Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f583e836-2033-3724-84ac-6c4fe0d31f05.roa
File:                     f583e836-2033-3724-84ac-6c4fe0d31f05.roa (raw, json)
Hash identifier:          EdfiepaUvhsfq0k1iIUucB6auxKC/1CR9TRQI4dWAzU=
Subject key identifier:   FC:BC:E4:10:99:BD:1E:92:E1:D8:D7:19:28:90:C9:B5:43:9B:75:78
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A225ACB6BFB10134EE71ABB80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f583e836-2033-3724-84ac-6c4fe0d31f05.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     149440
IP address blocks:        136.0.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:cb:6b:fb:10:13:4e:e7:1a:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=3dc1c6bd-c860-4d03-baec-14099b35d818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:e5:b2:db:74:0e:2c:ae:94:73:99:db:af:
                    56:8d:35:aa:fa:21:0c:f1:1a:c0:31:35:03:6a:30:
                    cf:07:65:0a:88:90:4e:d4:04:4b:55:a3:43:f3:10:
                    f8:7a:11:60:b5:de:1d:ee:c8:1a:d4:79:90:78:f2:
                    a1:36:c1:10:3f:d3:47:49:62:28:56:eb:a7:3d:55:
                    64:d9:a1:69:f5:71:1b:f4:af:16:cd:ed:67:53:b4:
                    d8:8f:1d:c6:22:00:56:14:4a:65:04:11:04:7e:3e:
                    c5:fa:4f:16:5a:02:f0:af:50:10:2c:a9:7e:0e:bd:
                    b9:93:7b:f9:d9:ce:e9:b8:63:ce:f8:60:ce:a7:e0:
                    6a:05:5b:c6:a2:9d:96:65:d1:a2:a8:92:18:84:5f:
                    bd:c7:17:38:b1:67:4c:c9:7c:e9:cb:3f:49:d5:66:
                    66:a4:fd:20:ca:39:39:f0:16:ab:f4:86:2c:07:eb:
                    14:2a:e2:a1:63:39:98:f0:66:04:17:47:0c:3b:7a:
                    f3:0f:6a:00:8d:eb:91:e4:44:dc:fa:4e:11:d7:5b:
                    ee:78:07:5a:f4:ea:37:60:ca:ec:c1:84:6c:b6:35:
                    51:fe:be:c7:73:a8:37:21:24:ce:d1:9a:c3:5d:bd:
                    f2:fb:ef:1f:33:fe:2d:f0:89:21:56:ff:b1:15:f4:
                    d3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:E4:10:99:BD:1E:92:E1:D8:D7:19:28:90:C9:B5:43:9B:75:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f583e836-2033-3724-84ac-6c4fe0d31f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:89:09:fb:1c:c8:94:17:57:4d:bd:68:f7:cc:ae:7f:ee:28:
         d3:3e:f5:c0:82:01:37:71:66:a1:03:e3:a5:35:49:99:fb:27:
         f4:bd:e8:84:56:1a:9e:a5:cd:81:7e:10:fa:8a:54:77:40:c5:
         12:e6:93:d5:0d:ad:fc:d6:4b:8c:b6:a4:f1:ab:5a:de:7d:82:
         29:2a:ce:cc:7a:f3:7e:5d:1f:0e:b1:86:68:b9:7b:52:fb:d7:
         0e:7b:44:7c:b8:41:d5:b7:7b:b5:28:36:56:7e:0e:95:39:ac:
         d8:a6:9c:60:2c:e1:23:b6:43:77:2e:0b:62:c0:ec:16:c0:95:
         ca:40:61:1a:08:8b:bc:c8:ef:c8:d1:fb:30:00:38:47:b6:8c:
         b9:03:1b:98:c6:14:8e:ab:6e:c7:a4:1e:42:c9:f2:d3:e6:3b:
         9e:2e:6e:10:29:df:b7:5d:fd:f2:fc:c4:72:2b:b0:43:1e:73:
         16:f9:37:ea:07:a4:90:cb:a8:72:17:54:e3:53:68:2b:1c:a0:
         b1:c7:15:1a:00:a7:d4:c0:82:54:69:5c:ac:65:53:75:8c:64:
         84:88:65:22:55:4d:a0:72:dc:5e:50:25:fc:cf:9a:14:4c:da:
         46:68:a4:4a:ee:e9:07:7a:ef:2a:d1:52:04:55:61:55:3c:89:
         13:21:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:30:15 2025 by rpki-client