Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa
File:                     ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa (raw, json)
Hash identifier:          LGepn0E1s7BeshT+PBfHJzR7zicYCUesvCXixdB4Iqc=
Subject key identifier:   86:3F:97:29:FF:2A:03:C3:5A:15:16:2C:63:8A:4A:72:94:64:1C:51
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584B5F37473A367D9F5D5C4DD980
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        136.22.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:47:3a:36:7d:9f:5d:5c:4d:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=e0a806d8-c9c1-445b-8183-6787f6042fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:4e:ed:fd:92:27:bf:34:ad:bd:0a:90:9e:
                    6d:3f:b9:75:f2:6e:37:70:99:6b:a5:77:d1:ea:7c:
                    e1:b9:a3:a3:fb:5c:bb:a0:70:6c:70:64:15:75:c2:
                    e1:cb:5f:d4:04:d7:a5:20:d6:54:cd:0c:31:b3:16:
                    c1:96:45:e0:15:59:e6:2e:4d:76:98:7f:80:04:46:
                    c0:69:b0:51:68:25:df:fe:3f:24:36:b0:e2:fb:15:
                    d4:06:6e:1e:76:a4:74:00:5a:84:d4:eb:71:68:b5:
                    0a:dd:24:80:e0:0e:31:e9:99:23:90:84:52:2f:f4:
                    88:22:38:0f:72:1d:85:22:9b:b2:80:e8:53:c5:20:
                    a0:d0:0e:a6:d1:1b:0f:06:4b:97:62:29:46:d1:fc:
                    96:b5:0d:ff:10:88:a2:71:9c:c0:f9:62:65:d9:f0:
                    26:75:56:f6:10:ac:10:63:c0:e0:d8:a7:20:78:25:
                    87:19:27:eb:ea:18:4f:e7:6a:4d:1d:15:69:f8:e8:
                    81:c7:1f:a8:08:19:ea:fe:06:26:ee:8f:5a:97:c7:
                    50:91:bb:62:9e:88:45:65:6e:d9:77:09:b7:ab:c6:
                    9d:b6:ba:8b:c0:59:45:a5:aa:ef:3f:59:04:db:61:
                    21:6c:60:fa:2d:11:60:c8:7e:3e:45:85:24:e6:b7:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3F:97:29:FF:2A:03:C3:5A:15:16:2C:63:8A:4A:72:94:64:1C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:2e:66:63:55:b6:f6:86:39:72:c4:2e:4f:56:d7:fe:d4:
         3d:41:c7:4b:14:69:d9:2c:21:9c:06:ad:54:5e:75:b3:6b:c1:
         bf:00:56:6b:05:f9:66:4b:66:9a:2f:d7:11:5f:da:d0:ac:28:
         5b:c7:b6:df:1e:08:87:f5:3d:56:a3:4a:af:db:85:db:a6:5c:
         13:16:4d:d2:25:c4:ba:b6:f4:68:34:8a:06:5c:28:a2:3e:43:
         ba:9a:f0:35:dc:72:66:30:6a:a8:be:bc:9e:28:5c:24:a4:93:
         67:00:8a:18:4f:01:4a:87:28:22:ea:06:1d:76:34:40:36:d9:
         e2:e1:82:6f:71:d1:dc:be:11:43:67:37:1c:4d:e0:8f:e6:d2:
         55:62:d6:bb:27:66:a4:33:ac:38:5c:44:46:1c:84:38:87:38:
         61:6e:73:3a:cf:f4:6e:2e:46:f4:c6:d7:56:d9:5a:dc:9c:23:
         7a:6a:c9:21:f5:4e:d5:8f:1e:2a:a2:11:1c:86:05:2d:a5:53:
         f7:61:9f:fb:b8:ec:ca:75:6c:d9:39:a9:77:a5:36:a1:c6:5f:
         3d:ef:07:7e:77:62:ef:d5:a4:87:7b:76:8d:d5:93:01:a7:f0:
         c6:81:a7:8b:d3:78:f3:09:d4:91:7c:75:40:d9:84:41:a7:f5:
         31:21:3c:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0c6Nn2fXVxN2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZTBhODA2ZDgtYzljMS00NDViLTgxODMtNjc4N2Y2MDQyZmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ctO7f2SJ780rb0KkJ5tP7l18m43cJlrpXfR
6nzhuaOj+1y7oHBscGQVdcLhy1/UBNelINZUzQwxsxbBlkXgFVnmLk12mH+ABEbA
abBRaCXf/j8kNrDi+xXUBm4edqR0AFqE1OtxaLUK3SSA4A4x6ZkjkIRSL/SIIjgP
ch2FIpuygOhTxSCg0A6m0RsPBkuXYilG0fyWtQ3/EIiicZzA+WJl2fAmdVb2EKwQ
Y8Dg2KcgeCWHGSfr6hhP52pNHRVp+OiBxx+oCBnq/gYm7o9al8dQkbtinohFZW7Z
dwm3q8adtrqLwFlFparvP1kE22EhbGD6LRFgyH4+RYUk5reIEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIY/lyn/KgPDWhUWLGOKSnKUZBxRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWUxODFlMmQtOGU0Mi0z
OTFlLTljMzQtYmQ3OTgxOGZkOGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBafMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+YLmZjVbb2hjlyxC5PVtf+1D1Bx0sUadksIZwGrVRedbNrwb8AVmsF
+WZLZpov1xFf2tCsKFvHtt8eCIf1PVajSq/bhdumXBMWTdIlxLq29Gg0igZcKKI+
Q7qa8DXccmYwaqi+vJ4oXCSkk2cAihhPAUqHKCLqBh12NEA22eLhgm9x0dy+EUNn
NxxN4I/m0lVi1rsnZqQzrDhcREYchDiHOGFuczrP9G4uRvTG11bZWtycI3pqySH1
TtWPHiqiERyGBS2lU/dhn/u47Mp1bNk5qXelNqHGXz3vB353Yu/VpId7do3VkwGn
8MaBp4vTePMJ1JF8dUDZhEGn9TEhPOc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:05 2025 by rpki-client