Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa
File:                     58f97502-a21c-3db1-8649-e4de440334ed.roa (raw, json)
Hash identifier:          yGzMIak+OGWNaU+m+C8zycU5XXRs4FRctYMQmh7oKCQ=
Subject key identifier:   8E:B8:88:50:55:F9:95:6F:B6:A7:CE:FA:B4:3F:34:8A:97:C8:A4:AB
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584B40819A76483E0004F6CC8700
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     19165
IP address blocks:        136.28.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:9a:76:48:3e:00:04:f6:cc:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=e673dcdd-549b-4f22-9bc7-1d3fb8773457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:93:01:d2:12:e1:ae:08:76:a4:5a:fa:19:
                    a5:d1:b1:0d:da:8b:0f:d1:31:3f:64:79:57:87:31:
                    d4:c5:59:1d:d4:20:25:67:50:7d:86:b8:05:b4:fc:
                    16:20:18:da:63:71:d1:cd:13:e7:27:fd:e1:fb:38:
                    5a:23:54:3e:8f:80:52:27:09:a6:8d:f9:37:7f:3c:
                    1c:94:05:8d:69:56:f9:36:5d:69:32:95:ac:36:5a:
                    87:39:0e:c9:69:16:de:cb:d9:9f:3f:f3:02:54:dc:
                    65:74:3e:7a:73:6d:b1:b2:8b:1d:a4:26:e6:d6:d6:
                    6c:cd:98:cd:ed:d2:ef:58:cc:86:1f:61:57:c4:08:
                    b0:41:96:69:a7:82:d6:d7:fa:e2:04:5f:33:24:ef:
                    c6:56:43:97:df:c9:64:80:cf:e1:f1:f8:fa:61:c4:
                    f2:8b:24:dd:81:ef:fd:d5:50:ce:4a:8e:33:e6:ca:
                    3a:c5:0e:1f:b6:b3:f3:b4:b7:97:e2:ae:20:d6:ae:
                    c1:38:34:1d:bd:37:95:00:f6:44:5d:95:a2:bb:a2:
                    be:4d:0f:54:7d:c8:98:8b:be:4a:9c:4d:3e:6c:29:
                    a6:81:84:0b:41:29:3a:02:53:99:87:1e:04:c7:23:
                    6c:06:00:d0:e2:3b:77:5b:93:01:ca:75:81:c8:71:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B8:88:50:55:F9:95:6F:B6:A7:CE:FA:B4:3F:34:8A:97:C8:A4:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.28.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:ca:93:ed:40:89:63:47:d2:80:4b:95:a5:5e:a6:6d:ed:
         c9:cd:ad:a1:c1:df:f8:52:4d:ac:67:14:e3:88:8a:dd:1a:70:
         04:56:21:e0:d6:e2:3d:f1:73:ab:d3:ec:a5:f5:f6:0f:d5:4a:
         be:81:92:9b:38:96:49:da:ef:fe:5f:24:1e:2d:f5:3c:e1:2c:
         89:57:e3:af:34:23:91:f3:8d:4b:ca:9a:76:3f:47:1e:a1:f4:
         f8:99:ad:ec:75:30:4c:70:91:f3:a9:2b:a3:f9:8c:7b:d1:f7:
         00:06:ec:6c:be:36:c6:d2:61:ae:4b:79:e9:f6:5e:8d:51:51:
         eb:84:5c:ac:0e:f2:e5:3c:27:59:56:68:de:25:ae:8f:e8:dc:
         0c:3f:3b:d9:77:42:d2:95:e1:9a:fd:1e:71:be:53:7d:15:af:
         d5:b8:09:c9:58:05:37:b7:92:ba:cd:6b:b6:86:5f:ee:23:61:
         74:45:d4:00:7b:19:21:ab:93:2f:18:fe:04:01:78:d2:4a:72:
         d9:d6:1b:c7:4f:7f:26:1f:3d:7b:a6:f9:d2:1d:7b:83:e1:30:
         09:5b:4c:0c:54:7c:5e:d5:44:6f:e1:80:ce:7d:c1:30:4f:55:
         ab:2e:4f:77:76:b2:ea:e5:94:d2:eb:01:41:1c:54:9f:8e:4d:
         18:91:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:19:29 2025 by rpki-client