Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/59a9d57b-4687-3a82-aa99-6cbe40465d13.roa
File:                     59a9d57b-4687-3a82-aa99-6cbe40465d13.roa (raw, json)
Hash identifier:          kC1A2U7gQCm8dQeOTOabmDQPtc4oIfmtdAQOdW4S6y0=
Subject key identifier:   EF:10:71:B4:D4:1D:58:3F:00:F0:0C:D3:D6:9D:AE:34:F0:B5:31:12
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584A7E7B6A3E18848BC6029E6D40
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/59a9d57b-4687-3a82-aa99-6cbe40465d13.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        136.22.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:6a:3e:18:84:8b:c6:02:9e:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=3517f232-e806-4361-a445-4222b6a4e745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:14:95:c9:b5:88:11:f0:54:3f:d8:e5:e8:a6:
                    73:ad:73:66:e6:a8:3c:b3:ae:4a:c6:94:1c:fc:64:
                    1a:18:41:f4:e0:ec:a6:87:a4:33:44:f9:6a:84:f6:
                    05:11:29:e1:ca:a3:80:e9:31:a1:6b:0c:a9:f7:89:
                    73:1f:14:9f:d5:e4:7c:b3:4f:6e:dc:9d:1b:16:e8:
                    a6:74:87:c2:4b:48:fa:d6:54:f7:50:4f:24:c1:c7:
                    ca:b8:24:bf:ef:33:a3:7e:0a:17:7b:97:bc:27:99:
                    19:25:32:fa:fb:4e:b6:82:8a:a0:84:e4:f8:0b:18:
                    e4:8b:93:3a:97:5b:77:76:74:02:e5:4e:89:08:7e:
                    ea:ea:b3:1e:27:f0:84:6f:ec:94:71:16:f2:51:60:
                    3e:12:47:dd:9b:5d:26:2e:34:26:db:26:a3:55:3c:
                    33:fb:82:3b:71:18:6d:02:c4:2d:b7:96:c1:5d:63:
                    b3:b3:c8:5a:66:31:c9:b9:ff:1b:c6:94:62:98:f3:
                    75:da:46:5d:33:9f:62:77:bd:af:27:ce:f2:6a:9d:
                    6b:5b:fb:2d:42:79:fa:db:a4:e4:a6:8a:a7:cf:6a:
                    43:55:63:00:19:50:0f:75:96:77:4e:d3:7e:08:ae:
                    81:28:ab:40:92:3d:80:dc:cf:c1:1f:a9:5b:3f:8a:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:10:71:B4:D4:1D:58:3F:00:F0:0C:D3:D6:9D:AE:34:F0:B5:31:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/59a9d57b-4687-3a82-aa99-6cbe40465d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:46:a2:95:c9:d7:ee:b6:5b:fa:6a:83:d2:4e:ba:2c:a7:3a:
         2b:a3:de:a9:96:d0:db:b4:69:6b:30:1e:05:3e:5f:37:1f:c5:
         1d:14:15:b9:f7:49:48:13:af:e1:2c:5d:91:35:2d:98:0e:9d:
         fc:53:01:71:f7:4a:3a:54:fa:40:75:14:a4:d6:cc:e2:4c:3d:
         d3:26:b3:09:54:10:cd:a4:af:a4:1e:c5:54:54:39:c6:54:2d:
         63:81:72:f4:d2:88:63:8b:a4:ee:eb:a1:45:4c:80:a0:98:c4:
         bf:76:57:e4:d3:e6:0f:b6:eb:46:95:50:92:8c:1c:83:ab:ad:
         95:8a:80:b5:a8:48:82:08:e4:a7:ca:4d:3a:f6:64:20:12:a0:
         db:7c:2a:3a:6d:15:64:b2:7d:a5:c2:05:f2:3c:39:30:ef:e7:
         4c:ef:ae:d6:48:3e:8f:de:05:86:d2:80:fa:a1:f9:3a:17:a0:
         e0:0d:08:51:88:12:91:0b:22:7f:2b:b3:64:19:cf:86:3c:be:
         61:62:6b:7b:08:52:de:5b:6a:60:06:30:fa:60:df:46:77:4f:
         d0:05:b2:3f:cc:60:eb:b9:0a:54:f5:a5:e7:a9:94:31:2a:ad:
         3f:ed:18:53:1a:f6:5e:08:aa:a0:c0:a0:1b:0b:7c:42:be:21:
         4a:6c:c1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:35 2025 by rpki-client