Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa
File:                     36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa (raw, json)
Hash identifier:          +Gw3AJh2u+DDTQal7Ul48Chnz35vevmE6jHDmmJ0vEc=
Subject key identifier:   8E:C7:21:49:D8:EE:FC:79:99:B2:61:29:28:0D:FB:FD:42:02:B5:EE
Certificate issuer:       /CN=7094fef3-a44f-4e12-98ee-72cf53d9de83
Certificate serial:       010D0C9F4328584B0E41664665673A7516B88F80
Authority key identifier: 3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     210
IP address blocks:        134.250.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:66:46:65:67:3a:75:16:b8:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094fef3-a44f-4e12-98ee-72cf53d9de83
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=1351e3ec-4a8f-46b2-8570-1d554acbcdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:52:aa:81:dc:7e:87:7f:7c:3d:58:53:7e:b1:
                    c5:b2:fa:5c:4c:c9:21:c8:99:a6:f1:a8:95:35:ab:
                    fb:09:c0:79:60:98:f4:ee:bf:7c:a1:ca:6c:3b:c1:
                    f8:4e:3b:3b:f8:65:50:2b:71:32:c7:ee:d5:2b:8a:
                    6d:83:a9:f8:ef:bd:ac:cd:36:9a:b5:79:39:e8:62:
                    ab:6d:31:86:18:57:22:90:d3:1b:0c:e7:90:30:d0:
                    38:cd:d4:ff:49:1a:ee:e8:fc:c0:ec:4b:d4:6c:0c:
                    f9:89:2c:29:c8:86:9e:89:42:56:e9:d8:05:d0:5e:
                    d7:f9:a6:58:13:3b:21:a3:f7:85:10:c2:0e:5a:3e:
                    15:d9:5e:83:25:1f:2b:00:d5:d0:68:99:bc:56:2d:
                    1b:99:35:12:c5:87:57:e0:6c:88:2c:74:e9:10:a1:
                    9e:ae:46:91:dd:52:ce:5a:96:22:79:6c:fb:62:17:
                    22:45:1b:53:96:52:fd:2b:a1:8b:02:93:ab:b2:21:
                    69:e7:1b:7f:39:af:d5:98:ef:68:b9:39:12:b6:cf:
                    45:b6:4e:8c:74:64:77:1b:ac:88:2a:fb:d5:8f:fb:
                    08:6b:25:ab:c0:5a:fa:b8:4d:20:f8:96:60:46:34:
                    70:7c:bc:88:b5:a9:d3:15:df:0e:d1:ae:d0:89:1f:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C7:21:49:D8:EE:FC:79:99:B2:61:29:28:0D:FB:FD:42:02:B5:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/36966a71-40f4-3f7e-8c29-cc0683e1cb7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83/7094fef3-a44f-4e12-98ee-72cf53d9de83.crl

            X509v3 Authority Key Identifier:
                keyid:3F:12:DC:25:73:1D:7D:0E:FD:5B:88:B0:07:F2:DE:87:12:16:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7094fef3-a44f-4e12-98ee-72cf53d9de83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:95:f9:e6:77:4c:b8:8e:6e:f7:42:8a:55:cd:02:62:4d:cc:
         10:4c:18:e7:03:bb:d3:91:2b:c4:7a:0b:c9:0c:9a:1c:f4:75:
         09:29:b2:32:11:42:71:e0:6c:da:cb:2f:0b:92:7e:77:10:44:
         5a:ee:67:21:cd:82:ea:d7:41:ec:c1:9c:85:bf:77:66:0f:d1:
         64:23:aa:67:aa:af:bb:e2:52:9b:2f:3d:1b:ee:bd:c6:55:30:
         41:ba:28:83:11:f1:28:6f:e1:4b:58:49:ce:06:a3:ca:c8:79:
         40:9d:86:21:c9:53:52:8a:b7:4f:43:41:3f:e4:d9:4f:80:98:
         18:18:81:57:bc:3f:8a:9d:54:68:88:bf:a3:c8:f3:8d:45:1e:
         50:17:c1:09:8a:d0:d1:18:fd:37:3c:bc:2b:c7:51:6d:a6:15:
         38:e9:41:cc:f0:d8:c6:63:4e:98:0e:19:21:52:74:29:d9:77:
         c8:4e:fb:5a:de:39:67:2e:e3:d6:fb:a0:53:a7:af:4c:de:43:
         6f:f3:c6:5e:11:d9:3d:f6:5b:6f:0c:1f:ec:a5:aa:ae:32:b2:
         af:67:b8:73:9b:cc:3e:6b:d6:8b:7f:9a:5e:51:05:b4:dc:de:
         51:d0:7e:73:14:d8:9f:ec:8c:e3:6e:9c:03:70:ba:a1:2e:d9:
         59:3f:5c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:16:53 2025 by rpki-client