Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/c0e1e872-ceda-37aa-9201-9fb282e9ae01.roa
File:                     c0e1e872-ceda-37aa-9201-9fb282e9ae01.roa (raw, json)
Hash identifier:          SJZVew+zF1CHZDCRUyq+M8Tf+koxoY3soCQVqofwDQo=
Subject key identifier:   54:91:13:B1:42:0D:FF:B9:DF:90:8D:76:7E:6F:E5:71:82:67:F6:28
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584A374ADFFA7B2C8745E4907238
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/c0e1e872-ceda-37aa-9201-9fb282e9ae01.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     14618
IP address blocks:        136.245.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:df:fa:7b:2c:87:45:e4:90:72:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=24e1b6ac-4eab-4637-a4aa-5b9180407fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:df:4c:5b:6b:35:ed:3f:db:2e:0c:19:25:
                    43:d4:79:ed:48:a6:26:b9:72:d0:8e:3e:79:24:f3:
                    ea:ad:40:bb:a3:e7:b9:93:93:65:b3:f4:3e:8c:84:
                    35:96:ff:d5:b1:ea:28:e8:b8:55:e9:a5:45:48:93:
                    2f:69:b0:74:1a:b7:34:58:11:ed:ea:8b:7b:4b:6d:
                    cc:db:f4:45:e1:28:07:e9:29:45:72:58:c8:06:ef:
                    84:32:f9:52:96:3f:22:01:a2:19:50:a4:ea:18:0d:
                    7f:5f:d4:ed:fb:83:f5:4b:a7:da:42:b5:58:3e:62:
                    09:d8:2c:97:f3:c0:05:f8:a0:99:87:78:01:8b:c3:
                    6f:5f:29:de:64:db:32:ac:8b:fc:9e:5b:cb:74:df:
                    22:b1:5c:3a:38:9f:a3:0b:ef:89:47:87:17:70:a6:
                    d7:65:0b:c8:eb:85:a6:0a:85:ea:f1:48:5d:60:9d:
                    02:a2:1c:8b:44:45:b2:f6:ef:cd:ae:49:ea:ba:96:
                    1c:cb:5a:7c:47:cd:30:4f:e9:5a:15:d3:c1:61:59:
                    5a:ce:1e:1c:db:18:05:20:d5:de:3d:13:25:5e:e8:
                    59:43:91:89:91:e1:ec:1c:f7:5e:05:2e:a8:78:7d:
                    aa:b0:80:a1:af:05:91:53:92:32:c4:9a:66:ff:de:
                    a2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:91:13:B1:42:0D:FF:B9:DF:90:8D:76:7E:6F:E5:71:82:67:F6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/c0e1e872-ceda-37aa-9201-9fb282e9ae01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:31:66:0e:16:fb:77:be:be:06:1a:43:09:4a:3b:49:bd:d5:
         1e:f4:6d:56:ef:3e:a5:7e:02:7e:20:77:8d:30:8e:0f:91:42:
         7d:37:3b:a2:96:4f:ae:00:38:75:20:4f:bf:32:9f:85:39:da:
         30:97:d5:30:aa:7d:33:a2:9f:af:b1:53:94:e6:19:88:f8:42:
         35:bb:99:77:5f:39:c5:a8:31:06:ab:0f:3d:52:3f:bf:e4:89:
         1d:20:5d:0f:a1:75:61:44:ca:77:a1:f8:ae:f7:d2:71:26:5c:
         8f:d2:67:db:e2:69:9f:a5:23:e5:e6:66:6c:14:67:d4:bc:16:
         b0:18:6b:11:89:01:59:9a:ef:ce:f8:29:58:a6:39:07:41:e5:
         6d:d8:f7:aa:ad:8f:d9:55:5b:ca:97:66:6d:23:26:48:fc:67:
         56:35:7a:5e:6e:21:9b:3a:bc:1e:3f:dd:87:94:80:bc:9b:99:
         c6:bb:73:70:24:4d:45:cf:90:aa:b1:7c:eb:33:06:f3:74:4f:
         6e:70:1e:48:7b:b7:9b:6a:ab:62:89:79:21:e1:f3:4e:21:78:
         96:bb:2c:c8:df:65:18:e8:ab:7d:ad:40:c6:5c:58:41:22:cb:
         49:4c:29:62:2e:3f:7e:0f:e1:ca:85:37:a3:76:79:64:94:1c:
         e6:3b:65:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:07:43 2025 by rpki-client