Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
File:                     571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa (raw, json)
Hash identifier:          pyMfh7y6ZR6fNYrPAhrFLvyXu9emjnXCvyUgZGH8VFs=
Subject key identifier:   1D:1E:C1:6E:18:5D:B7:91:EA:94:00:44:55:10:BD:D5:26:E0:F7:A8
Certificate issuer:       /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial:       010D0C9F4328584B8BE2210A1C73A1DB5E5126A0
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     36351
IP address blocks:        136.228.0.0/19 maxlen: 32
                          139.60.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:21:0a:1c:73:a1:db:5e:51:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=53bc60cc-3c4f-4807-b87e-1122cd19d358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:92:96:96:db:49:42:41:6c:a2:62:dc:66:
                    5b:92:3c:72:5c:17:7c:6f:9b:a7:d2:b0:33:c9:d6:
                    94:c1:ad:50:89:d4:16:01:30:25:41:fa:88:80:7f:
                    6b:07:7e:1c:2e:4b:55:da:7d:1f:aa:5f:43:cd:e9:
                    79:cf:3a:ae:8a:05:44:69:2f:c1:9c:56:31:7e:3d:
                    70:7e:5f:65:cb:66:52:09:fc:2b:37:4d:7f:30:14:
                    6f:31:2d:0f:a2:39:eb:95:4a:a0:d5:71:0d:84:69:
                    97:8c:36:d3:6d:8c:8d:e7:05:ca:43:f7:4b:d5:ca:
                    b0:73:3f:2b:ad:70:7e:28:e1:24:79:b7:72:8b:dd:
                    d3:c3:40:5a:ef:ba:45:8f:2f:4f:e4:f5:f4:5a:af:
                    2c:db:87:94:f6:19:f8:53:8c:8f:4c:52:68:d0:94:
                    eb:41:77:51:bf:2f:80:a4:17:42:0f:e1:e2:6d:45:
                    4d:2b:f7:d9:e2:ee:7b:ca:13:79:0a:df:31:ec:d4:
                    cb:f5:92:67:ac:a0:29:c9:aa:a4:91:16:fe:f9:f9:
                    fd:63:6c:be:31:aa:9a:33:02:2d:19:17:69:cc:44:
                    e6:20:83:0c:90:fc:d0:72:66:37:42:e0:32:fe:e4:
                    a4:43:f2:2c:fc:af:c4:6e:06:1e:b5:2f:e5:f4:6e:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1E:C1:6E:18:5D:B7:91:EA:94:00:44:55:10:BD:D5:26:E0:F7:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.0.0/19
                  139.60.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:c0:5e:06:9d:33:10:a3:eb:bf:ad:d1:66:0e:47:59:be:
         28:04:51:50:57:3d:a8:20:f6:0e:1f:90:98:c9:a4:77:51:39:
         0b:fd:7d:bc:75:3f:32:7b:4e:10:21:8c:20:50:61:99:16:26:
         8e:e2:cb:20:26:ec:ea:2b:5e:01:f6:ce:3a:71:52:5f:c8:35:
         8c:51:46:d1:e0:52:14:05:78:88:f0:33:cd:c1:ca:f5:43:26:
         9e:b2:e7:3f:a6:09:f1:5a:c7:00:3f:d3:10:d0:8f:f4:94:26:
         77:9a:b1:79:d1:86:6b:c2:7d:51:9c:eb:2f:fe:40:4e:a9:20:
         ae:11:e3:99:92:0d:fb:ee:6c:ca:5f:57:35:78:03:5e:34:7a:
         ba:e2:36:50:85:1e:9e:ad:f5:2e:cc:61:b7:25:29:0c:1a:22:
         7b:ac:20:5f:4f:9e:b5:3d:e7:b0:94:e2:25:c8:12:f8:99:11:
         12:80:28:b3:3d:93:17:c0:9b:36:4b:75:6b:ce:6d:a6:56:0e:
         98:05:38:06:66:27:2c:60:71:c8:1b:74:cf:bc:c1:a7:4d:66:
         f4:b9:ce:9a:ec:be:91:19:2e:37:bf:63:63:1f:f1:67:02:23:
         12:eb:ef:6c:b0:e0:71:47:69:1c:58:27:d6:5b:29:1f:2c:4e:
         ae:4c:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:19:20 2025 by rpki-client