Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
File:                     85176132-47c9-32a1-9e04-6dadc4f6fc23.roa (raw, json)
Hash identifier:          QHWBavjCiAzefa3i8ltiLFs1xxVfBFriwFu2v1qmlIc=
Subject key identifier:   3E:22:A9:28:E5:A1:FF:07:AB:8A:0A:4E:60:2F:1A:33:D4:28:0F:AB
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F4328584B76F22AAF07334CFA26FF2980
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     36001
IP address blocks:        134.195.20.0/22 maxlen: 22
                          162.210.60.0/22 maxlen: 22
                          172.98.220.0/22 maxlen: 22
                          173.242.80.0/20 maxlen: 20
                          192.200.136.0/21 maxlen: 21
                          199.167.212.0/22 maxlen: 22
                          206.126.208.0/20 maxlen: 20
                          209.103.224.0/19 maxlen: 19
                          216.127.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2a:af:07:33:4c:fa:26:ff:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=e5216024-f6b6-40bc-a155-32bce074ed6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:00:06:16:40:e2:a1:03:47:dd:39:0b:62:
                    24:90:40:ca:dd:83:4e:27:e8:d7:75:e9:70:f1:5b:
                    58:d0:9b:5b:53:9a:52:76:2a:ff:74:f6:29:b1:5e:
                    99:b7:26:15:ed:ce:34:a9:8b:b7:78:77:d6:94:ad:
                    80:8c:b7:5c:af:55:fe:3c:9b:2f:85:79:00:78:96:
                    48:29:74:fb:3f:da:23:a3:03:7c:5c:2b:e1:9a:e0:
                    0b:ee:18:ae:e8:a8:e0:8a:39:3a:8d:da:ce:bb:3a:
                    f3:70:a8:a4:12:f9:41:65:e9:cb:e7:80:5d:e4:1d:
                    c4:2e:01:12:4b:3c:68:12:a8:1a:ab:8d:d4:d2:8b:
                    e2:0c:da:df:ce:7d:0b:f4:2d:61:c7:a1:d9:61:7b:
                    8d:2b:b6:94:04:67:cd:91:c6:c0:ee:5d:9f:b8:60:
                    df:9d:26:8f:e7:47:86:5c:0f:2a:c1:bd:7d:57:49:
                    83:b9:10:50:fa:ae:9d:57:25:19:d3:2a:4b:2d:e6:
                    37:36:b5:a4:b9:dd:77:99:b8:ed:b0:79:50:5f:c9:
                    79:91:8a:c5:38:f7:7b:23:28:df:c8:21:f4:24:7b:
                    99:ad:be:eb:bb:de:81:6a:4f:5b:e9:ac:1d:22:55:
                    cc:e0:be:ad:0b:c7:c1:24:97:21:42:db:35:b5:46:
                    75:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:22:A9:28:E5:A1:FF:07:AB:8A:0A:4E:60:2F:1A:33:D4:28:0F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/85176132-47c9-32a1-9e04-6dadc4f6fc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.20.0/22
                  162.210.60.0/22
                  172.98.220.0/22
                  173.242.80.0/20
                  192.200.136.0/21
                  199.167.212.0/22
                  206.126.208.0/20
                  209.103.224.0/19
                  216.127.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:17:57:ae:45:1d:59:d8:70:47:16:80:45:28:47:ee:8a:8e:
         bd:80:ed:f5:00:af:45:24:64:0d:85:66:1c:58:9b:10:72:8d:
         e5:2d:84:fe:d7:cf:42:88:3d:47:18:0e:26:27:d0:4b:44:44:
         dc:d4:3a:f7:50:38:8f:21:4a:0f:b7:aa:76:83:bd:f5:33:e7:
         3e:4f:f2:c8:3f:c4:c0:d9:15:eb:f9:74:23:df:01:8f:c6:5a:
         9e:29:06:54:bd:ca:94:0a:46:1e:83:c5:41:ee:64:58:22:0b:
         65:fc:43:77:5a:5d:f6:99:c0:bf:66:a2:fa:5d:e4:9f:da:a7:
         be:3f:09:8b:60:9d:32:95:b9:57:1f:6c:af:07:ef:a4:c2:5e:
         1d:91:c6:a5:0c:30:32:27:38:54:3f:bb:fb:89:61:10:a2:5e:
         53:9e:f1:fb:40:85:cf:bc:7e:15:f1:38:f7:cf:73:b0:4c:04:
         55:ac:3c:42:27:32:4e:e7:be:94:69:32:c8:ad:e9:03:7f:4c:
         4c:2c:fb:d5:54:ac:1c:15:7c:1b:c3:ec:27:c3:94:61:c2:e8:
         8c:29:f8:6f:d6:b3:5f:bb:2a:51:74:0e:f5:01:75:b7:52:bb:
         f6:43:2a:57:12:0f:fa:d2:46:03:17:ce:51:60:fb:2d:6e:1e:
         0f:fb:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:02:04 2025 by rpki-client