Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/e4783078-87cc-3032-b18d-3b5526db50f6.roa
File:                     e4783078-87cc-3032-b18d-3b5526db50f6.roa (raw, json)
Hash identifier:          2L5bOO7QHQUqMQZHX1p3RG+Vz5VQkreS/AVARPYVqHI=
Subject key identifier:   3D:C1:23:75:69:C4:AF:09:E4:04:24:66:C5:4C:17:FE:38:33:8A:58
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584ACB40E9953522F35248958E80
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/e4783078-87cc-3032-b18d-3b5526db50f6.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        206.146.135.0/24 maxlen: 24
                          206.146.136.0/24 maxlen: 24
                          206.146.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e9:95:35:22:f3:52:48:95:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=96ad36e0-8d0e-45eb-8e52-8b20319b1c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cd:67:3f:90:da:73:86:2c:9d:c2:da:79:bf:
                    ef:3b:1d:d0:2d:61:bd:89:a3:bc:fb:5b:b5:0b:6c:
                    c3:3f:06:14:30:e5:c4:95:7c:6a:0a:b6:4b:8f:82:
                    58:e5:c8:1f:f7:37:65:4e:a8:35:77:7d:52:83:0f:
                    72:c6:10:06:f0:19:90:27:f4:34:99:a6:c6:5b:23:
                    09:5b:6f:4a:3b:d0:ac:b7:7b:51:c1:d9:dd:cc:2e:
                    3e:00:9f:b3:f0:28:d4:d8:88:69:87:83:7d:97:a2:
                    46:a5:f0:21:da:75:c9:50:18:15:f1:18:c6:58:09:
                    4e:51:88:03:62:a2:a0:38:5f:a4:ad:9a:29:6d:a3:
                    fb:ee:35:21:31:23:90:c9:37:ed:c3:b9:81:a6:fc:
                    2f:e1:40:d4:a7:0a:48:8a:d9:1d:4e:57:27:ad:f9:
                    53:85:38:b4:46:57:1d:30:39:2e:c4:74:3b:80:4a:
                    51:66:23:26:22:cb:64:ab:26:02:d7:75:97:7f:22:
                    8e:85:d8:43:3b:5b:d4:22:e7:9d:9e:68:46:30:a1:
                    01:66:72:19:43:55:56:a4:36:94:79:4a:f3:91:0e:
                    a8:ff:9b:f2:67:04:b2:77:df:a3:18:1f:ec:4d:fe:
                    20:13:65:8f:85:8e:6d:a5:2e:57:42:96:be:86:e1:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C1:23:75:69:C4:AF:09:E4:04:24:66:C5:4C:17:FE:38:33:8A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/e4783078-87cc-3032-b18d-3b5526db50f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.146.135.0-206.146.137.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:25:ff:0d:0c:63:76:9f:d6:6a:49:5a:d9:cf:09:eb:03:02:
         9d:7b:58:90:2a:7e:4c:27:af:b8:6c:01:16:1b:96:74:2d:08:
         f5:1f:39:9c:67:0c:b9:27:f7:04:b6:b0:b3:10:93:58:dd:71:
         69:d9:86:2f:91:93:ce:ea:2e:ee:46:f2:51:a7:6a:7e:e0:f4:
         7d:47:a4:1d:6d:05:82:33:d5:5c:f0:dc:15:07:ac:13:f9:86:
         ff:cc:6f:dd:13:52:9a:05:6e:fd:de:7f:cb:95:c7:5c:29:88:
         42:5f:48:d0:e7:b1:a6:18:db:e4:37:91:67:a7:7a:8d:8c:5e:
         cf:68:48:fe:dc:f9:b4:58:65:44:a6:3d:6d:7e:b9:c2:f1:32:
         2d:55:ed:da:74:15:3b:2f:cc:b7:54:59:07:e9:a7:37:fa:1f:
         f0:95:a1:c2:08:2f:71:ed:5a:37:9a:74:5b:71:16:68:d3:a8:
         7c:8a:ad:5d:e8:aa:d2:29:b5:39:d1:b7:e7:81:60:cb:54:69:
         d8:a4:5c:e1:89:ab:fd:d3:17:74:34:9d:6e:68:07:b4:45:3e:
         9a:79:97:9c:9d:61:46:3e:da:35:ed:87:52:21:c2:8a:a8:16:
         70:f5:10:1c:12:9f:71:21:7f:62:6a:02:de:89:f5:e6:ff:0e:
         39:6c:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:45 2025 by rpki-client