Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/ddd51249-cc34-30af-9a06-ae5df178997d.roa
File:                     ddd51249-cc34-30af-9a06-ae5df178997d.roa (raw, json)
Hash identifier:          5Z/cl/RIRnUkoc+LGsIQEqr+dpCvTwkPML0h1GtpstU=
Subject key identifier:   90:46:D0:5A:E9:D5:62:A3:A6:E2:19:5C:62:0E:15:3C:72:23:F1:2F
Certificate issuer:       /CN=5b5b70d4-ae45-4386-977d-1875706017e9
Certificate serial:       010D0C9F4328584AFEE6A494F9E49CE0E729BC80
Authority key identifier: 7B:A9:7F:7E:C9:40:BD:38:1D:0A:39:19:B5:F5:74:05:E3:82:0A:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/ddd51249-cc34-30af-9a06-ae5df178997d.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     65000
IP address blocks:        136.175.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/5b5b70d4-ae45-4386-977d-1875706017e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/5b5b70d4-ae45-4386-977d-1875706017e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a4:94:f9:e4:9c:e0:e7:29:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5b70d4-ae45-4386-977d-1875706017e9
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=9bc73656-7cf4-4336-be39-814439b13604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:81:ce:82:d4:36:95:f4:e0:85:34:23:bb:00:
                    75:89:9f:53:1b:70:59:6b:8f:a1:f1:b3:b9:38:74:
                    69:8a:01:ff:bb:fd:12:52:00:c0:9d:a9:a4:f1:35:
                    36:2f:d5:46:67:c6:9a:1b:58:b3:b6:81:33:cf:e1:
                    08:86:bf:8e:22:1f:be:b3:21:2e:99:ff:8d:aa:50:
                    76:18:ef:ea:45:98:32:83:88:49:ef:b5:b0:c7:2a:
                    24:af:1d:dd:96:72:10:88:6f:88:cb:63:31:05:20:
                    5e:4a:fb:0c:fc:2e:26:d2:2a:0a:38:9b:93:91:30:
                    54:fd:74:b7:78:bb:56:43:80:7b:f7:eb:c6:aa:9f:
                    58:b0:94:13:18:43:a3:a8:3e:d5:b5:ca:1d:54:ed:
                    30:49:ab:7b:74:b2:f2:2a:d3:60:7b:6b:b1:84:29:
                    b3:75:a2:ed:0c:a3:35:42:e4:4c:20:6c:12:04:80:
                    eb:e6:42:cc:63:2e:4d:c4:e3:73:f0:be:93:cb:7f:
                    c1:97:78:bf:49:dc:b6:b3:f7:a8:05:ca:e0:05:b1:
                    71:0a:a7:a8:af:89:53:a6:a0:f5:1d:ec:30:5c:b1:
                    17:73:bc:1b:37:3c:f6:60:7c:aa:d1:12:1d:5a:3e:
                    10:a7:63:90:75:d9:b0:6f:bb:ba:74:83:12:44:27:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:46:D0:5A:E9:D5:62:A3:A6:E2:19:5C:62:0E:15:3C:72:23:F1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/ddd51249-cc34-30af-9a06-ae5df178997d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9/5b5b70d4-ae45-4386-977d-1875706017e9.crl

            X509v3 Authority Key Identifier:
                keyid:7B:A9:7F:7E:C9:40:BD:38:1D:0A:39:19:B5:F5:74:05:E3:82:0A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5b5b70d4-ae45-4386-977d-1875706017e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f1:d5:35:39:44:58:49:5f:15:23:35:d4:08:84:25:b7:a9:
         67:5f:31:fc:c6:7d:f5:01:1a:4c:cb:e0:c8:2a:3f:fc:03:0b:
         b9:54:c6:f3:d2:be:a7:3d:8a:f3:88:e3:e6:30:0d:35:05:30:
         8c:06:65:4b:10:9d:5b:8c:0b:20:f9:e5:79:54:af:09:f9:81:
         92:71:22:1f:9f:9c:fc:53:f5:4a:3b:19:be:36:b6:ef:a7:5f:
         9a:02:a9:a4:f1:13:6e:31:e8:33:f1:0b:41:b8:79:26:d7:fa:
         f1:dd:6c:8c:74:09:62:b2:a2:6c:d6:6b:33:93:4d:e9:91:8d:
         18:60:e1:89:26:17:97:74:65:63:e4:be:7d:4f:e2:c1:85:de:
         ac:f5:2f:b9:91:83:f2:35:1e:44:99:f5:29:ed:c7:a2:60:32:
         54:f2:f2:b0:4f:e0:2c:73:ff:7f:18:9f:12:bc:29:70:47:e9:
         93:89:68:e3:be:5b:1e:2d:7e:68:67:c9:98:06:33:7f:cc:b0:
         15:7c:8b:7e:b1:70:4d:f3:67:3b:0d:a3:85:4a:c6:8b:0c:5e:
         3b:e0:04:d9:35:de:d0:f5:8f:72:dc:47:65:e7:87:97:79:8e:
         0f:8a:18:76:e9:b3:10:f4:52:4b:37:f9:07:b9:4d:ca:64:90:
         ee:be:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:39:52 2025 by rpki-client