Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa
File:                     67809917-6020-3043-ad7f-2c9b27b1d820.roa (raw, json)
Hash identifier:          hVN0FpZIh82wGDOThdwQxuQP1rpP0rGKDLLO/xtLYJ0=
Subject key identifier:   B6:44:2C:ED:E5:63:97:31:FA:E2:02:9A:61:E3:EA:A2:4F:9F:BE:B8
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584B5F376F9627A1CF3911504000
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        136.22.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:6f:96:27:a1:cf:39:11:50:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=ef7e6f96-1805-4b91-8303-8370e059abe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:94:30:88:03:59:1e:4c:59:25:7d:51:cd:
                    98:63:aa:fd:a3:44:99:5f:b3:d1:7c:89:77:e7:41:
                    2a:6b:20:2e:4f:6d:a9:eb:27:cc:5b:17:8c:f4:16:
                    1e:95:8f:38:6b:a0:79:db:c3:76:b5:f4:30:ce:73:
                    8d:37:ad:79:03:9b:ef:8f:06:8a:d5:19:4a:56:b3:
                    f4:32:31:b9:a2:d3:3f:f5:32:d7:04:1f:cb:f6:43:
                    16:66:82:7e:4f:41:5d:94:e1:af:b6:bf:1f:4d:70:
                    34:25:e2:01:a2:dc:6b:b6:6e:0e:79:4e:26:a2:e3:
                    d9:1d:fe:11:d1:81:cb:e6:c7:fa:d5:f6:4e:04:ce:
                    1c:0b:dc:11:88:a0:a6:5a:17:ab:cb:54:21:06:ea:
                    35:16:2c:55:1a:7b:ad:9c:b0:2d:34:6f:18:9e:16:
                    9e:da:66:dc:38:f7:cf:f5:e6:bc:f3:81:b1:99:95:
                    49:10:09:96:e0:fc:f1:db:49:39:36:2a:62:2a:0d:
                    cc:e8:ca:04:04:62:94:62:b3:57:8a:dc:6f:12:e2:
                    86:1f:7d:06:0c:58:67:b3:4d:1a:53:8c:be:74:d8:
                    ce:44:17:8c:55:5d:cb:05:28:8e:83:29:b3:58:64:
                    94:12:d7:5f:d9:eb:a2:75:1a:63:6b:37:79:b9:77:
                    87:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:44:2C:ED:E5:63:97:31:FA:E2:02:9A:61:E3:EA:A2:4F:9F:BE:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:44:94:17:ed:8f:c1:6d:2d:b8:e6:fe:4b:e7:10:12:b1:f7:
         7d:36:07:da:ee:5c:fc:2d:47:2f:64:b7:08:73:4e:33:4c:e7:
         d9:c3:22:04:7f:03:9c:cf:d2:06:3d:c9:1a:e2:82:ad:76:dd:
         99:70:24:fe:15:68:55:cd:1c:e0:39:52:37:73:b6:3e:01:bc:
         15:f2:b6:4d:b0:70:d2:7b:f8:fc:5f:5b:bf:0b:01:46:39:2f:
         4b:f6:bc:db:00:83:f9:d9:91:30:8a:cc:88:69:1c:bf:f2:87:
         e7:7f:88:44:a6:50:ea:e3:73:90:9c:c2:51:68:ce:ef:f7:1a:
         a6:ad:ba:f1:f8:08:c9:c6:75:ce:9b:c8:e6:16:d2:82:86:28:
         61:76:9a:c3:2d:85:fb:dc:a1:8d:f7:76:63:d9:b9:f3:24:fd:
         7b:1b:98:2c:11:00:dd:ea:44:b0:91:91:82:b0:53:3e:8f:10:
         48:60:9e:a1:dd:80:80:3b:65:8a:3c:8c:76:bd:81:c3:c2:8a:
         57:d4:49:e3:7d:f6:8b:77:33:2a:51:b1:f1:56:a9:a8:0d:32:
         89:31:87:f2:b3:53:85:97:a9:20:92:7b:45:9c:2e:94:41:3e:
         01:94:f5:19:19:48:e3:cd:66:1c:c7:39:8e:76:4f:88:6d:0f:
         71:ec:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:56 2025 by rpki-client