Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa
File:                     35a3d056-2c42-3007-9cfa-92e09d07c46e.roa (raw, json)
Hash identifier:          GjmUnXXGIioeCZ0Ow+cE06MUL5t1+hx7AJDFleAA0Fs=
Subject key identifier:   A2:53:DB:02:01:C6:BD:DF:6A:98:0F:9A:76:F9:D5:40:7A:30:29:8C
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584B84E76F13A495FC712D7B2580
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        136.184.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:6f:13:a4:95:fc:71:2d:7b:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=9572a40d-bb12-428a-a56b-d88664b53d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:bf:8e:0f:53:00:c3:a6:f5:4f:08:92:d1:
                    77:59:0e:a5:2c:48:94:70:66:ab:ed:58:09:f6:44:
                    22:cd:33:b0:67:fb:cf:7f:17:c8:6c:3e:13:16:7b:
                    59:3c:3b:77:ce:7e:63:21:c7:25:a9:f4:5a:65:2f:
                    20:3f:9e:a5:d5:fe:fa:35:f9:4f:8c:c4:63:a4:b2:
                    7d:46:22:06:6a:45:2f:7b:0a:a8:4e:c8:30:26:ec:
                    75:84:2e:d9:58:ec:02:f2:d4:af:39:88:b8:a1:dc:
                    17:eb:0c:9a:ae:5f:d6:d4:d5:c4:2a:3e:65:5d:78:
                    f3:fb:ce:55:94:ad:fb:cf:ae:32:39:c2:de:1a:7d:
                    84:b2:c9:3d:fe:ac:31:06:38:f6:ae:a2:83:4a:39:
                    b4:2a:a4:ea:70:7f:c3:25:5f:ec:13:3a:c8:e3:3d:
                    e0:db:aa:1a:54:bc:e9:fd:55:2e:f0:0f:ab:cb:ca:
                    f9:45:53:49:4a:87:c4:9a:c5:53:b7:62:08:c0:53:
                    8a:97:a4:78:6a:d4:ef:eb:26:94:5b:b0:21:77:e7:
                    8f:58:59:35:41:30:7d:01:66:ea:05:80:d9:a6:a5:
                    6e:eb:70:b8:74:2e:ec:b9:75:b4:0a:c4:81:29:74:
                    20:44:a5:1a:10:34:fb:5e:1a:12:64:26:89:30:06:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:53:DB:02:01:C6:BD:DF:6A:98:0F:9A:76:F9:D5:40:7A:30:29:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:60:a2:fb:a7:49:99:ce:d0:44:da:5b:06:f0:5f:1d:66:6c:
         14:71:13:ff:64:f7:c3:86:25:d5:99:88:91:14:04:6e:5d:ed:
         f8:5e:08:58:da:98:22:9a:3d:bf:5b:15:48:99:f0:44:be:08:
         ef:0b:e2:a7:ba:0c:56:9e:80:a2:45:92:34:77:aa:07:6a:01:
         3c:30:93:27:1f:c9:5a:d0:4e:59:eb:36:05:7c:c7:56:c3:e7:
         b1:d5:9c:e7:a6:4a:f8:58:0b:8b:b2:97:d7:7c:0e:3d:c6:ef:
         3b:96:3a:80:72:ca:61:5f:2d:47:ab:a1:98:b7:e7:6c:d9:73:
         25:a9:df:76:10:20:36:a2:3c:91:12:fa:28:dc:88:20:9e:6e:
         d9:f8:21:75:9a:0d:98:4a:b7:b3:f8:bd:da:65:d8:52:97:29:
         30:2e:6e:f8:27:64:74:8b:cc:02:1c:98:d6:05:5e:6b:8b:57:
         4e:27:4e:4f:e3:62:a4:1e:ca:58:47:d6:f4:1f:27:b5:90:c9:
         d7:76:3d:9e:40:c6:c2:aa:3f:68:84:1c:69:25:e4:c3:51:86:
         41:c0:7f:c6:00:db:61:ca:84:2b:6b:ae:bb:c4:71:88:02:b2:
         a1:0c:d4:35:75:03:fd:81:fd:7f:75:52:12:4a:ba:4d:cf:a3:
         59:b9:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:43 2025 by rpki-client