Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/06af9146-dc77-393d-8085-c2dd4f04623d.roa
File:                     06af9146-dc77-393d-8085-c2dd4f04623d.roa (raw, json)
Hash identifier:          J7TZL89tO3ePiJJvt9w30mrUeUZnQVFNcS6IYluHcqs=
Subject key identifier:   6B:F1:26:F6:23:4C:CE:B9:AD:8A:1B:95:C4:43:1A:8E:D9:64:CF:50
Certificate issuer:       /CN=c235459b-705a-42fb-9059-b6a9bf0c853f
Certificate serial:       010D0C9F43285849CCE277AEBD18E0CDA5CE2580
Authority key identifier: 15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/06af9146-dc77-393d-8085-c2dd4f04623d.roa
Signing time:             Fri 09 May 2025 22:15:02 +0000
ROA not before:           Fri 09 May 2025 22:15:02 +0000
ROA not after:            Thu 07 Aug 2025 22:15:02 +0000
asID:                     55285
IP address blocks:        136.175.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cc:e2:77:ae:bd:18:e0:cd:a5:ce:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Validity
            Not Before: May  9 22:15:02 2025 GMT
            Not After : Aug  7 22:15:02 2025 GMT
        Subject: CN=d0e910ac-f958-4fee-b4fb-3966215c57ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ad:55:8d:f0:67:8c:2a:9a:79:71:80:50:bf:
                    ad:9f:19:cb:81:bc:be:ed:ef:86:46:83:ff:e6:b2:
                    e2:3b:f9:e3:94:af:69:7f:20:38:73:f4:10:b2:83:
                    be:21:a7:0a:1c:6f:f6:47:60:d6:72:dc:ce:ae:80:
                    9c:7c:80:28:81:35:88:74:6f:d6:fd:e7:c4:8b:a4:
                    58:b2:9a:8b:a6:7c:7b:e1:2a:c2:ae:8d:f4:b4:19:
                    93:b4:57:f3:d8:b1:6c:a3:2c:26:ab:34:27:15:b8:
                    09:82:3d:89:de:0f:f8:03:74:c3:37:b7:c5:20:1a:
                    72:1e:1d:7c:10:88:e1:5e:19:01:11:d1:a3:eb:14:
                    c2:1c:59:66:93:67:1b:fc:72:d7:77:b0:e7:f2:d4:
                    5d:17:76:63:b5:b6:89:ba:7d:81:c9:c1:a8:67:67:
                    aa:4f:81:59:9e:ab:46:f7:f8:f4:b9:2c:64:e1:65:
                    93:df:f7:7e:28:6c:f8:e8:e2:af:de:ab:ac:47:03:
                    67:84:14:67:1f:4e:44:b5:67:bb:c2:41:5c:15:61:
                    b4:f3:01:03:b3:cf:3c:c4:ef:6e:1b:14:bf:93:cf:
                    00:7b:0f:d5:90:32:5c:18:9c:03:f5:c6:8b:b5:30:
                    e5:62:4c:e1:f5:dd:d9:dc:f8:5c:5b:a1:5d:1a:50:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F1:26:F6:23:4C:CE:B9:AD:8A:1B:95:C4:43:1A:8E:D9:64:CF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/06af9146-dc77-393d-8085-c2dd4f04623d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl

            X509v3 Authority Key Identifier:
                keyid:15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:91:4b:83:16:e1:8a:48:61:03:39:04:87:74:24:11:ba:75:
         36:a1:95:fe:cd:7a:3c:63:bc:92:12:e3:ff:c0:e1:e4:b9:e5:
         62:b0:e9:42:e9:80:dc:80:36:36:60:c2:2a:82:f0:f8:70:9f:
         29:91:36:05:18:14:53:0e:3c:ab:ce:df:73:01:17:34:b4:92:
         3f:56:d1:b0:d9:f0:d8:fb:4e:a5:10:b1:38:77:b8:f1:8f:97:
         ba:dd:95:7b:ed:14:ad:ec:00:f6:63:4f:ca:88:f6:18:1d:c8:
         a0:a2:ec:08:6e:21:db:ba:06:41:bd:24:09:19:e9:74:2f:de:
         79:f7:3f:b2:e4:02:db:fa:53:aa:7b:2a:90:b4:d4:63:94:50:
         9f:01:e1:df:4a:88:03:a3:49:d7:8a:73:cf:68:23:0c:a8:a4:
         30:9e:cc:af:05:5e:be:c2:7e:e5:28:aa:78:5d:18:0c:24:a2:
         8a:74:f7:94:2e:cc:e7:a3:83:7b:9a:2a:01:f8:aa:7a:ab:39:
         03:b1:cc:69:eb:20:7d:5f:7a:19:69:a8:95:47:e4:d9:78:77:
         32:7c:0c:50:7c:43:9d:c9:63:fe:ea:9e:70:cb:48:1c:df:85:
         51:70:2e:70:0c:ad:7f:7b:c3:97:48:71:f4:ed:5b:51:57:50:
         96:47:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:50:02 2025 by rpki-client