Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/826cac33-212b-3cd3-b513-4fc98bffba3d.roa
File:                     826cac33-212b-3cd3-b513-4fc98bffba3d.roa (raw, json)
Hash identifier:          ky7oBzzw5rrKmvobnNDb/uPbf9mT3bj64ebjVV+UZNE=
Subject key identifier:   7E:74:6E:20:5F:21:DF:CE:4B:9E:52:24:BD:7A:F3:24:98:43:B1:CD
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F4328584A1B5FFC8B956E8FF49DEA7760
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/826cac33-212b-3cd3-b513-4fc98bffba3d.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     270147
IP address blocks:        136.175.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fc:8b:95:6e:8f:f4:9d:ea:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=29d9b926-9ed4-42c3-af19-b115888b8be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:43:b7:f4:05:8d:fc:b4:c3:db:8d:11:67:4a:
                    21:38:bb:ea:a9:e5:32:ed:b9:64:1c:da:37:b1:94:
                    0a:e5:a5:31:f9:da:80:45:15:6d:a5:29:c1:87:92:
                    63:c8:34:61:0c:76:12:a2:5e:f8:c0:9e:e1:d2:3b:
                    69:05:a5:3c:79:d1:7d:72:d1:0e:a4:40:7b:40:5a:
                    dc:22:49:c2:43:48:ee:e7:8f:35:2c:03:fd:48:61:
                    54:0f:cc:12:d8:4f:ca:db:ad:8c:73:36:66:e3:8e:
                    b5:4d:1c:c8:6e:8f:a0:40:64:e7:bc:46:be:f7:11:
                    2c:1f:65:f0:66:2c:3c:5a:0a:8f:19:e7:d5:d9:85:
                    3b:f5:c7:80:96:46:92:51:8c:80:37:f9:4d:6c:16:
                    7f:d5:92:4d:72:69:67:ab:46:cb:a0:c9:17:3b:e6:
                    14:8f:b4:4d:8e:0b:da:34:78:4e:14:0a:49:40:df:
                    a0:26:94:94:e3:ab:e8:e3:53:94:b4:68:9f:b1:32:
                    34:1c:e1:fc:28:35:dd:4d:cc:c5:ee:f2:c0:40:ea:
                    82:00:24:76:ec:af:41:ef:85:79:3d:a3:6c:25:ea:
                    3a:c6:5e:c1:f3:47:0a:5f:ba:5d:5c:a1:de:29:f7:
                    a1:dc:0d:51:be:b4:dd:8b:54:fe:d8:64:85:b8:af:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:74:6E:20:5F:21:DF:CE:4B:9E:52:24:BD:7A:F3:24:98:43:B1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/826cac33-212b-3cd3-b513-4fc98bffba3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:cc:28:a6:e9:07:a2:8d:95:e5:4c:34:74:ec:33:f2:03:e4:
         95:0d:36:1b:4e:48:e3:d2:ea:a4:09:95:87:4f:3b:08:8a:06:
         16:48:64:8f:8a:86:77:fd:c5:59:22:97:a1:b5:63:68:15:b9:
         b1:9c:3b:5a:29:56:4f:82:2b:bd:e8:9e:04:d6:56:6e:6c:1a:
         10:4a:e6:02:d6:0f:2f:dd:e3:62:eb:00:ca:30:c6:f2:a5:d7:
         36:70:f8:f5:78:20:06:23:c6:6e:97:16:2b:12:09:01:f4:c2:
         ac:92:5b:6f:87:d7:4f:33:47:bb:13:40:20:e2:58:d1:11:39:
         12:ab:ce:e3:12:3a:99:89:64:77:e8:d3:3b:1e:25:51:3d:60:
         b5:4f:cc:19:c1:78:eb:b3:75:57:85:de:8b:33:43:b2:57:c7:
         56:bf:54:ec:a3:b8:22:0c:0e:7a:1b:41:3a:db:64:ce:06:29:
         3a:d9:28:30:4b:da:eb:1b:37:0c:2d:99:c7:d6:4b:17:7e:6b:
         83:7e:84:d6:06:46:e3:9e:27:a8:2f:06:23:e2:a7:d6:56:a7:
         c7:ce:a8:7f:eb:a2:91:24:dc:00:cc:81:a0:83:7b:66:0c:cc:
         1f:25:52:0d:48:3c:57:5d:ab:8b:7e:cd:dd:2c:e1:3e:ec:f2:
         9e:0b:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:29:05 2025 by rpki-client