Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a52b4c58-e7b1-3ba4-bc28-40449f4d7100.roa
File:                     a52b4c58-e7b1-3ba4-bc28-40449f4d7100.roa (raw, json)
Hash identifier:          wR18VbEXyf53erKF3nfSHbC9csoaDhzHfcJACu1C9Mk=
Subject key identifier:   75:AC:2F:5A:F9:57:CB:B8:BF:ED:B4:3F:35:AC:5B:48:6F:B6:86:C2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B91776F79C55CDA5C6F712400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a52b4c58-e7b1-3ba4-bc28-40449f4d7100.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     44477
IP address blocks:        136.0.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:6f:79:c5:5c:da:5c:6f:71:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=3c6bae41-b5d1-4a0d-8520-e196c0946d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:f1:4b:f7:2d:36:3b:60:2e:1b:53:cb:07:
                    33:6d:7a:7b:18:70:c4:ff:20:d4:6b:cd:5d:fd:ef:
                    5b:5d:ea:be:4a:2e:4c:21:f3:f8:04:84:59:dd:e2:
                    9e:63:22:29:8b:25:46:95:06:f1:a7:a5:f4:8d:24:
                    8c:13:ef:31:09:f5:c1:34:a0:2c:29:32:4a:b8:88:
                    23:a0:41:db:4d:ef:33:c2:41:ac:6e:76:57:80:ac:
                    f5:c0:de:06:e1:82:ed:65:fb:86:2e:39:e8:1a:42:
                    6e:5e:40:e9:5f:b9:e1:c5:31:d6:3c:5a:a5:b7:31:
                    06:bd:ee:ee:3e:ed:ef:03:71:28:84:ef:97:b1:83:
                    29:93:27:aa:3b:39:20:76:38:34:95:41:61:9d:00:
                    10:aa:c1:1c:2d:d6:4e:37:3e:fe:dc:cd:fb:73:7c:
                    69:60:53:f3:17:be:13:21:5b:15:1a:19:0e:3b:0b:
                    86:59:5a:14:ff:67:e8:60:08:76:0c:3d:e4:08:ea:
                    7c:6d:ad:30:61:f6:91:65:5e:e7:07:50:ab:cd:1f:
                    90:59:df:54:2e:d7:f0:cb:d5:62:2d:79:cc:9c:75:
                    eb:e0:1a:1d:de:2c:7b:c6:7f:84:2b:98:c5:0a:97:
                    78:93:dc:13:c2:9e:1f:a4:cc:80:11:d5:28:09:cf:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AC:2F:5A:F9:57:CB:B8:BF:ED:B4:3F:35:AC:5B:48:6F:B6:86:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a52b4c58-e7b1-3ba4-bc28-40449f4d7100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8d:9c:87:c7:f9:17:c1:7c:64:75:3a:24:8d:d4:07:6e:6f:
         9d:40:b7:90:9a:94:11:8f:2f:9b:b9:46:58:af:f9:ae:39:2f:
         a8:29:14:64:9c:9d:32:f0:17:31:d6:fb:24:f5:f7:c0:89:6f:
         98:b9:c4:ce:a1:1a:c0:40:95:73:65:e7:52:80:8a:cf:10:f6:
         32:4e:e2:46:2f:8a:5c:75:7c:ac:7e:64:c1:5a:d3:aa:bf:fc:
         bc:e9:3c:8e:c3:51:a9:a8:ce:50:37:0f:df:37:65:67:31:24:
         84:cf:92:81:12:99:11:d8:cc:b6:b9:05:27:05:2d:27:d5:6e:
         ab:5b:bb:ab:33:d2:29:6c:ce:21:91:ba:75:63:4c:e1:23:9b:
         95:c0:24:b2:3a:52:0a:ce:c0:ce:97:4b:e5:ee:79:97:06:d7:
         de:ae:e0:df:96:02:a0:2d:cb:98:60:b4:5e:69:bc:f5:71:f0:
         87:b3:28:e9:30:51:9a:29:41:00:9b:68:66:c0:82:2e:33:4e:
         fd:44:10:ed:f1:c4:c0:a6:e4:a9:3e:99:40:91:f5:18:87:02:
         1d:62:d2:d4:72:48:9a:0a:1f:b0:5b:a0:4a:f3:7b:88:f4:83:
         ec:c3:96:2d:8f:03:45:c5:94:76:26:a0:0e:03:2a:2a:18:5c:
         36:a4:0e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:32 2025 by rpki-client