Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa
File:                     6db07d60-40ed-3ad4-a297-e8c49b593112.roa (raw, json)
Hash identifier:          ikWYjv589QGKayYjIBxZWCgfQJUlr/NIEzR/5OS4MWQ=
Subject key identifier:   55:1F:03:BF:60:A1:FC:70:A7:E4:76:70:78:5F:50:4F:8D:1B:C2:7C
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584A7E7B7743FFDC29EFC4BF9720
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        136.22.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:77:43:ff:dc:29:ef:c4:bf:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=b6815c32-27e4-4a35-af79-346ba43b66c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:d4:4c:5e:2a:2f:87:f4:02:7b:85:97:38:
                    fe:31:24:87:4e:aa:ce:a4:ca:42:ce:6c:9f:a6:84:
                    ce:37:c0:fb:bd:2f:0d:0f:54:5d:b4:f3:da:fd:6d:
                    6a:e9:0b:49:98:ed:ba:b4:28:6f:2e:db:97:86:51:
                    c6:b9:d2:b7:12:f7:71:00:2f:5c:35:43:da:f5:24:
                    27:6f:07:3d:2d:1d:9e:46:c7:a7:8a:2e:0d:aa:3b:
                    dc:dd:04:dc:9f:e7:ab:e8:d4:0e:1f:a2:d6:22:e1:
                    a3:6d:b9:20:fd:c7:1f:0b:c2:f5:2e:32:93:7d:c3:
                    56:23:8e:5b:09:39:4d:f6:68:5e:e4:e6:6d:3c:fa:
                    9b:5c:a7:b1:30:a5:c2:5d:52:ad:c1:a2:4a:e9:5f:
                    83:0a:0a:ef:a4:b0:06:b2:42:11:04:96:94:bd:44:
                    b8:3f:8e:3a:09:c4:ad:32:76:e0:c8:77:6a:ed:1f:
                    12:a6:40:40:7f:48:c9:5e:a0:71:55:3a:23:7b:52:
                    78:3c:be:3f:0d:19:1a:10:6a:41:60:b8:01:cf:70:
                    e3:ac:ca:79:6e:e5:f1:f4:3d:70:a3:af:24:29:6c:
                    b6:6e:43:db:51:6c:53:9f:a0:01:97:b2:54:07:a6:
                    b0:06:c8:9c:b9:fe:4c:29:00:6c:11:a7:e0:f9:6c:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1F:03:BF:60:A1:FC:70:A7:E4:76:70:78:5F:50:4F:8D:1B:C2:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0e:ce:2e:47:e5:3f:6c:82:07:21:a9:7d:1f:d3:7c:ca:ff:
         8e:55:04:06:f3:44:b1:c0:a3:a8:96:7f:1f:96:51:2b:d5:da:
         ae:cc:37:93:ec:90:dc:9f:40:00:bd:13:49:ef:d1:09:94:51:
         9f:9e:e0:23:8f:1e:a3:09:e2:ca:32:72:62:dc:5a:d7:89:ba:
         c8:9c:cb:3f:4d:06:7f:9d:6c:7a:c9:0d:a1:e3:4b:0f:1a:5e:
         0b:8b:7d:6f:f8:ad:84:80:71:54:75:9f:25:72:1a:d4:d1:21:
         b5:2e:bb:bd:da:55:32:cf:3c:df:0f:df:98:88:3f:c8:1d:93:
         58:ca:ba:cd:6b:92:eb:35:52:55:ee:d3:67:66:45:55:f7:f4:
         ad:14:6d:b9:f1:2d:a2:72:5d:a4:12:16:71:80:bc:d1:eb:97:
         93:0a:0c:37:dc:c7:43:3f:ce:fd:8a:49:30:0f:ab:3e:5b:0c:
         b3:91:4a:c0:10:54:83:01:97:70:2c:34:de:bf:22:3f:e2:5d:
         f4:3f:ed:24:7a:ba:46:3f:4f:03:d6:e6:bf:3f:39:a4:a3:62:
         08:ce:5e:1c:e9:6a:f6:6c:42:b2:0a:6b:51:6f:73:9c:92:33:
         1d:ea:0f:b5:d5:6e:ef:28:1b:2b:b8:c3:e0:ca:9e:bf:1c:a6:
         33:93:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:26:36 2025 by rpki-client