Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0bb23b00-00fc-327e-8fb8-33dd73b93b7f.roa
File:                     0bb23b00-00fc-327e-8fb8-33dd73b93b7f.roa (raw, json)
Hash identifier:          1oRqF4p/6hjL+YT3QExBMkl3IrjRnh905Cn6otdUT6s=
Subject key identifier:   81:CC:7B:C9:4A:E7:6A:ED:21:BF:82:FA:DB:AF:29:CE:D4:FC:8A:D5
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF12969A5CFD8E4CC1800
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0bb23b00-00fc-327e-8fb8-33dd73b93b7f.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     53813
IP address blocks:        136.226.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f1:29:69:a5:cf:d8:e4:cc:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=082981ed-fd45-437c-84a2-6fde1c7215d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:26:00:7c:eb:6f:ea:08:8a:9b:37:9b:2e:f4:
                    27:ce:b0:4c:fb:f3:1f:d3:fd:55:37:3e:4a:b8:7b:
                    34:46:74:c8:5e:1f:9f:43:0f:b2:eb:3d:25:c4:7d:
                    d8:01:67:b0:37:dc:ec:02:dc:ec:24:d2:a0:c9:f8:
                    09:b4:8f:8c:e7:4d:3c:a6:27:ca:ab:7b:9a:0b:61:
                    d9:79:e1:4e:47:78:8a:2f:53:33:85:ce:c8:b7:c2:
                    3c:d7:79:1e:bd:ea:0a:7a:d1:41:96:38:3e:63:8f:
                    e9:70:60:f7:3b:6c:fb:98:0d:ac:c8:92:b1:d0:08:
                    fe:51:3d:07:87:c7:b7:04:6e:2e:ab:ea:51:fc:b5:
                    a2:a8:29:35:0e:cf:ea:58:05:5c:78:da:43:aa:a5:
                    2c:1d:e7:f0:f4:75:9c:ce:07:1f:09:19:bf:93:9f:
                    7d:d4:84:a1:cb:1f:94:5b:49:aa:c6:cc:00:eb:47:
                    b9:c5:9b:48:9e:f4:b8:ae:06:7e:da:b3:8d:5c:30:
                    01:94:13:42:5a:6e:65:fa:0e:43:02:d0:67:36:4d:
                    21:3b:f1:ac:de:61:34:1d:e2:41:94:d3:d9:94:85:
                    dd:e4:78:c5:ce:cc:3d:8b:ca:a9:ab:34:d6:c5:cd:
                    a0:99:dd:fa:be:71:71:ad:1a:4a:5f:35:36:4c:12:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CC:7B:C9:4A:E7:6A:ED:21:BF:82:FA:DB:AF:29:CE:D4:FC:8A:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0bb23b00-00fc-327e-8fb8-33dd73b93b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:7c:f6:8e:7c:66:12:9a:f6:b9:a3:2f:a3:85:c6:2c:8d:f8:
         bc:76:33:81:b7:a6:cd:20:8b:49:2f:9f:b9:79:45:0b:ab:dd:
         22:9c:80:3b:97:f1:ab:d8:dc:ff:53:de:25:0b:c9:7e:54:ef:
         e4:d8:f4:63:50:61:e3:8d:08:cd:4e:84:e4:ef:1c:23:09:4a:
         ec:f5:59:ee:e1:9e:dc:45:44:c8:1e:13:5f:88:d6:f6:b5:16:
         18:09:ff:57:1e:d0:ff:e9:32:d9:4c:fe:d5:2a:c2:04:3f:ef:
         b4:cd:4a:ee:b8:57:bd:50:2e:28:fa:9b:41:1a:ae:b0:96:82:
         98:fd:4a:5f:c6:22:51:65:46:f2:8f:b4:0b:5d:4e:4b:0c:1d:
         f1:5a:aa:76:62:41:67:b0:b7:4d:d7:2a:06:62:35:4d:39:0b:
         f4:c3:8e:ce:a5:88:bd:69:2b:39:6f:40:23:b1:cf:7c:cf:1f:
         be:74:87:a0:f0:01:e8:9d:18:e7:33:98:4b:d1:31:44:1a:63:
         86:51:10:f0:44:0b:8a:46:c6:8e:f1:0c:67:6c:47:cc:6c:eb:
         40:f6:d2:cf:38:c8:c9:5b:64:3a:c1:a2:fe:98:f9:49:55:c0:
         a3:5c:00:37:0f:a0:d1:8b:b3:c6:37:13:13:bf:49:64:39:c4:
         df:5a:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:14:21 2025 by rpki-client