Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa
File:                     65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa (raw, json)
Hash identifier:          AJDkOHX9r+EA5TyhYxFb22dMFB6gEArLSsX11dja3GQ=
Subject key identifier:   EC:F3:FD:41:20:67:2E:61:6E:89:6E:93:C4:B7:2A:60:6E:DE:F2:BC
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F432858498FC9BEDCA29EBDD3066F0CC0
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     396422
IP address blocks:        136.175.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:be:dc:a2:9e:bd:d3:06:6f:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=9014ab7c-8dc4-4fc1-9286-f93bd9e0d526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:ee:b9:82:89:f9:5b:ff:ae:6c:33:a0:37:
                    03:32:d2:a5:b5:32:95:3e:62:bc:b6:12:fb:d6:78:
                    19:b0:e0:a1:13:c5:80:e6:8c:40:cc:d1:27:a2:87:
                    3c:ee:13:a1:09:fc:52:01:84:96:16:7f:71:b4:66:
                    61:46:3b:1d:39:4e:53:6d:d8:81:07:15:0c:19:2a:
                    3f:5f:6c:39:7e:b6:e3:98:57:da:8a:e4:6e:7d:d7:
                    9a:6e:7a:c8:c1:6e:d9:2e:c8:34:dd:18:3e:ff:3e:
                    3c:0d:31:8a:c3:58:ed:ef:55:e7:b4:07:d8:f9:03:
                    92:8d:bb:54:0f:e4:30:43:84:1d:d8:cb:f0:e2:02:
                    44:d9:a1:be:05:0a:06:43:ac:6c:c7:80:5e:27:4a:
                    f7:32:81:77:c4:e8:d3:37:90:84:d5:79:3b:10:dd:
                    1a:80:31:f3:6b:9e:44:99:b5:60:f4:d2:a5:17:bb:
                    dc:85:1e:56:91:80:53:be:ed:08:e2:e6:fb:4c:6b:
                    f6:59:ae:55:a7:eb:1b:3b:e6:60:8e:26:50:53:86:
                    8a:36:9c:ae:56:71:a8:16:99:c3:e3:f2:10:63:bb:
                    1b:8f:f8:84:6d:b9:96:9f:08:0f:11:6d:bf:61:18:
                    1e:f2:5f:aa:62:da:64:94:fd:6f:ab:dd:3b:e5:48:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F3:FD:41:20:67:2E:61:6E:89:6E:93:C4:B7:2A:60:6E:DE:F2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/65d4040c-43ba-316d-a86b-86f2a6bcd48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:86:a6:03:6f:40:2a:71:1d:01:fc:c9:45:98:f5:40:45:39:
         94:a0:6c:58:7f:7e:ce:1c:89:cb:d0:b7:64:01:77:b7:71:9e:
         c2:33:14:78:31:0c:85:7f:03:4e:7b:bb:a0:94:8b:fb:c4:d9:
         09:99:30:dd:81:5c:f5:7d:2e:ed:3a:e7:a6:db:2c:a1:25:99:
         8a:8e:ea:cc:66:13:18:20:b8:a3:b7:85:18:d0:56:0f:7d:5e:
         74:e6:a7:62:00:7c:09:bc:c0:d5:77:f9:e7:56:72:51:09:9c:
         83:ec:82:42:53:6b:19:0a:ef:56:fd:32:da:e9:ef:90:90:c4:
         d2:ab:d2:ec:b1:0f:77:a7:ec:8c:49:b2:3b:57:b2:5d:31:a0:
         31:99:35:56:ab:f1:17:c4:5b:17:0f:05:0b:7c:f2:32:8a:91:
         3a:3b:83:39:f0:cb:af:15:92:f8:69:e1:a7:97:ec:0c:43:2b:
         36:a1:26:ac:50:44:ca:4b:6d:ca:42:a7:0f:5c:ff:5a:8c:3c:
         5f:f1:e3:e0:3d:ee:f1:fc:5a:0b:19:ce:e2:d8:12:e4:6e:f1:
         b2:14:a2:75:64:63:1c:4c:2f:af:65:27:8f:98:b7:1a:b5:e6:
         fa:68:9d:67:5e:98:61:4e:42:63:dc:69:3e:00:b1:d5:5c:3c:
         05:4c:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:09:59 2025 by rpki-client