Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6c37347-83da-324f-93cf-1f9bf609e5d7.roa
File:                     d6c37347-83da-324f-93cf-1f9bf609e5d7.roa (raw, json)
Hash identifier:          X2d9J1PlgRO7vvq4V8QMmqBuzFza9V2UOi9td1M2/UE=
Subject key identifier:   A9:42:09:74:4B:74:29:CE:CC:CF:7E:3A:CD:9C:F9:98:05:6F:7E:1C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AEF8BC97DA9B50E43F4C60800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6c37347-83da-324f-93cf-1f9bf609e5d7.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     401152
IP address blocks:        136.0.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:c9:7d:a9:b5:0e:43:f4:c6:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=9469e9e5-93ed-4a96-86fd-824fb1276222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:18:db:f7:95:83:25:85:44:69:f5:15:9c:00:
                    d5:eb:5e:ea:8d:38:f4:1e:2d:3e:08:ad:b9:af:4d:
                    17:76:56:fe:c2:24:f6:b8:86:e1:c8:99:14:82:73:
                    41:c6:b5:ed:6b:5b:d4:88:68:cc:3f:7b:16:76:63:
                    73:58:cb:73:1b:db:bf:25:ec:63:78:f9:8a:b7:7d:
                    dc:58:87:22:41:ef:34:29:b0:21:d8:cd:93:c0:17:
                    c5:dd:54:26:c8:71:58:22:ca:63:a9:56:20:40:fa:
                    ce:83:99:fb:83:46:4b:5b:d0:31:40:c2:cb:eb:ac:
                    db:82:f0:cd:c0:48:72:a0:c5:1a:86:e2:da:7c:3a:
                    25:f1:99:bc:81:fb:c3:86:2b:3a:10:f9:ce:69:b7:
                    9a:b6:cd:12:96:ac:3f:a0:cc:c7:da:e6:92:bf:9a:
                    f9:e2:65:eb:67:06:d8:d0:f4:53:ea:1c:21:16:79:
                    bd:aa:51:98:18:01:d1:67:d3:c3:3a:a4:35:5c:2e:
                    4f:f8:97:5a:3d:af:dc:6c:9e:01:6a:18:8b:b6:f8:
                    a1:82:6e:0e:85:09:09:d5:04:b0:56:5c:c2:79:2a:
                    d9:fb:64:11:dc:26:c3:5c:8a:66:75:13:12:ef:95:
                    bc:c8:ff:2d:db:c6:6f:88:6c:d3:ea:91:33:7d:31:
                    d5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:09:74:4B:74:29:CE:CC:CF:7E:3A:CD:9C:F9:98:05:6F:7E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6c37347-83da-324f-93cf-1f9bf609e5d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:87:11:8e:8f:87:72:2e:aa:6c:4f:fc:82:23:48:e7:ac:
         48:99:44:96:02:5f:11:d4:cc:6b:a3:c1:79:f6:e3:91:80:17:
         33:f7:d2:ab:69:0f:48:44:2d:ec:9f:aa:84:59:77:0c:a0:d6:
         97:b4:7e:24:8c:c5:f4:6b:b6:ec:41:f4:81:4a:2a:d3:7c:e7:
         d7:55:8c:61:30:cb:18:5b:9b:45:1e:88:37:3b:69:3c:fd:3d:
         c5:64:7c:cb:fc:b4:c1:82:fd:a5:da:80:83:c2:2a:6e:b4:c8:
         a6:dd:85:82:1d:79:18:9c:c6:ad:81:5b:9e:df:48:4f:68:f2:
         08:66:aa:68:63:bf:1f:2e:1e:d2:cf:65:8a:fd:45:5a:16:d9:
         43:8a:d6:12:a4:7e:29:32:8d:6c:93:b0:41:23:63:93:5f:77:
         09:94:18:d4:2e:00:49:4f:97:72:b5:ee:71:2a:50:f4:f5:87:
         2c:fa:f2:76:3d:94:59:d4:c4:8f:2f:8e:4e:b8:9f:89:ce:bd:
         77:ae:9a:54:07:14:9a:91:d0:4f:f0:cf:4e:9a:63:2d:4e:ec:
         bc:44:f9:34:0b:73:9c:e2:42:29:6d:02:e7:11:e5:1c:13:2c:
         64:8d:55:32:0c:02:14:ee:ad:8c:d3:cc:63:68:d1:2b:cd:2c:
         d7:b7:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:06:19 2025 by rpki-client