Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa
File:                     7bf082f3-7712-3b6f-9529-66baede8d766.roa (raw, json)
Hash identifier:          6wUMKY8rWZ8gW3DRUA+ro6hhWgC/c40SPKcZm4fBW3k=
Subject key identifier:   4B:9F:92:55:12:25:42:20:2B:4E:64:2F:5F:F7:31:FE:4A:EB:C9:14
Certificate issuer:       /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial:       010D0C9F4328584B2066D244DECA948E6E115900
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     61622
IP address blocks:        136.175.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d2:44:de:ca:94:8e:6e:11:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=def88834-cb42-479b-8110-5b05bcd0b840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:f4:c0:de:d1:c7:ba:36:28:ac:f6:2d:42:
                    19:a3:88:1a:e7:cc:f0:78:cc:11:0f:21:c4:14:d3:
                    89:a2:bb:90:e4:30:2b:0c:5b:27:12:ce:e0:72:6e:
                    85:f7:fe:bc:bf:3f:81:6e:31:99:e4:a8:5f:9a:37:
                    55:f0:f9:60:40:36:80:0e:3b:64:17:9c:81:bb:5f:
                    50:65:ef:b5:be:d8:fb:a6:12:ef:4a:93:39:46:b1:
                    e9:96:74:10:bc:10:b9:2e:cc:b3:be:0d:27:a4:12:
                    90:2a:d5:45:e9:78:5b:2c:c7:d4:87:8c:1a:58:dc:
                    fa:c4:f8:f3:47:83:22:fc:2a:c6:fe:cc:d9:9b:e1:
                    6f:71:f4:88:c4:43:52:a2:be:e4:ec:86:78:84:d2:
                    2d:74:e2:2a:92:87:a2:17:e7:03:f9:b1:20:90:2f:
                    0a:79:40:1b:c4:9b:e4:e2:23:d5:9b:c4:0a:b1:bc:
                    28:d5:c5:e5:28:71:60:9e:d0:78:0d:86:29:2b:3a:
                    1a:14:9b:dc:94:69:e7:83:7a:7f:e0:1b:8d:f5:10:
                    84:ee:bb:00:27:43:14:83:3e:63:17:d8:46:55:49:
                    ca:0c:1d:2b:6d:57:59:4a:78:58:41:ff:2a:33:c4:
                    5a:53:80:b4:27:b5:cf:8d:dd:b9:57:69:b2:fd:04:
                    55:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9F:92:55:12:25:42:20:2B:4E:64:2F:5F:F7:31:FE:4A:EB:C9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl

            X509v3 Authority Key Identifier:
                keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5e:2a:d3:de:5f:31:04:f6:ae:04:9e:7a:6a:c2:32:53:df:
         fa:0d:cb:53:ce:7e:7a:ce:fc:1e:56:d0:5a:a5:77:5a:ce:f7:
         02:29:9b:92:91:f8:1c:e9:d8:fd:66:53:b1:4b:6b:c0:cc:29:
         12:5e:cc:92:c0:3f:9d:29:93:bc:57:71:fe:b9:39:be:22:dd:
         8d:f3:fb:7e:8e:f0:5f:4f:00:79:15:b1:60:d1:0e:24:fb:a4:
         72:a4:b2:75:ea:ef:a2:32:6d:9c:82:3d:66:51:db:90:58:44:
         87:61:62:41:6a:7d:37:dd:44:ab:67:d1:9c:b6:a6:c4:1d:7d:
         a6:f1:93:4d:95:d2:fa:ba:62:c9:c5:2c:6b:db:80:3b:35:02:
         1a:e1:3d:fc:2c:2f:83:2b:30:62:ae:1f:63:6f:67:17:93:89:
         fe:e8:45:a4:9e:d9:bb:5a:9e:c5:a3:15:93:c5:f9:1f:a8:25:
         a3:ea:a8:05:8d:f6:1d:52:53:17:30:06:2c:e3:63:76:18:10:
         1b:88:a8:9c:bb:36:8c:98:d9:8a:0e:06:fd:2e:6a:94:86:4c:
         36:10:7f:bd:56:50:fb:45:f5:f8:8f:7f:89:c3:f3:07:82:8d:
         13:a7:d6:72:2b:e7:aa:62:41:8d:c6:f9:f6:40:ee:cb:7e:4a:
         ed:0c:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:59:43 2025 by rpki-client