Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa
File:                     7c73910d-5c54-3833-9531-ce70a04da00f.roa (raw, json)
Hash identifier:          FrqfqEBOwcwjpxlaeeds7ux7nEJ1i4QTKQNa9heS6LI=
Subject key identifier:   E4:0F:38:0C:A6:EC:C1:AA:10:FC:C3:72:2E:4C:5F:69:26:03:49:5E
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584A7E7B6BE3D46F0922239ACFA0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        136.22.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:6b:e3:d4:6f:09:22:23:9a:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=01aca59a-9ed7-4c8c-832d-4227affb90a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:1b:2e:b5:d0:6d:0f:1a:ee:71:5f:13:a6:
                    b9:3a:0a:b0:23:38:15:55:ea:f9:3e:72:0b:35:06:
                    19:80:25:2b:c5:75:d6:ab:68:8b:0a:73:de:f6:74:
                    b4:77:d3:e3:7a:43:f6:4e:d2:60:d4:76:9e:d9:29:
                    ab:57:4b:95:68:ce:73:cd:df:26:cc:aa:df:7f:f6:
                    59:96:7f:0b:9e:b9:1c:79:65:d2:8c:e0:f2:0c:ad:
                    9d:1b:03:05:1a:a6:a9:b2:5b:7e:8f:f5:6e:45:4b:
                    f6:e5:22:13:04:58:5a:2e:a4:fb:16:94:5e:2d:ad:
                    ae:02:5e:bc:81:16:91:9c:f9:cd:f4:b5:47:65:84:
                    19:a9:d0:f6:ed:cd:f8:39:79:a8:bb:d9:cb:19:a0:
                    b1:a1:0e:88:22:c6:82:18:73:2f:86:42:ac:22:37:
                    42:5a:1b:fd:be:3e:50:81:13:5b:31:7c:8e:01:95:
                    78:9c:1b:9b:b8:5e:00:0d:11:d0:c9:62:17:93:15:
                    81:d6:7f:f3:16:db:46:60:76:59:cc:cc:83:5a:df:
                    48:cf:c5:cf:f9:4e:41:89:16:a9:11:13:52:38:04:
                    0a:c0:46:5b:74:84:ea:2a:17:26:ca:d1:a4:b1:bd:
                    03:90:ff:e1:af:07:3f:81:31:bf:6b:d2:25:45:e6:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:38:0C:A6:EC:C1:AA:10:FC:C3:72:2E:4C:5F:69:26:03:49:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:4c:09:d7:1e:c2:d6:0c:c2:08:58:bf:88:de:ec:b6:a0:ee:
         b1:32:3e:18:9f:37:a3:1d:d0:de:35:14:09:7b:b0:1b:d5:9e:
         f2:4a:e8:b1:85:ca:3c:e3:e5:f3:16:6b:f2:62:ed:3d:f0:e4:
         fd:40:ef:1a:2b:bc:79:cf:14:bf:8c:e3:22:85:6c:eb:a4:96:
         b4:ae:38:51:93:b3:0e:4a:e0:53:f3:2c:d0:59:f6:ed:0d:df:
         88:ca:5f:fe:2b:bc:5a:c7:30:73:b4:7b:1a:69:ff:cb:22:9d:
         a4:72:56:0c:77:4f:2b:24:11:c7:b8:b3:dd:ed:41:db:6d:6a:
         c5:51:25:f3:74:72:cf:27:52:e5:2f:6d:2a:03:57:52:ed:4e:
         7f:bf:cd:ad:f9:cc:15:a2:04:0a:69:10:48:38:b8:45:7b:c9:
         14:3d:b8:9e:70:dd:31:32:e3:c1:91:0a:06:da:ff:2d:ce:28:
         4d:ae:bd:f0:05:12:3f:13:04:cb:5f:3c:c0:1f:3a:cf:4a:c3:
         cc:19:e4:23:47:41:56:f2:fc:77:2a:ea:1d:d2:44:4d:e3:6f:
         11:3c:e2:e2:72:e8:4a:56:3e:b9:0b:d9:34:64:76:fa:e3:9e:
         7c:45:82:26:b1:59:42:2f:a6:d1:9b:6f:0f:c2:b9:b0:bd:5e:
         5c:33:37:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2vj1G8JIiOaz6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
MDFhY2E1OWEtOWVkNy00YzhjLTgzMmQtNDIyN2FmZmI5MGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XkbLrXQbQ8a7nFfE6a5OgqwIzgVVer5PnIL
NQYZgCUrxXXWq2iLCnPe9nS0d9PjekP2TtJg1Hae2SmrV0uVaM5zzd8mzKrff/ZZ
ln8LnrkceWXSjODyDK2dGwMFGqapslt+j/VuRUv25SITBFhaLqT7FpReLa2uAl68
gRaRnPnN9LVHZYQZqdD27c34OXmou9nLGaCxoQ6IIsaCGHMvhkKsIjdCWhv9vj5Q
gRNbMXyOAZV4nBubuF4ADRHQyWIXkxWB1n/zFttGYHZZzMyDWt9Iz8XP+U5BiRap
ERNSOAQKwEZbdITqKhcmytGksb0DkP/hrwc/gTG/a9IlReY8dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOQPOAym7MGqEPzDci5MX2kmA0leMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvN2M3MzkxMGQtNWM1NC0z
ODMzLTk1MzEtY2U3MGEwNGRhMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpMCdcewtYMwghYv4je7Lag7rEyPhifN6Md0N41FAl7sBvVnvJK6LGF
yjzj5fMWa/Ji7T3w5P1A7xorvHnPFL+M4yKFbOuklrSuOFGTsw5K4FPzLNBZ9u0N
34jKX/4rvFrHMHO0expp/8sinaRyVgx3TyskEce4s93tQdttasVRJfN0cs8nUuUv
bSoDV1LtTn+/za35zBWiBAppEEg4uEV7yRQ9uJ5w3TEy48GRCgba/y3OKE2uvfAF
Ej8TBMtfPMAfOs9Kw8wZ5CNHQVby/Hcq6h3SRE3jbxE84uJy6EpWPrkL2TRkdvrj
nnxFgiaxWUIvptGbbw/CubC9XlwzN+g=
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:28:07 2025 by rpki-client