Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136501.roa
File:                     AS136501.roa (raw, json)
Hash identifier:          rqI48ll05rV7pty9mjz+sGvp1D8xnrTUYBat+l2oLds=
Subject key identifier:   9B:D0:BD:B1:C2:F3:F4:B9:57:27:E9:F0:CD:9B:D3:4C:F5:11:F7:94
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       74B2304426F2BC1B5CA3A7C7D89C0D28E43DEF28
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136501.roa
Signing time:             Wed 23 Jul 2025 03:58:51 +0000
ROA not before:           Wed 23 Jul 2025 03:53:51 +0000
ROA not after:            Wed 22 Jul 2026 03:58:51 +0000
asID:                     136501
IP address blocks:        23.226.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b2:30:44:26:f2:bc:1b:5c:a3:a7:c7:d8:9c:0d:28:e4:3d:ef:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 23 03:53:51 2025 GMT
            Not After : Jul 22 03:58:51 2026 GMT
        Subject: CN=9BD0BDB1C2F3F4B95727E9F0CD9BD34CF511F794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:22:09:45:d0:5e:c7:70:3e:cb:c5:4a:0f:
                    77:63:51:2f:38:49:a0:cf:26:ac:ba:da:fc:6e:80:
                    c2:97:6b:1b:91:9e:e6:62:7d:95:e2:1d:61:4e:57:
                    8e:9a:2e:1f:81:d9:84:0f:10:94:b8:6a:55:53:56:
                    7d:0b:fc:19:ab:c3:a8:80:22:db:d7:38:c6:49:1f:
                    ce:93:73:24:21:e8:6b:88:35:12:cb:d1:32:ae:bb:
                    23:e9:44:4e:47:e5:c6:32:3e:b6:bb:c2:8f:46:c0:
                    4b:3e:50:9a:6c:fb:88:58:c0:a1:bc:30:ee:24:b0:
                    31:06:18:2d:96:ee:fe:a7:b2:7b:9d:b5:05:74:a3:
                    ef:eb:8b:84:97:63:aa:ee:39:a4:2f:11:b1:c6:69:
                    03:02:42:7c:f6:ee:25:98:6b:fe:d7:7c:87:a4:61:
                    47:99:ac:a9:4d:0c:8c:d5:4d:4b:0b:36:a7:9d:1f:
                    fd:9c:68:8b:85:3f:cf:26:f0:9a:c9:97:df:cc:81:
                    04:08:5a:80:92:34:71:6e:2b:60:9f:8f:4a:c6:9d:
                    b9:3b:b3:04:9c:65:6e:70:bc:2a:39:33:85:a9:58:
                    b9:01:d8:e0:88:c9:9d:2c:0b:0a:ca:81:d5:6b:b1:
                    53:77:16:27:9b:0e:b7:50:88:87:8e:0a:83:1b:31:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D0:BD:B1:C2:F3:F4:B9:57:27:E9:F0:CD:9B:D3:4C:F5:11:F7:94
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136501.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:d9:94:b7:71:7e:2e:99:88:c8:d1:1e:7d:31:6a:56:41:
         4d:0a:2b:c0:19:b5:8a:6e:27:8e:31:28:9b:4e:e9:3c:a5:e4:
         fb:c8:cc:ac:38:f7:f9:9b:b5:18:56:a5:f5:ea:8b:97:d1:f6:
         f3:5a:4d:6d:dc:ff:8a:bb:e9:f3:26:05:80:86:32:a5:60:d9:
         d9:12:d0:de:af:fd:f4:33:9f:51:a8:b3:71:d7:c0:c5:0c:52:
         4a:37:27:3f:fc:9d:c9:d0:c4:18:56:1f:04:a7:9a:06:8a:1f:
         39:60:a3:68:e2:7f:93:44:2e:ef:4c:64:03:84:c5:38:55:2c:
         d9:b8:83:05:29:82:22:fc:85:85:86:fe:36:cf:e3:7e:2b:9a:
         b5:93:35:0a:d8:64:28:6d:97:b7:15:50:59:1b:e1:08:06:1f:
         70:65:c3:ef:fb:53:24:e7:a0:99:2b:66:cd:61:2d:d3:9f:f7:
         10:d8:7a:a9:e9:38:a9:d3:78:0d:7e:2a:07:81:ca:66:2d:bf:
         6e:fc:18:2d:2d:e2:cb:84:bc:c0:28:22:68:86:b9:c5:ff:e4:
         6c:48:55:d4:40:5e:8d:be:0b:38:f9:20:7d:62:9e:5b:eb:26:
         a4:3a:54:b5:f6:31:77:7f:5a:f2:ba:e3:33:24:c8:32:9f:24:
         2f:a5:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:37:38 2025 by rpki-client