Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/11b0dc44-9156-35ad-84d0-fbcc7cbd2b5c.roa
File:                     11b0dc44-9156-35ad-84d0-fbcc7cbd2b5c.roa (raw, json)
Hash identifier:          EMnxBozCx2ZWQLuxptMvWEdkbd8cgqkQIWa6m8/TLCs=
Subject key identifier:   85:92:ED:4F:0B:09:F3:8A:3E:FF:63:BF:61:6B:58:42:FA:35:2D:4E
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584B5F374AC6C95A211DBEBCF400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/11b0dc44-9156-35ad-84d0-fbcc7cbd2b5c.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        136.22.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:4a:c6:c9:5a:21:1d:be:bc:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=f0d7e424-1655-4c49-afe5-1bc826c239fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:e1:a2:01:f8:cf:7f:24:10:8b:c7:54:53:
                    77:b1:f6:fe:66:2a:8a:69:05:2b:fc:d7:de:80:03:
                    c7:93:44:e1:d8:04:6e:5e:32:6a:2c:b4:4b:bd:e6:
                    c4:b2:5a:99:66:2b:f9:eb:e6:9f:0a:e8:13:06:8a:
                    a2:5b:ac:34:2c:01:34:a8:40:9a:a6:41:c5:25:4c:
                    07:1b:5b:7f:90:6b:b0:e7:bd:b5:53:bb:00:c8:5f:
                    09:f2:9f:4a:a0:8f:a7:57:1e:c4:db:4e:ea:fd:cb:
                    7b:68:a4:f6:53:37:9c:30:62:5c:62:01:9b:cd:15:
                    0d:0f:b9:52:ec:35:b8:c2:d7:bf:a7:66:5c:46:f3:
                    41:b4:c9:9a:70:8a:2e:fe:54:eb:c8:be:a1:4e:5a:
                    8e:18:a7:ac:0d:63:28:44:90:65:58:fb:48:19:e2:
                    6d:86:ed:2b:b4:59:20:a5:fd:0d:dc:59:f6:9a:3e:
                    3f:36:63:cb:ae:ba:57:d5:a4:24:c0:9d:c4:0f:48:
                    b5:23:07:d0:bc:cb:85:45:57:a1:bf:73:8d:ba:58:
                    f3:ea:d6:31:db:b8:15:4a:7a:9d:15:6d:66:4a:69:
                    23:64:97:a9:e0:5b:83:8c:ec:fe:8e:c3:7e:47:e3:
                    7d:33:05:0a:b9:ea:67:f9:9d:17:d2:cf:b2:ad:1a:
                    59:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:92:ED:4F:0B:09:F3:8A:3E:FF:63:BF:61:6B:58:42:FA:35:2D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/11b0dc44-9156-35ad-84d0-fbcc7cbd2b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:85:50:96:0e:83:75:5e:44:8c:e7:5f:22:e6:19:ef:f0:fc:
         8a:c3:ce:17:45:31:5f:8d:f7:d2:27:35:d4:e0:d6:2f:5b:ab:
         82:e1:d5:86:3a:93:4f:74:82:fb:c3:c1:64:d5:b2:50:7e:2c:
         5a:f5:cf:bd:03:da:4b:09:3c:22:0a:97:e0:c5:af:25:02:c8:
         12:a3:dc:55:75:e4:d1:b8:10:2e:29:b8:6e:60:d0:cc:fd:44:
         ae:c3:4f:7b:55:c6:fe:1e:99:84:df:08:86:c4:79:75:b2:ae:
         42:e9:76:3b:dd:7d:f0:70:33:40:cb:5e:f8:9d:ba:62:b8:bc:
         c7:02:9c:49:a1:91:ef:e1:0d:97:01:0c:1d:96:05:19:1f:a8:
         dd:21:37:d2:e7:67:fb:78:88:90:27:c5:c2:9b:43:75:6f:e5:
         e7:59:0d:9d:7b:69:e7:a6:e2:8b:95:03:ff:8f:b0:de:ed:06:
         8c:0d:f5:fa:a5:04:a6:1c:d9:4f:c2:b9:77:3c:64:ec:66:51:
         01:70:02:07:28:3a:3d:99:df:22:b2:39:3c:5c:7a:3a:81:e9:
         97:46:e3:99:08:72:dd:80:8d:8a:45:54:b8:76:d7:ad:8e:73:
         90:b9:d5:6b:99:2a:16:9d:7a:e6:6c:1a:d4:d1:82:5e:68:04:
         b0:5f:0a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:28 2025 by rpki-client