Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa
File:                     d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa (raw, json)
Hash identifier:          r/N/7OnHG9KstoH/pNdwYgwGDzP/jvSH3i7GMlLkuZY=
Subject key identifier:   97:6E:F7:DB:8E:C7:8E:22:01:6D:18:FB:74:BA:4D:E2:8B:3E:2A:3C
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584B5F373FB8770D3D3881B0CCE0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        136.22.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:3f:b8:77:0d:3d:38:81:b0:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=09f6793c-4dad-49de-8437-29515e0e8f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:87:9f:6c:1e:df:30:f7:e9:45:44:b4:0b:
                    7c:1f:a3:1d:27:5e:bf:46:cb:5c:45:a5:ab:80:e8:
                    4b:fd:69:40:1c:fc:50:fa:26:1e:49:a1:80:42:db:
                    24:cd:43:d0:ad:37:a9:bf:8f:10:65:a8:ca:0a:b9:
                    5a:de:bd:a2:bf:04:4c:da:eb:b0:3b:f5:4d:4b:80:
                    5d:44:0f:7a:86:0c:24:b7:c9:22:05:f3:14:34:35:
                    70:85:df:7c:ca:ca:ef:6c:3c:6e:9b:70:6c:63:ef:
                    b7:1c:64:99:9a:9b:22:50:af:32:8c:fb:6d:3f:66:
                    74:d1:d4:79:55:fd:73:25:f2:8a:37:3f:3a:b0:7c:
                    f1:aa:12:47:fd:cc:9e:86:e5:d0:df:11:0f:1b:9c:
                    07:80:1b:b3:31:71:f8:7e:e3:39:02:03:80:a6:96:
                    ba:60:61:ec:dc:8d:0c:39:6d:a7:da:ac:cb:33:c8:
                    9b:d8:1c:39:e9:de:a4:bd:f9:51:88:c3:17:98:28:
                    77:c0:9d:42:74:83:a5:b2:1b:0c:e4:e0:64:d2:00:
                    62:b9:98:f9:c5:48:6a:3b:3e:ec:a8:20:a9:b1:06:
                    89:47:4e:d6:a2:da:db:c5:83:ca:39:d6:7f:26:c6:
                    ac:e8:95:6f:64:5a:50:fb:c5:e0:85:82:f7:11:8c:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:F7:DB:8E:C7:8E:22:01:6D:18:FB:74:BA:4D:E2:8B:3E:2A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:da:a8:b3:cb:33:5b:a4:cf:78:be:9a:b2:7d:7f:e9:33:52:
         f0:7c:4e:c5:32:b7:8c:5b:01:3b:d0:5d:ad:47:cd:a6:7f:e3:
         b9:ab:5c:9e:54:cb:f1:ef:68:87:a0:2f:7f:6e:4c:fd:a3:66:
         1e:67:ca:34:c3:4a:95:f9:11:4a:08:16:81:f4:32:0d:62:27:
         fa:80:5a:4f:2f:2c:e7:bf:a8:99:8f:7c:1d:59:37:45:49:4f:
         28:34:8a:6c:b7:7c:1d:5d:7e:00:60:74:8f:47:b8:ed:c1:03:
         90:ea:74:85:e5:d6:9c:cb:af:63:6c:00:f0:e7:e4:d2:fa:17:
         1c:21:12:e0:a9:18:bc:21:9f:97:02:ec:11:68:de:fc:75:7d:
         82:fa:a6:7e:36:74:86:48:d7:2c:76:f6:a3:a5:7c:66:1d:c8:
         aa:90:1c:20:81:0a:d0:82:ba:db:15:43:61:24:38:0c:1f:29:
         e0:76:19:13:89:2a:a9:39:95:b2:b5:e6:f5:cd:f3:17:05:55:
         86:10:bf:0c:60:71:6b:9a:53:41:31:48:8b:40:6f:d6:23:fb:
         61:2b:3c:c6:98:5b:b2:ac:39:04:44:f1:12:bf:be:76:c4:f4:
         6e:df:e1:a6:a9:bd:a6:eb:30:d6:85:7b:aa:89:dc:79:dc:cb:
         7c:30:cb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:53 2025 by rpki-client