Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa
File:                     3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa (raw, json)
Hash identifier:          3DSvKcnrHLD6zy0mufCmn1OEzINfljyP8sMac15g+y4=
Subject key identifier:   4D:33:3E:C0:BF:51:C7:B3:0D:BF:0F:62:AE:1C:5F:56:CE:C7:B2:F9
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584B4E770C6F950893DB734F4B80
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     400025
IP address blocks:        136.228.46.0/24 maxlen: 24
                          136.228.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:0c:6f:95:08:93:db:73:4f:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=edab09b7-3a0f-4204-81a1-6dca04d0b765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:4b:8b:89:59:5a:09:6f:47:39:db:19:33:
                    43:12:bc:a4:6d:24:11:6a:58:bf:ec:82:8d:a9:ac:
                    a6:5a:dc:8a:ba:ad:ff:82:ea:0d:3d:68:f3:65:b2:
                    41:51:d9:57:a0:80:63:0a:d7:4e:c4:7e:c8:09:92:
                    bb:6a:f3:c2:56:ff:b3:48:c0:93:9a:bd:a2:2c:e8:
                    ca:39:67:2e:58:d4:71:df:c7:3c:1a:fc:db:4e:c6:
                    5e:e4:5a:93:7e:67:d1:05:26:47:3e:06:52:0b:44:
                    1f:f5:9a:d7:f1:e3:48:ed:06:b7:01:15:86:97:64:
                    22:66:c6:f7:4f:d5:94:4b:7f:02:7d:86:13:98:a4:
                    06:6e:af:57:e8:cf:55:fd:4b:e2:52:90:4e:2b:68:
                    20:05:c4:a2:44:e1:c9:cb:57:e8:bf:e6:2a:b8:c1:
                    ac:89:f4:05:03:d9:ee:1b:d4:f7:c8:68:14:98:c8:
                    de:2c:b4:a3:81:0f:a0:81:2c:0b:37:a8:5e:7e:53:
                    78:fd:47:26:45:7b:da:50:16:cc:05:8d:71:d7:c2:
                    64:3d:6a:b4:b9:50:d5:3e:9e:76:2d:a3:e0:15:61:
                    bb:a6:2a:f7:23:4b:af:08:2c:e1:23:1a:b1:01:60:
                    1d:74:57:e5:88:c6:ed:05:fc:a3:78:c4:13:56:3a:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:33:3E:C0:BF:51:C7:B3:0D:BF:0F:62:AE:1C:5F:56:CE:C7:B2:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/3185dab5-d2a5-3a08-92c0-6dc9b35c1f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.46.0/24
                  136.228.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:63:f2:63:d6:94:5a:23:61:3f:44:5b:66:62:7f:22:f5:
         24:8e:f2:84:de:00:9f:91:5b:61:a0:de:45:30:9a:25:4b:5c:
         ff:33:40:64:fc:25:93:59:c9:f9:e6:6b:3e:90:c2:86:24:bc:
         3a:17:3e:d8:c7:77:b1:42:40:4d:6d:21:d1:6b:5c:32:b8:c1:
         ff:74:66:f6:50:83:14:fb:eb:34:84:b9:9b:fc:4e:d0:cb:90:
         21:e1:72:b0:ba:13:4b:45:6e:aa:3b:91:6a:ea:34:81:b6:3c:
         9a:19:43:9e:42:16:fd:80:5f:50:90:7b:2b:48:1d:8f:0e:3a:
         e8:5f:d7:44:5a:1a:3e:dd:82:f8:41:66:83:7c:69:f4:22:96:
         13:ad:56:87:75:e8:94:07:d8:4c:09:8e:7a:65:93:50:58:a1:
         94:61:39:f0:76:84:53:24:6b:7c:9e:f8:ac:6c:f2:35:c0:64:
         0b:6f:3b:2f:b9:53:db:0d:66:cc:e1:73:87:ef:88:54:ae:24:
         db:56:86:88:08:b7:69:dd:70:75:37:9b:ff:2a:73:3a:c4:e7:
         c1:b1:49:25:c6:ce:18:f4:76:0d:85:c3:96:4f:bc:da:44:f8:
         e8:df:3c:86:f2:51:e3:85:ed:92:16:92:8f:74:8f:26:c2:c1:
         bc:e8:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:33:06 2025 by rpki-client