Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/792aee5e-4947-3e89-97ee-9869c2bb5ed7.roa
File:                     792aee5e-4947-3e89-97ee-9869c2bb5ed7.roa (raw, json)
Hash identifier:          3eSVEve3Q96XMzIo9bQYKu/rjFd7+mfa27cD32Qe2rI=
Subject key identifier:   4B:B5:B2:36:0E:8D:FB:1C:0C:89:D1:5A:C8:AA:F8:8D:AE:38:59:23
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B9177699150819C9626614C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/792aee5e-4947-3e89-97ee-9869c2bb5ed7.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     44477
IP address blocks:        136.0.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:69:91:50:81:9c:96:26:61:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=379d357e-a3c3-41e5-9656-be64b880d42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:f1:30:da:14:72:e9:f4:df:87:0e:57:4f:
                    f1:1c:5e:8f:a4:ae:ea:21:13:fe:17:72:0f:84:18:
                    21:95:48:6f:8d:b1:2c:64:a0:b2:87:8d:4f:a3:b2:
                    3c:cc:f6:f9:69:77:52:08:45:c6:47:6d:8f:ee:8b:
                    95:d2:29:47:95:24:cf:66:87:88:7b:e1:48:3b:31:
                    9d:d5:22:45:f7:0b:8c:fd:88:83:da:a0:0a:27:7b:
                    98:b0:e8:53:7c:ef:0a:c7:b1:07:30:ad:11:f5:61:
                    7d:3d:43:af:ae:d5:b6:9e:e0:5d:0d:53:28:50:2e:
                    22:50:fd:dc:a7:65:6f:eb:18:7f:3c:33:16:b0:02:
                    bc:d5:64:69:06:69:92:b0:eb:d8:5c:67:99:20:44:
                    86:ed:98:95:06:5f:b9:f8:d4:8f:39:47:6b:3e:ac:
                    b0:0f:74:9c:35:56:d9:1f:47:17:87:2d:cc:ee:6c:
                    b0:82:0d:02:b0:b4:10:7b:89:c5:e1:b5:49:92:1a:
                    41:6d:c9:ef:bf:7b:49:64:17:80:50:e4:62:27:9c:
                    d1:9a:df:5f:49:3b:2c:97:7f:70:05:97:1e:f3:5e:
                    23:98:94:14:dc:08:2a:b2:89:05:d8:64:f4:71:15:
                    81:6f:22:ba:68:bb:5e:f4:10:d1:65:d5:f1:fe:3f:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B5:B2:36:0E:8D:FB:1C:0C:89:D1:5A:C8:AA:F8:8D:AE:38:59:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/792aee5e-4947-3e89-97ee-9869c2bb5ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:11:fd:f7:34:76:06:0b:de:b3:53:f9:ab:97:d2:b5:b9:3a:
         2c:46:50:c9:7a:6f:da:e3:af:a5:ef:d7:04:fa:ae:20:b1:82:
         06:d9:fd:21:94:f0:f4:2c:9d:a5:81:1c:31:c5:5a:51:41:b5:
         64:9d:d8:7b:76:93:b1:11:6a:25:87:93:46:e3:46:07:45:c7:
         1a:9e:be:f3:20:b8:b2:fb:e3:12:15:d3:d1:41:a4:7e:59:05:
         6f:f5:f7:5d:f8:40:1a:20:e2:36:a8:34:72:25:ec:14:60:04:
         77:d2:00:1a:07:b5:ca:22:28:87:e5:e3:d2:3e:84:ea:48:80:
         87:be:e3:e7:ab:bd:da:ed:10:96:3b:17:98:e5:5e:37:db:fb:
         d6:89:4b:8e:77:1e:0f:a6:37:77:6c:eb:f3:0c:3b:90:cb:14:
         79:41:36:24:81:d0:03:f3:e5:39:84:79:29:c4:a0:ae:86:c4:
         d1:b6:b9:08:68:32:da:db:76:12:ee:0e:83:00:d8:74:de:19:
         7f:48:f1:56:11:3b:35:b5:76:98:3b:e7:44:75:54:d3:0a:a9:
         bc:b0:8d:9f:84:9e:40:7d:f9:33:66:1e:04:19:d2:01:d3:e5:
         39:79:cb:b7:f2:b9:ee:ae:b7:13:2c:2e:7f:bb:48:6e:54:06:
         55:82:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:23 2025 by rpki-client