Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a336a2dc-8ea0-3824-8ddd-1cc737dfdde1.roa
File:                     a336a2dc-8ea0-3824-8ddd-1cc737dfdde1.roa (raw, json)
Hash identifier:          Z2M8cuTpeuaFizxO3DmlhO5iqk2m1eDEWIOi388dHC0=
Subject key identifier:   01:08:44:D3:23:39:80:41:99:AD:24:C5:89:8C:C4:96:D6:D8:95:27
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849F1147ACBF298B296D498FE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a336a2dc-8ea0-3824-8ddd-1cc737dfdde1.roa
Signing time:             Thu 22 May 2025 21:24:54 +0000
ROA not before:           Thu 22 May 2025 21:24:54 +0000
ROA not after:            Wed 20 Aug 2025 21:24:54 +0000
asID:                     44477
IP address blocks:        136.0.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:14:7a:cb:f2:98:b2:96:d4:98:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 22 21:24:54 2025 GMT
            Not After : Aug 20 21:24:54 2025 GMT
        Subject: CN=672ce41a-60d4-4769-9293-1330704b6bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:9c:35:f5:49:db:d5:4e:be:3d:d4:2c:27:
                    6d:cc:10:31:11:55:70:0c:41:61:70:34:ac:7c:1f:
                    36:c7:cf:99:c5:69:c0:e0:b0:97:a3:26:be:46:6c:
                    ce:c2:9e:0a:c2:c5:ba:90:8c:b8:e8:a0:fd:9c:8b:
                    92:cf:7d:79:ba:7f:41:e8:c2:d7:a2:63:ac:52:59:
                    0c:48:c7:c3:d0:53:0d:1c:f2:c6:a3:ff:ad:1b:b6:
                    93:ac:f6:f1:26:45:82:d5:cf:0a:f2:19:a9:df:a7:
                    e6:c2:22:ff:cc:94:cc:5a:ae:b7:de:64:b4:41:d0:
                    f6:04:74:c3:af:61:9f:aa:40:47:9d:bc:19:62:21:
                    82:01:e3:23:6f:14:6c:ad:49:16:98:7e:33:0c:72:
                    e3:1c:14:fa:b6:38:67:4a:ab:b5:fa:14:16:c2:1b:
                    af:6e:83:20:9f:d9:66:8a:17:50:5e:4f:4b:05:08:
                    05:f2:4c:d1:9d:34:35:a3:4c:44:05:1f:1b:80:91:
                    a8:4b:f8:30:45:c4:d4:99:53:3a:ec:59:f2:db:22:
                    f6:bd:4e:5e:5d:87:d5:1e:9b:91:90:01:a8:90:6c:
                    0e:3e:db:aa:1c:29:00:f0:b1:85:b3:5a:1d:a7:75:
                    52:a0:01:a3:9a:aa:f8:7f:16:48:1c:14:e4:ca:f6:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:08:44:D3:23:39:80:41:99:AD:24:C5:89:8C:C4:96:D6:D8:95:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a336a2dc-8ea0-3824-8ddd-1cc737dfdde1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:87:53:cc:be:23:aa:15:54:a8:1f:2c:34:45:03:37:b9:0a:
         da:d9:bf:2a:d3:58:38:59:78:58:b1:39:41:06:25:a8:96:7a:
         d1:82:72:30:a4:cb:61:34:eb:ed:84:c1:c7:55:31:0c:54:ce:
         25:c4:45:dd:15:8e:47:d0:97:b2:2c:ef:d4:e7:09:e4:57:d8:
         5f:47:64:e5:d0:66:7b:ec:09:c4:56:f9:13:ef:66:25:fd:7c:
         cf:31:d2:4b:74:0c:83:33:7e:f8:a2:75:27:46:2d:2c:4b:8b:
         a2:b6:df:2d:a7:25:e8:dd:a9:90:18:b3:0c:ff:31:bb:e4:60:
         90:4c:97:2e:b3:57:7b:9a:62:41:2c:de:a3:ed:c5:ca:77:bb:
         8b:0f:01:f5:85:fe:30:54:90:95:fc:1f:74:0c:60:3c:6f:97:
         97:b4:30:2f:d2:c6:ae:c0:38:e3:43:7e:32:1d:72:60:69:3e:
         ce:43:80:de:78:dc:0a:83:82:a7:12:4d:ef:cb:95:a5:08:22:
         39:e5:a6:09:e2:e8:c2:c1:e3:c4:e5:3d:80:cb:8a:20:5f:ee:
         4c:a8:ce:bf:c2:10:38:4a:b1:ca:88:5e:50:26:b8:dc:33:3e:
         26:23:27:d1:0a:4a:3f:59:e6:2a:84:8b:f7:f9:06:14:a7:97:
         aa:97:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:26:37 2025 by rpki-client