Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa
File:                     7bf082f3-7712-3b6f-9529-66baede8d766.roa (raw, json)
Hash identifier:          eOJTXnLkJzbZS2eZdKZT2CElrE06afwIAhA+Yss+qUc=
Subject key identifier:   7B:10:27:02:4F:62:C2:96:C3:AC:0E:2D:98:6A:34:92:5C:9C:95:1F
Certificate issuer:       /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial:       010D0C9F4328584A3FAAD648EBC5FDA2D5142500
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     61622
IP address blocks:        136.175.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d6:48:eb:c5:fd:a2:d5:14:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=162e0b4b-6196-4427-b015-02ea09854521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:b1:74:af:fb:82:1f:d5:8d:0d:8f:21:08:
                    3f:4c:7c:08:21:79:94:11:98:77:ba:9a:35:0e:d8:
                    70:62:2f:51:b9:c4:23:62:93:28:ce:d4:ca:29:e2:
                    63:e9:8e:00:87:6c:b9:a7:29:eb:9a:06:93:12:c0:
                    40:75:2a:f6:12:f2:df:27:48:1b:24:e9:d3:51:74:
                    d4:9c:c5:07:20:bc:5c:32:00:6c:23:56:8a:e7:41:
                    b8:f2:7c:2f:67:5b:bc:24:6a:77:8b:c0:51:d3:ec:
                    00:ea:71:a7:6c:35:20:81:02:5c:ed:87:11:82:06:
                    ac:53:2f:f6:66:0b:0f:27:fb:bf:71:31:71:0d:a2:
                    ee:04:a6:0b:0f:44:67:8b:52:79:ee:2b:81:b0:1b:
                    a5:5d:c8:41:fb:2b:a9:46:e5:e5:56:90:5b:50:84:
                    6a:d5:de:d1:3f:a9:b3:6a:a5:cb:b7:38:85:39:f2:
                    a6:21:31:dc:d4:ff:a4:0e:5d:4f:cc:78:7f:e8:0b:
                    49:4a:93:bd:6b:98:02:4b:b3:6b:0b:01:59:c4:57:
                    8b:bb:83:f8:72:9b:72:bd:bb:8c:fa:9e:31:39:52:
                    27:14:b1:41:3d:0a:52:d7:04:29:ee:6e:9d:e8:1b:
                    61:c7:e6:bf:5d:11:ce:ce:1c:73:8b:32:8a:65:e4:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:10:27:02:4F:62:C2:96:C3:AC:0E:2D:98:6A:34:92:5C:9C:95:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/7bf082f3-7712-3b6f-9529-66baede8d766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl

            X509v3 Authority Key Identifier:
                keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ba:d9:8b:5a:66:79:ab:e1:72:8f:62:ac:ac:68:4f:c0:9e:
         3e:9e:22:ae:c1:51:ae:d9:04:23:6f:b1:b9:c4:63:b5:62:1c:
         bc:27:ee:ff:ce:06:b8:c6:3f:44:35:76:a0:1a:df:2b:23:a6:
         9d:e4:dc:eb:80:67:13:04:0c:ff:a6:5d:8a:62:27:ae:b3:78:
         14:08:22:8c:d6:a6:42:91:3f:42:29:b8:03:04:7a:79:fc:01:
         f3:02:bc:ba:73:8e:06:c8:32:27:6f:d3:aa:33:e9:cd:1d:8e:
         14:ed:2d:ee:74:61:43:80:53:56:b0:94:d0:b5:c9:f7:30:c7:
         92:f9:92:51:a2:8b:2d:2f:dd:c6:fc:b4:84:b6:78:8d:aa:fd:
         dc:b3:0a:3b:c7:04:dc:38:16:56:7c:16:d4:32:98:10:4d:84:
         a7:f6:73:98:a7:62:4f:3b:cb:93:4d:d7:c7:68:78:42:ea:12:
         93:11:d1:8a:c4:fe:da:a1:e5:a9:70:43:84:9b:3f:98:a4:f3:
         c3:5b:e7:f9:8c:fd:10:82:66:42:05:e3:ec:86:ad:96:d4:97:
         92:6f:5b:7b:b8:7b:66:d6:71:8c:b5:52:ae:2d:b4:b8:62:18:
         e3:19:08:58:9f:c2:a6:1b:14:39:45:08:1e:4c:a4:b5:bd:08:
         30:1c:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:51:18 2025 by rpki-client