Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/73482726-7bd7-3b81-b63d-651aa8e01b25.roa
File:                     73482726-7bd7-3b81-b63d-651aa8e01b25.roa (raw, json)
Hash identifier:          jN0vR9WskRP36q2UlSm640bqvFpVwv9tYIV4obz143I=
Subject key identifier:   28:56:FE:BD:E0:31:27:D9:50:20:2B:0B:86:A1:7B:8C:AC:C3:7E:38
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B7DECCD36228AC26FB42F1C40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/73482726-7bd7-3b81-b63d-651aa8e01b25.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        136.0.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:cd:36:22:8a:c2:6f:b4:2f:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=43351124-ae59-47ba-81f7-f9ddc78d10b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:f6:b9:f0:e7:fc:31:a8:db:c0:fe:b3:65:
                    95:92:0e:36:cc:64:87:6d:1a:77:89:b1:6d:6f:8b:
                    8f:11:f8:ce:29:05:6d:bb:51:16:43:77:9b:a4:96:
                    88:4c:cb:77:27:89:16:ce:1c:f9:cf:21:63:2a:f2:
                    3a:ec:8d:f6:f1:c9:40:55:ef:39:c9:8c:69:eb:34:
                    d6:ce:17:f4:dd:4d:83:f9:fc:78:80:f9:d8:b1:bb:
                    4b:7c:33:3d:a5:27:fd:fb:2e:66:4b:59:bb:71:fa:
                    b8:67:0f:11:92:53:40:81:f1:f2:1f:21:ee:43:68:
                    a7:aa:92:e0:4f:b7:b9:6c:fc:64:9f:e3:4c:3a:91:
                    cf:a9:80:74:ac:96:72:3b:16:9b:17:81:47:db:cb:
                    3e:5f:c5:7a:23:08:9a:29:bb:04:af:34:7f:ef:6f:
                    ed:be:e3:b8:12:17:06:27:8e:8e:e7:2e:8e:55:b3:
                    4a:17:fb:ea:bd:fe:ec:fe:0f:72:aa:b9:e5:4f:a5:
                    ee:54:1d:81:e4:4c:2d:62:87:e3:dd:e2:3d:3a:1f:
                    11:ac:ad:31:3d:d8:e2:a8:c8:e1:b6:ef:3f:6d:b5:
                    41:47:05:a7:46:64:f6:7a:fb:be:a9:2d:0a:23:78:
                    8c:0b:c4:14:2a:79:24:52:2a:45:62:a1:0e:00:36:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:56:FE:BD:E0:31:27:D9:50:20:2B:0B:86:A1:7B:8C:AC:C3:7E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/73482726-7bd7-3b81-b63d-651aa8e01b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:23:2f:ba:25:22:b4:cb:27:5a:e5:6f:07:9a:5a:fe:42:
         89:10:fb:21:29:20:f4:d8:c4:60:86:52:ee:36:70:c5:0f:70:
         8a:de:a9:e1:d3:38:5f:3e:5f:59:d2:91:9d:ef:a6:8e:82:66:
         e4:fa:0f:89:c5:b1:b1:31:18:87:be:1d:a6:d4:2b:8c:c4:d0:
         ce:2e:02:fb:69:9c:5e:48:63:3d:d6:b4:e5:6b:fd:46:05:b3:
         94:9c:9a:45:41:04:da:1c:1c:32:fd:c6:7b:4b:fb:b4:75:bf:
         36:df:ec:03:a9:7c:22:3f:e0:28:22:e0:a5:9d:c8:38:d4:c8:
         43:0a:51:57:6b:8c:98:9e:94:ec:d6:f7:83:c5:e2:5c:a2:13:
         e3:60:5e:cf:c7:6f:83:ce:14:f4:fa:77:ab:e8:d9:58:a5:a9:
         7b:38:10:12:69:18:42:8e:4f:87:98:b5:41:57:ad:31:9c:5d:
         89:ca:1a:af:35:4f:e4:fa:d9:ef:9d:8a:5e:a8:7d:e6:c0:00:
         d6:6b:b1:8d:04:8b:37:f4:c6:9a:20:d7:9c:ae:7f:56:c3:9a:
         e1:ee:4d:f3:e9:ed:52:39:1c:b7:df:a5:04:56:d5:53:64:91:
         57:d1:12:7a:c1:c3:4a:83:58:30:78:d9:2b:b0:02:8a:d2:b2:
         7b:3b:f6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:18:51 2025 by rpki-client