Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa
File:                     a695f056-3b40-3250-b954-f1d214a7bdea.roa (raw, json)
Hash identifier:          jewa8f8H91Rt7m+9+fzPXlqv0It/I9DZH3/6a4VBR1w=
Subject key identifier:   A4:68:43:9F:4F:51:01:AA:BE:5B:77:E1:6C:1C:DF:DC:62:3A:B9:FB
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584A7E7B70BDCCE1D61F3B8DE400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        136.22.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:70:bd:cc:e1:d6:1f:3b:8d:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=e13cc8c9-f95f-48f6-bb79-838e67c8cc3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:30:34:7e:29:db:a2:31:df:2e:2e:9c:49:5e:
                    d4:da:41:05:75:d7:84:85:40:ea:36:0b:bb:7d:20:
                    c5:5e:4a:54:e8:fa:c1:6c:84:88:4e:cd:41:b7:cc:
                    37:3e:cd:81:14:9f:0e:2e:a0:2f:15:8b:67:41:40:
                    ca:c4:b7:70:9b:bd:9b:cc:e4:de:c6:bd:b1:e4:8a:
                    14:d3:43:92:d8:eb:02:9f:9d:f6:a6:fd:6f:03:2a:
                    db:6b:86:63:56:07:79:34:d8:ca:c2:cb:63:6b:28:
                    a6:e3:ea:92:ea:40:a7:91:07:34:c8:6d:62:ca:91:
                    0d:8e:bd:73:b8:9a:29:03:41:0d:e3:3c:14:59:0b:
                    ad:84:dc:7b:97:19:cf:c0:fb:f2:cf:64:82:c9:23:
                    a0:92:f7:1c:18:71:ec:23:ef:15:a8:80:f5:6d:47:
                    a5:5a:21:9d:27:ff:cf:a2:e3:65:3f:2a:94:41:70:
                    15:96:2b:79:92:a0:2d:0e:d2:e0:2c:7b:b0:41:5b:
                    4b:32:bf:f4:fb:56:4d:e0:42:a7:9e:6b:2b:03:89:
                    ce:c3:42:d6:90:eb:b9:c3:aa:91:75:d8:07:97:30:
                    79:2f:ef:01:53:6f:26:fc:1a:7a:05:88:f3:e2:5d:
                    5b:6b:4d:e6:ff:bc:44:a1:87:6e:52:d4:b1:d0:15:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:68:43:9F:4F:51:01:AA:BE:5B:77:E1:6C:1C:DF:DC:62:3A:B9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ed:52:e8:ec:26:80:19:d5:9a:b6:8c:38:d4:8e:11:ff:a2:
         ff:ce:69:b6:ec:fb:9a:f3:1f:1d:15:b3:4d:23:e1:0d:59:07:
         9c:b6:99:1b:eb:ca:62:28:4b:52:ec:75:c8:56:75:96:6d:66:
         12:53:61:fd:2b:cb:cb:40:28:cd:5d:e3:46:ab:1f:07:a5:8f:
         ea:e6:77:3b:bb:bb:46:d7:de:26:03:7f:c8:fe:9a:a5:c0:f5:
         72:39:e2:14:01:a2:0e:3b:6c:d0:d3:c6:78:c9:4b:e7:c7:70:
         15:bd:51:ff:3b:11:1c:ca:58:49:7b:4e:f9:2c:a7:80:37:1b:
         c5:8e:8d:57:73:1e:b3:83:00:e6:7d:1c:67:07:8d:4f:65:0f:
         4f:7c:43:32:aa:d6:f1:ee:6b:82:57:90:b9:65:76:26:88:0e:
         5f:80:9f:17:37:9c:4e:dc:34:33:36:da:81:fe:e4:ca:27:61:
         39:da:47:a0:5a:09:54:f8:26:ab:47:c4:d0:31:d0:bd:77:2f:
         a4:e9:7a:da:16:ff:8e:ae:4e:66:56:c8:40:b4:cd:13:70:2d:
         43:bf:58:f5:da:01:ec:9d:70:35:f8:3e:d3:97:ba:10:09:95:
         b5:b4:1c:e6:fc:69:1c:d5:b7:fc:6e:b3:e6:fe:50:18:c3:e4:
         3a:fe:26:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3C9zOHWHzuN5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZTEzY2M4YzktZjk1Zi00OGY2LWJiNzktODM4ZTY3YzhjYzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DA0finbojHfLi6cSV7U2kEFddeEhUDqNgu7
fSDFXkpU6PrBbISITs1Bt8w3Ps2BFJ8OLqAvFYtnQUDKxLdwm72bzOTexr2x5IoU
00OS2OsCn532pv1vAyrba4ZjVgd5NNjKwstjayim4+qS6kCnkQc0yG1iypENjr1z
uJopA0EN4zwUWQuthNx7lxnPwPvyz2SCySOgkvccGHHsI+8VqID1bUelWiGdJ//P
ouNlPyqUQXAVlit5kqAtDtLgLHuwQVtLMr/0+1ZN4EKnnmsrA4nOw0LWkOu5w6qR
ddgHlzB5L+8BU28m/Bp6BYjz4l1ba03m/7xEoYduUtSx0BXbGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKRoQ59PUQGqvlt34Wwc39xiOrn7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYTY5NWYwNTYtM2I0MC0z
MjUwLWI5NTQtZjFkMjE0YTdiZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7tUujsJoAZ1Zq2jDjUjhH/ov/Oabbs+5rzHx0Vs00j4Q1ZB5y2mRvr
ymIoS1LsdchWdZZtZhJTYf0ry8tAKM1d40arHwelj+rmdzu7u0bX3iYDf8j+mqXA
9XI54hQBog47bNDTxnjJS+fHcBW9Uf87ERzKWEl7Tvksp4A3G8WOjVdzHrODAOZ9
HGcHjU9lD098QzKq1vHua4JXkLlldiaIDl+Anxc3nE7cNDM22oH+5MonYTnaR6Ba
CVT4JqtHxNAx0L13L6TpetoW/46uTmZWyEC0zRNwLUO/WPXaAeydcDX4PtOXuhAJ
lbW0HOb8aRzVt/xus+b+UBjD5Dr+JiY=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:22 2025 by rpki-client