Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
File:                     b9976d2c-e93d-3060-b104-42102b50cd67.roa (raw, json)
Hash identifier:          cH9d9AMZLSvZ5sZsRHcdABif4Oqz1Medb/fa52f6NgQ=
Subject key identifier:   90:68:97:BA:28:2B:F6:29:B4:AF:C7:9B:6C:FE:2B:FE:99:4D:96:47
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584A7E7B760B3E5552CBF9E24B80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        136.22.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:76:0b:3e:55:52:cb:f9:e2:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=ccb67d2e-73d4-40cb-b203-3c534de00722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:78:c7:61:3f:b7:04:b3:53:43:a8:7b:6c:
                    b4:a0:59:c4:fb:f4:57:31:7f:0c:5e:26:cb:f6:ea:
                    3d:bb:7a:31:18:61:97:4b:75:4e:77:5a:dc:41:e3:
                    a6:1c:ca:b1:6a:88:46:fd:72:b9:8a:c6:ca:e6:c2:
                    c5:b1:17:53:18:06:1b:59:34:46:8f:6b:7f:a5:92:
                    9d:fd:76:2c:f0:ca:22:30:cc:2e:82:26:ec:6e:c3:
                    75:46:04:9a:72:4d:cd:98:35:f0:6b:35:8e:7b:66:
                    a5:d8:49:24:bc:b8:27:87:24:85:09:82:41:0d:54:
                    5e:6e:16:ca:65:fc:14:d1:f3:3c:d5:7d:fa:cf:c3:
                    e9:f2:98:54:74:3c:f7:8b:89:f7:f6:a5:2b:2f:a8:
                    db:0b:c8:0f:3a:87:80:70:3e:4b:94:f2:4f:c0:4a:
                    be:02:e8:b3:f3:c8:2b:bc:88:cd:d4:78:a9:bf:20:
                    29:08:31:e4:77:1e:b3:cc:81:e8:30:4b:3a:a5:3e:
                    e1:7a:96:ec:d5:93:4b:79:63:15:41:10:4a:e8:68:
                    5e:11:25:c5:99:05:47:cd:df:fb:9d:ca:a6:6a:18:
                    15:75:1c:5c:67:00:18:d0:c8:ba:9a:90:53:04:61:
                    7b:0f:e2:44:82:b6:b4:80:2a:5c:3b:65:a3:2c:c6:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:68:97:BA:28:2B:F6:29:B4:AF:C7:9B:6C:FE:2B:FE:99:4D:96:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:d6:96:32:1d:59:ea:c3:94:47:6d:8c:6a:b9:3f:61:05:
         45:67:3c:29:1a:48:5a:2a:d4:df:46:af:52:a9:de:c3:9f:54:
         e1:52:c0:f7:c6:2e:88:f3:41:3e:bf:48:45:c2:5a:3f:de:49:
         73:2a:30:92:03:31:2a:71:a3:0e:3a:26:88:f9:ec:f1:43:ff:
         ba:f7:8a:fb:82:54:ba:20:93:73:08:24:13:90:d8:22:57:44:
         8c:1c:bf:53:54:47:9b:5c:1d:75:bb:93:b3:8c:f7:70:a5:4f:
         90:db:4c:09:14:72:02:26:58:e1:a5:61:28:fd:87:48:2c:1d:
         83:26:61:90:00:7b:b4:f9:35:ee:97:6d:1d:9b:f8:75:73:b7:
         50:40:bc:5c:c7:e9:fc:b9:2a:98:51:50:82:ad:c8:fb:04:a4:
         ce:00:b9:79:df:19:95:99:67:00:b6:98:ff:ea:fb:1a:a5:e0:
         d6:26:55:3c:8c:85:ab:88:73:e0:7c:13:aa:15:d0:af:82:6a:
         bb:e6:7e:a0:95:6b:21:b2:73:90:a9:0a:dd:58:f2:7e:30:62:
         f5:16:6d:0a:c7:77:95:42:96:4e:7b:d3:7d:1c:45:d3:fa:6d:
         51:a8:3b:fd:5f:f7:87:f3:00:f5:08:50:e9:a1:dc:3b:61:98:
         de:64:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:27:36 2025 by rpki-client