Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/c2134a3a-d74f-3352-bad1-c42aeb36ab3b.roa
File:                     c2134a3a-d74f-3352-bad1-c42aeb36ab3b.roa (raw, json)
Hash identifier:          SHlPPgM2nkbRLw9XY2Zc4ZPk9bd8W4EbkCN6fpio/6k=
Subject key identifier:   57:74:3F:BD:03:85:4C:F2:36:CF:4F:81:45:49:F4:51:55:DA:BC:CB
Certificate issuer:       /CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
Certificate serial:       010D0C9F4328584AD3A0F5840C4006D8C4714C40
Authority key identifier: A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/c2134a3a-d74f-3352-bad1-c42aeb36ab3b.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     33132
IP address blocks:        136.175.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f5:84:0c:40:06:d8:c4:71:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eaf041-c9f9-4d67-80c2-43bd51af6b84
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=c305a680-237b-48bc-a17a-6155c1f073ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1b:3b:3f:b6:1f:01:3a:aa:5b:13:fc:da:2d:
                    0f:f8:94:7c:d5:b4:84:8f:54:c8:e3:9b:08:6d:ef:
                    d5:a2:32:0d:02:3e:a6:0c:12:50:a6:cc:c1:9d:51:
                    f7:4e:87:05:67:73:d3:42:49:e9:da:99:a3:28:fd:
                    69:40:93:72:d1:a3:60:1d:30:6b:ba:ab:1e:72:48:
                    7f:04:9d:84:67:db:cc:93:66:03:2d:2f:52:e3:e9:
                    86:ae:1a:a3:ed:d8:e5:4b:3a:5f:78:c4:68:0f:ef:
                    7a:23:97:08:9e:66:ee:f3:dc:a6:33:21:91:3c:53:
                    0c:c2:3a:f1:4e:e7:e0:ab:bb:90:1c:a4:e0:23:22:
                    57:5e:27:de:6c:08:cb:1d:ed:4b:5b:aa:c9:cb:1f:
                    fe:c6:f7:73:66:52:52:91:84:10:40:db:eb:b1:33:
                    bc:42:bc:1c:16:5d:2c:53:02:f2:37:da:2f:89:a2:
                    4e:0a:4e:85:ec:61:28:b1:69:4d:85:8d:48:04:63:
                    f8:3d:59:62:af:0a:d1:ae:f9:c6:d5:dc:52:35:ba:
                    7e:1b:c3:7f:71:3b:7e:37:ef:40:7d:98:db:4f:ef:
                    53:5c:7a:e7:24:41:32:6d:c9:21:75:57:6e:db:d6:
                    cf:5f:ca:25:12:05:c6:d2:aa:0c:f5:23:4b:b8:42:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:3F:BD:03:85:4C:F2:36:CF:4F:81:45:49:F4:51:55:DA:BC:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/c2134a3a-d74f-3352-bad1-c42aeb36ab3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84/81eaf041-c9f9-4d67-80c2-43bd51af6b84.crl

            X509v3 Authority Key Identifier:
                keyid:A1:DC:29:E3:30:C2:2F:7E:A7:D8:A0:65:C4:48:4F:59:C5:57:06:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/81eaf041-c9f9-4d67-80c2-43bd51af6b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:68:2d:d0:af:8c:2c:46:c3:d5:22:ab:74:67:4a:62:85:
         ed:5a:73:34:72:07:ac:34:33:cd:93:57:0e:73:45:53:09:7c:
         e8:e5:48:19:29:76:20:ea:ee:cc:91:5a:df:1e:ce:ac:c5:13:
         16:59:a1:08:f4:ee:bf:ca:54:d2:89:43:2b:57:43:85:0d:7b:
         8d:ac:a3:52:ad:7a:61:e5:b4:c9:76:3b:aa:51:4b:ae:d8:2a:
         d3:d2:3c:e3:81:67:39:75:a7:81:66:1f:85:eb:ca:1d:6d:e5:
         53:1a:48:f0:16:09:a2:00:b0:e9:aa:fb:55:16:c1:03:2e:05:
         0d:c5:7e:82:4d:a8:26:1c:df:55:50:18:1d:7e:20:47:85:9b:
         3e:8d:38:a6:bd:2b:5d:c1:ae:3d:e5:f0:6e:0d:24:a4:4c:1a:
         c8:ce:4c:14:e3:0f:25:b7:fa:c5:01:3a:ac:63:ba:1a:1c:5a:
         34:fb:4c:ef:b8:c7:a1:cb:5b:53:40:43:64:d9:dd:69:47:9f:
         68:07:a7:84:d6:63:b7:8b:e0:81:01:44:f6:93:47:b4:85:ea:
         49:ca:ce:97:ef:81:36:fa:0c:5b:aa:09:c7:99:9a:20:02:af:
         40:42:27:56:8a:33:3d:a8:21:8d:c8:d1:d3:e8:fc:85:e6:64:
         2d:48:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:54:04 2025 by rpki-client