Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
File:                     3f70c066-2334-345c-8e8d-a890ceb66284.roa (raw, json)
Hash identifier:          nLnRJ/YUItExgAJ0IB2zoZbE4onZ/Q4jEMfUFKGt4I4=
Subject key identifier:   A0:C9:34:6D:A8:1B:9D:54:42:C6:7F:13:31:7A:51:80:36:97:D4:78
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584A7E7B691B80E24C26B00AF250
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        136.22.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:69:1b:80:e2:4c:26:b0:0a:f2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=b8647a45-ba29-4101-afe2-a0081e9b1caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:97:39:57:2c:b4:88:03:58:32:6e:a8:bc:
                    82:18:09:3c:0b:b5:9f:60:d7:19:af:9a:4f:f2:36:
                    91:85:60:b0:78:a6:1e:56:0e:46:f2:f4:e9:f0:86:
                    3c:bb:07:44:f5:d2:29:5c:58:5f:34:40:e8:ac:b5:
                    1e:07:8a:ea:17:db:4f:00:7f:dc:19:50:9f:f7:f8:
                    79:6c:9f:26:cc:0b:56:22:6c:75:bf:5d:c3:86:4a:
                    aa:fe:9f:76:f8:24:d9:fd:0e:54:43:69:8d:5b:73:
                    5d:d6:4f:ca:08:01:a1:65:c0:02:95:be:6e:18:28:
                    b2:49:9a:b0:26:6b:7b:a4:31:30:55:d9:af:8a:8b:
                    ea:b1:5b:2f:ab:e2:6e:8e:89:9a:34:5c:a1:17:a8:
                    d3:a9:c2:de:a1:2c:a0:09:34:29:7a:c9:b2:ea:92:
                    5b:a9:4f:81:ae:c5:5f:7f:2d:42:b8:69:16:d7:b5:
                    0d:78:31:04:2b:65:46:3d:5c:57:c2:5a:a2:6d:60:
                    1a:17:e3:65:6e:f5:ba:a7:c1:d4:08:1b:76:ce:29:
                    59:93:86:75:70:15:9c:32:9f:94:a2:69:b7:b3:2c:
                    68:2a:fd:24:65:c7:d3:75:c7:05:9e:06:bb:4f:72:
                    db:02:6b:8e:7e:77:c8:99:26:76:e6:4f:31:0b:a9:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C9:34:6D:A8:1B:9D:54:42:C6:7F:13:31:7A:51:80:36:97:D4:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:ad:10:7e:99:dc:0b:45:13:f4:4a:15:05:a0:0b:13:2e:
         48:e5:fd:48:23:fc:69:29:8b:ff:09:cf:3a:89:ee:19:b1:af:
         3a:fa:a4:9e:70:9b:2c:bd:40:55:dc:0d:22:92:bc:b1:89:ef:
         a7:b3:d5:a0:23:e5:eb:d5:0b:fa:85:eb:d7:01:59:f8:4f:4a:
         41:a8:9c:03:58:44:b4:09:f8:b1:01:f9:b6:d3:73:a4:23:6f:
         dd:7d:76:1d:35:34:f4:98:d1:04:74:3a:03:e9:87:12:dd:1e:
         40:b2:4e:55:80:c8:63:b0:90:a3:0a:a9:c1:8f:12:5f:7b:37:
         3d:66:7b:3d:19:3a:e1:24:48:43:88:d8:36:83:fb:32:9a:4e:
         6d:16:2e:d3:ce:50:66:e9:12:4b:76:52:05:e0:6f:51:50:af:
         a3:b0:42:77:be:18:d8:9d:1d:c5:bb:be:43:5e:74:b7:2f:d1:
         70:f0:e1:72:b8:9e:fd:0e:21:c5:7c:be:c9:b0:06:a9:06:b5:
         de:13:c2:41:5c:ea:d1:29:1b:2a:de:4e:2e:6a:61:d4:d9:d2:
         43:7c:a4:ba:ea:fe:d3:fe:b6:43:89:d8:c4:50:3f:9c:71:7d:
         fd:f5:21:5f:64:fa:97:ae:82:bf:e9:17:8d:11:0f:da:81:ee:
         91:31:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:26:49 2025 by rpki-client