Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa
File:                     6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa (raw, json)
Hash identifier:          Ex7/UoFOAyc0VNoDYVURW85oa6uG+1Hj7VBf+VrBPGE=
Subject key identifier:   A4:98:26:B7:95:D8:D8:99:1C:95:22:5B:A7:FB:DC:42:36:AF:A5:36
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F4328584B1F01645FE1BA9DBC3D703180
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     26658
IP address blocks:        192.119.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:64:5f:e1:ba:9d:bc:3d:70:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=9b0ecbaf-7df0-4b23-8834-203f2373df9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:1f:fd:db:15:57:4f:c8:e5:2c:bd:6c:c0:
                    89:b9:33:f9:50:45:c9:a8:1c:a8:06:d3:f6:4b:fa:
                    0f:8e:a4:88:7f:b9:d4:af:aa:30:0c:ad:0e:2e:c6:
                    9f:0d:aa:e4:52:f1:4b:ad:cb:02:33:d1:ed:b2:d3:
                    71:a0:2c:bc:b8:b5:ab:ff:42:31:d8:80:c1:a7:1b:
                    b8:76:ec:27:b3:f7:da:24:a7:19:4e:88:26:6b:70:
                    0b:2a:60:84:3d:f2:7d:5e:81:1b:f4:61:82:80:89:
                    b2:9c:42:65:69:af:bb:61:ce:9c:c8:73:6c:2c:ed:
                    5b:8b:de:39:f3:1d:45:a6:22:ca:6f:da:88:70:09:
                    94:95:be:8e:5e:34:5a:77:80:68:ed:c9:c0:22:8a:
                    8c:5b:90:ff:44:c9:21:a0:9d:4f:bd:11:bc:5f:6a:
                    13:cb:7a:f2:dd:72:55:df:4f:26:18:f9:48:1b:19:
                    eb:7e:c6:77:be:2c:8a:a6:25:f6:e4:8a:d9:6b:31:
                    e1:0a:c5:63:31:2f:dc:d2:d9:12:ca:60:4e:03:aa:
                    fd:45:52:c9:52:35:f1:f4:c0:23:0a:08:9a:9d:30:
                    e5:c6:8a:ad:e8:2f:8b:55:f9:ec:c4:a6:90:28:1d:
                    34:d8:54:c9:54:e5:c5:af:9b:3b:2c:90:08:3e:c9:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:98:26:B7:95:D8:D8:99:1C:95:22:5B:A7:FB:DC:42:36:AF:A5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/6f0ab6f1-cd0e-3429-9fc0-8fcda9a96382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:89:5d:a9:43:7d:6d:23:4a:29:66:a8:87:7b:57:d4:c9:42:
         ed:b0:c8:c3:8e:81:7d:d7:c8:96:7c:ed:fd:ab:02:ff:58:f0:
         e2:03:6a:0a:0d:ec:22:c5:62:18:d1:8f:24:02:55:a9:af:1b:
         5f:26:a5:bc:83:26:78:48:95:41:25:e9:38:97:ef:82:b5:76:
         f0:b8:91:83:4b:73:6a:e5:1a:c8:61:69:24:c7:10:fb:45:61:
         f0:46:1e:6b:6e:8d:82:c2:1f:5c:67:df:1f:d5:dc:1d:fe:83:
         36:14:80:16:e7:3a:9a:92:9e:40:ce:f9:a5:85:03:4e:e1:12:
         10:8b:31:ee:ed:23:46:2d:c0:64:5a:fc:99:55:99:ff:51:d1:
         95:9d:af:68:3c:97:0a:0b:2e:5e:3a:20:54:51:88:1d:c0:ae:
         54:85:8a:04:dc:3c:cd:b6:60:ae:e4:73:b9:31:66:62:70:b0:
         85:67:49:ae:17:e8:3d:9b:10:ed:4f:62:d6:6e:7d:d6:59:be:
         bc:5d:67:58:98:40:bd:75:cb:7d:47:d5:c1:68:1a:f7:09:df:
         99:e9:8e:dd:0c:5e:40:c4:2f:9b:32:64:94:b3:31:22:ad:99:
         e5:56:22:e8:49:4f:15:0d:e5:bf:e9:6f:34:87:e2:63:7f:21:
         20:52:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 05:57:39 2025 by rpki-client