Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de35dc36-bd96-3aa2-b77f-f2a64b0cb8ee.roa
File:                     de35dc36-bd96-3aa2-b77f-f2a64b0cb8ee.roa (raw, json)
Hash identifier:          Smnd0Rg571Znms8hAddJ6IurgnotWpwgoFDUdi9/YQk=
Subject key identifier:   3D:8B:CF:FA:E0:34:F1:44:79:AF:14:29:EB:C4:08:BF:33:30:94:12
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ADA9BD1D414BF62A02FDC8280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de35dc36-bd96-3aa2-b77f-f2a64b0cb8ee.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     40676
IP address blocks:        136.0.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d1:d4:14:bf:62:a0:2f:dc:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=685d5849-8343-4e56-afbd-a675f237307e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:ac:2a:3c:92:ce:6a:49:a0:7e:c8:7b:be:
                    5b:e5:02:1d:ca:9b:c0:dd:5b:03:7d:77:92:bb:70:
                    22:a4:56:bc:08:77:db:39:ea:05:03:ab:07:ea:75:
                    05:9f:9d:e4:80:38:5d:a8:0e:db:60:b9:94:a9:e7:
                    01:3a:12:0e:4f:b4:c6:68:b5:1f:55:b8:68:8d:5c:
                    56:13:14:56:2f:99:a4:9c:c3:57:5a:05:f2:ef:e1:
                    aa:2d:d1:ac:1b:b0:4f:37:27:3c:a4:4b:54:7a:14:
                    58:d8:5b:cb:c5:62:03:11:81:48:df:67:de:b2:36:
                    5f:76:2f:78:93:22:e8:86:e1:b2:92:fe:48:32:83:
                    b1:96:fa:62:99:ac:41:9f:b1:a0:c4:66:ba:93:bc:
                    9e:57:03:64:6d:65:95:42:9c:2c:4c:25:44:c0:aa:
                    e1:bf:66:f6:32:0c:31:a8:bd:31:4d:f2:2d:91:ec:
                    64:21:ad:f3:f9:d0:e7:0c:94:31:35:fa:b8:a7:79:
                    08:91:ce:41:61:c5:19:83:28:5a:7e:93:ea:d4:43:
                    cd:a2:21:25:ca:6d:9b:13:16:de:a8:0e:57:db:f7:
                    22:17:7e:24:12:71:81:eb:7f:11:ed:92:ec:ad:a3:
                    92:c6:81:82:66:e8:7e:68:24:fb:8d:48:18:0b:07:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8B:CF:FA:E0:34:F1:44:79:AF:14:29:EB:C4:08:BF:33:30:94:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/de35dc36-bd96-3aa2-b77f-f2a64b0cb8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ca:0d:62:49:ad:3b:6b:88:01:35:fb:58:4c:21:a6:dd:ad:
         ce:09:a7:33:30:e0:07:dd:6e:3d:1a:3c:d3:84:ff:6b:32:07:
         cf:21:df:d9:74:95:36:b7:5c:c8:37:94:cd:90:f9:a7:be:c2:
         98:d6:f6:39:2d:b6:20:79:77:16:78:eb:d3:05:0a:df:d1:76:
         a3:42:fe:32:9f:22:80:84:49:50:1a:dc:7f:de:4f:65:b0:72:
         22:34:37:10:d5:66:e7:67:4e:02:74:e6:4b:17:31:d7:80:d9:
         7e:b6:87:66:db:60:3d:f3:08:9f:00:33:97:2a:c3:0d:b9:07:
         b5:38:58:07:7f:cf:50:bd:54:12:a7:a4:04:77:9a:3a:15:88:
         cc:58:e9:bf:bf:84:cb:a4:b9:bf:78:55:c2:63:ed:64:27:b4:
         c8:7d:a0:5b:f1:cd:4b:3b:08:7f:9c:53:11:d7:29:8b:8e:97:
         b6:2c:f0:08:37:20:ac:fa:d0:95:17:34:9b:bc:6c:8c:36:74:
         91:95:f7:3d:1e:5a:d7:c8:16:78:fc:13:70:be:26:46:2e:90:
         8e:fe:02:c6:47:56:64:32:3d:45:09:ef:64:a6:1f:d5:8d:1f:
         ea:72:04:fc:6b:c6:fb:42:de:4e:30:01:74:45:28:50:b5:a1:
         bb:9f:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:19 2025 by rpki-client