Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa
File:                     f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa (raw, json)
Hash identifier:          1XZ7EB5ERQeUgTRR6fmPW3auUlpHp0miY1GhlekTDC0=
Subject key identifier:   86:11:0D:A3:6B:EE:D2:FC:85:0F:88:91:49:C9:74:D9:CB:7E:7D:A3
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584B5F3760BB4EDD0F21FFA51E80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36040
IP address blocks:        136.22.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:60:bb:4e:dd:0f:21:ff:a5:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=2d82d3b5-95c9-4354-952b-6cfee9e41ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:70:2d:8f:82:5e:2e:81:05:8f:8c:72:0d:
                    b3:76:9b:ab:fb:7c:47:a8:fb:08:23:e3:5c:e0:e3:
                    bc:61:ef:fb:46:9b:e6:98:72:8b:9d:b6:ce:70:c5:
                    fa:4d:d3:2e:29:7e:b3:ce:09:bd:2c:9b:3e:72:b8:
                    c6:e7:ef:fd:60:6e:7b:96:71:95:f6:f5:ac:68:2e:
                    35:6a:12:77:f4:a3:ec:88:07:53:c6:63:50:44:b8:
                    00:a9:f2:86:4e:1c:9e:5e:5e:34:f6:70:ec:d6:02:
                    36:26:f0:88:c9:57:ea:ca:2a:00:1c:89:02:8b:d2:
                    e1:c7:90:c9:05:be:48:a3:bf:33:f1:16:ff:4a:fd:
                    20:6f:be:22:f4:8b:33:2c:d4:b5:5c:a0:29:f7:ac:
                    2b:e3:04:d6:99:2f:cf:c7:0d:22:d5:0c:56:dd:47:
                    53:94:ea:2d:5c:e0:41:35:2e:5e:c9:5e:1e:fd:c2:
                    01:b3:8c:15:5c:1e:fd:d1:2a:bc:4e:ff:36:ed:42:
                    75:4d:64:72:27:21:7d:2c:36:d3:46:44:16:89:f2:
                    cb:b7:f1:76:f7:a4:f0:2f:89:7d:d6:dd:a8:a9:9d:
                    be:2c:02:4b:53:d5:e3:9b:9a:79:16:2d:ad:bf:da:
                    17:ff:a5:19:fe:2f:3f:e4:e1:a4:bc:fa:a4:eb:15:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:0D:A3:6B:EE:D2:FC:85:0F:88:91:49:C9:74:D9:CB:7E:7D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0f:5b:f2:c4:cb:c9:67:2a:40:c3:6a:1a:d8:44:e0:49:23:
         e3:df:2b:39:92:15:ca:dd:90:a1:26:4c:43:14:a5:37:21:9d:
         09:79:8c:f0:88:da:80:65:e2:16:a3:69:ba:2e:d4:0f:35:ba:
         b8:6e:83:fa:f7:50:18:d8:41:a8:b3:cb:e3:29:f9:1c:7b:0e:
         23:64:73:e9:b5:b3:41:4e:95:39:8f:ce:41:d6:8a:b8:7d:de:
         e3:ec:8b:50:e8:7b:19:16:d5:6e:4d:ef:cd:9f:87:f0:92:9c:
         a8:19:1e:cb:d4:26:1f:52:62:03:1d:c7:9b:d7:73:fd:a0:7d:
         20:ab:03:29:73:2e:20:b2:be:3c:29:f8:d0:c9:94:6a:d3:47:
         28:c6:40:f0:86:2b:f6:9a:95:c2:4a:d6:7f:55:54:ee:7a:65:
         21:04:16:01:22:f4:44:b4:07:f9:92:e9:ef:a8:65:f8:ab:de:
         4a:20:88:39:9b:ac:2f:ce:9e:ad:40:45:68:a3:57:5a:fd:a0:
         4c:b6:d7:c6:01:e0:5c:30:28:01:ae:e8:60:a1:1e:3b:4f:77:
         27:a9:84:de:35:1c:50:1d:e7:71:be:9a:56:6d:2d:72:7d:80:
         35:ed:26:a0:70:eb:47:e1:a6:f3:52:af:23:dc:66:8e:07:b3:
         b3:47:4e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:35:55 2025 by rpki-client