Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/36b05852-bb4a-32af-81b2-711fb983c0dd.roa
File:                     36b05852-bb4a-32af-81b2-711fb983c0dd.roa (raw, json)
Hash identifier:          Hl7lmG9mbTIA6OQQWGQ8atGnQGLotDw3oBhH22mvIZ0=
Subject key identifier:   56:06:72:3D:3F:A5:8D:C0:88:96:4B:60:41:39:B7:D5:6F:B6:9D:02
Certificate issuer:       /CN=fc8b3016-10fe-4f4c-b37c-cf3409c776e2
Certificate serial:       010D0C9F4328584AECC125341DBF2D64F1D0D780
Authority key identifier: CE:33:0F:54:4C:F9:ED:2F:E2:B1:73:7C:73:B7:2E:2D:0C:1C:CE:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/36b05852-bb4a-32af-81b2-711fb983c0dd.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     398921
IP address blocks:        134.195.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:25:34:1d:bf:2d:64:f1:d0:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc8b3016-10fe-4f4c-b37c-cf3409c776e2
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=25475d14-b5a6-4945-b018-094ae23ab7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:93:3b:d4:a6:82:f9:cf:d1:7f:c0:54:1b:
                    41:47:ec:fd:be:a9:26:0f:d4:a9:80:07:0a:c9:39:
                    23:71:e6:e2:75:a2:af:74:d4:db:ed:cb:68:57:b3:
                    72:17:b6:9d:5a:4d:e4:bf:6b:09:18:af:39:f7:70:
                    1a:ab:a4:ba:1a:5d:cd:0b:bc:6c:52:fe:f4:4f:94:
                    d5:cd:14:45:4e:36:94:4d:d0:5b:55:81:a6:78:bb:
                    4c:db:86:c7:dd:bb:5e:44:bb:e9:8d:88:50:24:5f:
                    5f:33:69:df:2e:04:65:41:99:9a:e4:4a:85:44:c5:
                    3e:a3:5f:09:a1:fa:10:e7:15:7a:e8:ba:66:ff:7c:
                    55:d7:a0:19:7d:bd:71:d3:f3:02:c1:28:57:30:6e:
                    15:e2:d1:dd:c4:4f:45:a3:1d:e2:31:62:fd:6a:30:
                    f0:86:47:c6:62:4b:b3:7d:75:b3:ce:71:88:dd:31:
                    f2:6c:f8:84:1b:72:33:fb:22:b2:53:94:ce:c1:ed:
                    1c:ca:10:d3:ed:8d:70:86:3e:63:2e:a5:aa:04:97:
                    ad:8b:be:80:65:71:bc:ed:b3:7b:b4:dd:d5:f4:76:
                    9b:e1:c7:f2:2e:2e:04:9c:18:0b:de:0f:04:9b:72:
                    0d:8e:3c:50:fb:cd:87:56:81:3b:2a:24:1d:50:74:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:06:72:3D:3F:A5:8D:C0:88:96:4B:60:41:39:B7:D5:6F:B6:9D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/36b05852-bb4a-32af-81b2-711fb983c0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.crl

            X509v3 Authority Key Identifier:
                keyid:CE:33:0F:54:4C:F9:ED:2F:E2:B1:73:7C:73:B7:2E:2D:0C:1C:CE:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc8b3016-10fe-4f4c-b37c-cf3409c776e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:82:c1:00:4e:b5:f4:d1:b8:1e:f7:a4:16:a1:28:a2:c4:a8:
         cc:87:f8:71:94:a1:4a:59:1d:52:b4:84:3a:45:e3:bb:a5:b7:
         d2:4a:a4:d3:90:c1:03:a3:72:37:2a:09:4b:a9:ad:f9:c0:b0:
         c4:91:95:4a:e2:a2:88:c0:3c:aa:0c:45:7c:a6:4d:5a:36:38:
         fc:a5:0a:a7:e3:45:72:19:d2:65:06:1f:29:89:22:3a:42:29:
         2e:d4:25:fd:5b:6b:05:92:fb:f5:c1:05:1e:85:ec:54:6b:cd:
         82:76:ee:66:0c:35:49:01:a3:6b:da:99:11:1d:b1:98:e9:f1:
         e1:da:19:e5:95:69:93:65:77:90:eb:ca:7d:b7:c9:cb:d9:9f:
         01:14:03:f0:0e:b8:f9:7d:af:21:ae:98:f8:87:56:64:be:25:
         e0:a8:66:d9:e3:90:ae:cd:08:da:c2:9c:99:6d:a1:35:f6:57:
         04:f9:ba:19:a0:8d:0c:15:4a:8a:a1:a0:e0:38:f5:ec:44:79:
         fc:03:fc:0f:41:ad:e7:f4:bf:fc:41:96:57:ad:72:55:c3:1e:
         11:20:b1:97:28:08:8d:0b:f7:9c:ed:78:81:0a:c2:dc:10:81:
         33:ef:2c:a2:91:3d:02:44:be:82:a2:64:f5:b6:bf:65:b2:f7:
         09:47:72:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:38 2025 by rpki-client