Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/7e35b438-d385-3047-8f47-8d10d01186ad.roa
File:                     7e35b438-d385-3047-8f47-8d10d01186ad.roa (raw, json)
Hash identifier:          psHHXLePGrHGF1zPkdIl5MRj+dr6oi206B5XHNFRrM8=
Subject key identifier:   6D:A3:EC:C1:E9:AD:91:0D:F8:36:41:60:0C:41:10:71:CD:EC:CE:11
Certificate issuer:       /CN=137d13b4-f566-472a-a0e3-33b1db18e660
Certificate serial:       010D0C9F4328584E8F5501CE10CFCCE569E50B80
Authority key identifier: A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/7e35b438-d385-3047-8f47-8d10d01186ad.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     8075
IP address blocks:        142.55.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:55:01:ce:10:cf:cc:e5:69:e5:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137d13b4-f566-472a-a0e3-33b1db18e660
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=c359c742-ccc9-43c6-bd55-a53e8fadc549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:03:07:b8:48:d6:fa:00:b2:6d:71:f3:f5:
                    3e:e3:51:f1:6b:53:c3:d2:7e:28:8e:7a:64:66:c9:
                    0f:8c:b1:b4:c3:ee:0a:48:d2:15:31:ca:13:80:16:
                    1b:e2:41:97:74:f4:44:85:19:bd:98:1c:c6:75:26:
                    39:90:fc:c7:2b:c3:dc:4e:59:30:78:d9:c2:84:b4:
                    3a:fe:0b:66:ea:93:d2:ca:02:93:e8:50:6a:46:3c:
                    2a:41:49:6c:7e:13:58:4c:21:1e:18:e3:bc:62:d4:
                    09:1d:5e:3c:f2:92:3a:8a:0d:44:92:a9:00:b1:e2:
                    d7:cf:73:90:9f:b9:4e:61:3e:8e:b3:c5:8d:a4:ef:
                    09:09:05:7f:61:8e:9d:c4:16:88:7d:98:43:8a:41:
                    92:94:a0:d8:1b:c2:64:93:ef:88:32:00:f3:01:ce:
                    a6:a9:f1:55:3e:c8:ce:04:e8:86:4b:8d:6c:e0:d2:
                    38:38:de:26:19:a5:69:e3:85:63:a0:0a:cc:5f:f4:
                    de:c6:ab:12:39:fc:69:59:b1:87:3a:a6:79:2f:35:
                    41:83:4b:21:3e:a5:43:f3:b1:44:15:60:f9:8b:fa:
                    a4:c5:b0:70:02:30:93:7b:eb:c7:1b:d9:10:fb:3a:
                    44:84:df:53:30:3c:2d:e4:2a:57:54:04:1e:fc:49:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A3:EC:C1:E9:AD:91:0D:F8:36:41:60:0C:41:10:71:CD:EC:CE:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/7e35b438-d385-3047-8f47-8d10d01186ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.crl

            X509v3 Authority Key Identifier:
                keyid:A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.55.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:17:ee:84:69:56:e4:d9:c5:80:24:23:94:22:69:98:30:9e:
         34:40:e3:f3:5f:05:67:66:7e:f0:b0:ab:be:05:30:1b:21:d2:
         9b:b5:f2:a1:21:72:54:04:6f:63:87:26:ff:6a:9c:57:6c:90:
         c6:8c:e4:5c:79:f4:88:73:70:c4:e1:a2:28:f4:1f:4f:0c:fa:
         56:2e:0b:7e:18:cc:51:aa:00:9a:1e:36:27:98:3c:c1:db:75:
         61:d4:29:c0:7d:3c:39:73:d4:0b:1e:6d:2d:c8:2c:c8:1b:6d:
         38:10:f7:cb:2c:20:19:f1:bd:dd:a0:3b:b6:d9:c8:2e:26:6d:
         dc:db:1b:15:67:8b:86:7e:41:9b:34:28:4b:33:97:49:31:dd:
         76:c1:1f:1c:df:81:68:0d:9c:15:55:e1:0f:c0:da:c4:36:46:
         6a:ba:5a:c2:75:b4:ff:9b:60:f4:53:57:2b:90:b6:01:12:a5:
         31:f5:57:ca:0d:9c:29:be:96:3b:f7:dd:95:33:eb:c8:42:ae:
         ad:4f:cb:dc:e2:78:2b:6f:f8:95:1b:ab:a8:d5:be:b7:17:0a:
         04:c0:a2:30:b3:f5:20:c2:79:dd:5c:e8:4b:64:b4:55:49:14:
         0d:46:26:5e:94:33:67:2d:fb:1b:81:72:97:b5:c2:6a:f1:c3:
         08:3c:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:55:14 2026 by rpki-client