Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa
File:                     87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa (raw, json)
Hash identifier:          TK09i/Itan1nXQDNzZHfBL2baVFpSoZYHIxjpA9kNfo=
Subject key identifier:   A3:06:E4:06:FA:34:73:A7:AF:CF:8A:04:DC:92:45:64:A3:91:07:8A
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584B5F3747F912FF9B4595F76500
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        136.22.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:47:f9:12:ff:9b:45:95:f7:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=e845f370-0d1c-47fb-a9af-a97186c06960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:05:df:37:d5:44:16:bc:2b:dd:47:86:f2:
                    ee:82:3c:8d:2d:7c:54:16:f4:48:40:30:93:c7:06:
                    88:bc:80:f6:18:50:8d:e5:62:68:3e:48:54:6a:ea:
                    33:61:62:90:8f:62:27:d7:fc:07:3f:2e:42:2d:04:
                    f8:dd:bf:62:8d:1b:a6:58:4e:44:d5:21:89:f0:fe:
                    11:9e:26:38:4c:b5:91:31:9a:4a:97:74:34:13:7c:
                    0f:95:96:cf:b9:54:ab:d6:33:89:d9:9d:47:b9:78:
                    de:63:a1:bc:61:6b:db:89:74:76:67:8c:92:d5:6b:
                    53:0b:49:2d:be:94:77:85:ba:66:62:b8:df:89:4c:
                    51:32:ea:75:2d:e3:29:e1:4f:ec:02:76:e3:4b:4f:
                    e6:c1:d8:dc:64:f5:b5:2c:b1:70:17:d7:f7:9a:55:
                    d2:c8:e3:59:98:30:2a:00:3f:ce:35:52:2f:14:c1:
                    3c:d1:49:6f:b0:30:ba:73:26:68:c8:02:62:c6:98:
                    f7:02:40:9f:b7:f2:b9:97:99:7b:71:4b:b7:0e:f3:
                    44:68:48:23:26:10:cc:2f:37:f9:e2:f4:f6:e0:6d:
                    c6:64:00:97:bc:b7:cb:d1:f0:88:36:87:84:41:8f:
                    0a:b2:ba:d2:64:32:50:d7:f7:56:30:7a:ad:59:ee:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:E4:06:FA:34:73:A7:AF:CF:8A:04:DC:92:45:64:A3:91:07:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:03:00:7a:0c:4a:36:a0:ac:21:ee:d9:3d:fa:8d:8d:f1:b1:
         12:19:6d:c8:05:c8:1b:47:68:5f:89:26:29:93:33:46:4e:3e:
         c7:21:1e:23:97:ee:5c:bd:15:51:fa:1b:fd:a6:a3:71:86:7c:
         a0:40:7d:fd:9d:c6:c4:4c:12:a9:75:5f:8c:77:2f:c5:69:8d:
         0c:f4:ea:09:90:63:75:6a:a3:67:83:b0:46:97:b5:3b:aa:e9:
         87:e0:92:4e:e7:b4:86:5d:2a:28:c8:01:a9:d8:a6:d7:50:5c:
         b5:8c:3a:4f:58:d5:0e:ea:6d:02:7c:09:b0:28:3c:27:68:0c:
         aa:d4:e6:1d:5e:67:f6:fb:e0:ba:3c:a1:cb:c2:bc:c0:87:69:
         03:36:9b:e0:91:a2:45:35:e8:24:46:1e:e6:c6:00:59:ea:6a:
         e8:f7:d9:0a:fe:1c:39:f6:6a:56:12:3e:0e:28:0d:b1:4f:23:
         08:b6:50:01:14:d8:8e:20:95:e1:aa:1e:dd:d6:4b:da:7b:80:
         53:04:be:50:09:6a:50:fa:fc:5b:2b:99:4c:a2:1c:78:2f:29:
         f2:f6:1c:3a:6b:06:2e:90:ba:94:38:36:b0:97:c4:90:6a:22:
         4f:90:b1:c6:2a:16:6b:51:ab:b9:0a:4a:ac:58:f2:94:ea:9d:
         ea:79:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:09 2025 by rpki-client