48:89:42:57:2a:51:db:b5:56:de:e8:05:c7:61:8e:08:1d:
         3b:89:93:ea:35:4b:5f:eb:5e:62:d1:fc:15:61:b2:95:45:4b:
         27:9b:c7:96:78:35:9b:95:fc:0a:c5:14:6d:c0:88:b1:ff:42:
         6e:cc:12:1f:fe:4d:d3:62:48:a8:c7:9d:60:16:11:17:0a:a7:
         3b:51:57:75:e4:06:33:a7:7f:5b:20:39:39:8d:29:65:84:16:
         b8:8d:85:dc:ad:ed:38:5a:0b:3c:30:b0:9d:b7:18:20:bc:45:
         ff:bd:5a:5b:78:59:b9:6b:9e:b6:30:3b:4e:e0:f2:22:9f:cd:
         2b:b4:f0:c8:92:cf:b8:61:63:98:b4:ec:cf:6a:f1:e8:49:e3:
         9a:8e:6f:1f:3a:26:64:ac:a0:c5:9c:2a:37:29:8b:f0:1d:20:
         dd:e9:ea:a7:4d:7d:3f:f8:51:3a:9b:20:89:bb:4a:ac:b8:f3:
         92:ae:b5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:05 2025 by rpki-client