Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/5b01dc11-4521-33a0-83a0-b5d59bdb6aaf.roa
File:                     5b01dc11-4521-33a0-83a0-b5d59bdb6aaf.roa (raw, json)
Hash identifier:          YZJwSQhLowx75TVZddYFtu/iA66T4Ckkv2s3k1jY3uU=
Subject key identifier:   0E:74:50:81:54:A9:3A:AA:26:CA:1B:4E:69:50:F6:FC:BD:C1:68:B5
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584A7E7B6C352657513DCA710960
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/5b01dc11-4521-33a0-83a0-b5d59bdb6aaf.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        136.22.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:6c:35:26:57:51:3d:ca:71:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=77593d7c-bc8d-40e8-bcdc-fed21239a556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:05:d2:8c:56:3b:55:e0:76:5f:79:69:28:
                    13:e9:3b:2c:88:3a:45:7b:89:76:d7:01:af:bf:2d:
                    47:1a:cf:ea:05:d5:ef:f4:3b:4d:f0:ed:6b:16:1b:
                    2b:35:ee:25:4b:39:45:88:9c:67:ae:24:f7:74:d3:
                    75:71:55:78:a0:27:66:52:c3:6f:8b:44:91:89:77:
                    62:29:73:69:05:2a:7d:8a:f1:c9:68:23:29:6a:50:
                    bf:e3:4d:d3:27:65:c1:df:49:b4:e5:38:b9:a8:e2:
                    1a:e0:6d:12:6c:a8:b9:d7:3e:9f:62:95:df:f0:eb:
                    8a:90:c5:d0:1d:8a:76:c3:3f:14:a5:6f:c9:c1:ff:
                    c0:26:28:1e:33:ae:5f:3c:d3:30:ec:18:fa:31:ff:
                    1c:a1:a3:49:8c:64:23:11:fa:9c:66:43:d9:a5:90:
                    ab:9c:f6:3d:d2:e6:7f:ee:9c:ac:a3:84:bc:ce:1e:
                    14:a4:26:3a:5e:29:b2:f3:70:18:0a:4a:14:2e:33:
                    6e:b0:54:88:a9:45:df:f7:85:f4:46:f7:e6:fc:37:
                    b7:26:04:f4:e9:96:96:b7:fa:fc:62:8b:97:0e:b3:
                    df:32:39:1e:91:e1:f0:0a:b5:2c:b1:4c:ca:92:0b:
                    c2:97:c9:93:58:3a:f9:ea:66:96:d1:a2:9c:4d:7b:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:74:50:81:54:A9:3A:AA:26:CA:1B:4E:69:50:F6:FC:BD:C1:68:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/5b01dc11-4521-33a0-83a0-b5d59bdb6aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:87:f5:e7:f8:60:1e:6a:fe:31:db:df:3c:d0:d2:e8:fd:
         64:d8:99:a5:c8:1d:bc:e1:9d:7a:e0:eb:74:f1:e5:45:5b:6d:
         e1:a3:88:cd:1a:0a:e5:aa:36:de:32:37:7d:28:c5:60:0c:68:
         bd:0a:c7:ad:e8:a6:3e:1a:92:db:df:a3:bb:75:ad:c5:26:95:
         e2:4f:7a:c0:3c:60:d1:d3:39:8b:cb:83:10:64:d0:69:2e:83:
         1f:34:dc:bf:49:13:13:35:4f:33:46:77:b1:a3:79:9f:24:29:
         b6:33:3c:3e:ac:c2:5f:ff:00:90:35:e4:ff:29:6d:b4:ba:e8:
         df:99:ba:cf:1f:41:af:45:03:62:34:dc:7a:8c:fe:65:5d:52:
         d5:74:77:c8:37:e9:5c:76:6b:55:d3:35:83:88:66:91:f5:b8:
         5a:92:de:75:7f:77:65:a0:3a:a3:89:50:29:27:0e:18:74:0f:
         15:18:90:47:35:64:e5:db:c2:ba:5c:6c:1f:c0:53:5f:95:68:
         c4:b3:76:7b:c6:b6:5f:24:b8:3c:f4:1d:fa:17:1a:8e:18:b1:
         8c:ea:62:9d:0d:53:dd:ab:13:a7:79:7b:d8:40:f7:7f:38:c8:
         10:c2:c0:fb:b4:0e:77:7e:87:db:c5:f7:df:24:8f:e3:72:0d:
         dd:d1:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:29:27 2025 by rpki-client