Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/88d3dcc7-1b28-350a-90c9-f2f9a282c2e3.roa
File:                     88d3dcc7-1b28-350a-90c9-f2f9a282c2e3.roa (raw, json)
Hash identifier:          RbJ/Lzyjpl9GLiIQWBRxBNeclWnAaN12ajQCkA+xHCg=
Subject key identifier:   87:AA:CE:3C:3C:52:05:3F:1D:1E:EB:A6:8F:18:D0:D8:FF:D1:0A:8F
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F4328584A8575F69CA7DD4097099FB874
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/88d3dcc7-1b28-350a-90c9-f2f9a282c2e3.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     401307
IP address blocks:        136.228.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f6:9c:a7:dd:40:97:09:9f:b8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=709b1a91-1bac-4382-852a-e2de6cdfd038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:0d:94:7a:6a:26:dc:38:6a:cc:b1:59:a8:
                    e3:c8:c1:21:f7:13:a8:f3:8d:51:a2:e8:aa:dc:ff:
                    3f:9d:35:1d:1a:ed:93:ea:01:77:87:fd:72:ac:51:
                    5c:8c:45:39:af:a0:f8:8a:df:05:6b:1a:80:a8:93:
                    63:6a:f4:50:f3:c1:f4:cf:7d:98:28:0b:70:8b:06:
                    21:20:05:ee:9c:cb:c4:ab:9a:57:48:ee:2b:df:b1:
                    6e:cd:09:d5:b2:88:ee:a8:a1:ef:0e:40:11:77:2b:
                    1b:46:43:3e:72:70:a6:1f:e6:d0:13:0a:7b:14:96:
                    41:ab:ea:a2:de:81:1d:45:d5:5a:5f:03:ae:15:6c:
                    fd:34:55:52:87:08:3b:6d:94:4f:a8:3c:b6:f8:8b:
                    7e:d6:ca:ff:ef:c3:24:ad:0d:09:6a:07:ce:df:79:
                    86:bb:08:f6:9f:a0:4a:46:e3:32:92:1e:c1:ca:78:
                    d5:80:23:6a:6b:73:8c:fa:75:e9:c3:37:29:54:51:
                    44:b3:69:ac:44:2f:af:bf:a8:42:ac:c3:c3:e4:ba:
                    7f:93:1d:ef:b3:85:ab:42:bb:fd:d6:ed:42:99:89:
                    3b:bc:09:05:48:11:b1:bc:72:8d:12:9c:03:ac:47:
                    f4:b1:10:c7:de:5a:b3:eb:24:2c:8f:16:77:61:89:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AA:CE:3C:3C:52:05:3F:1D:1E:EB:A6:8F:18:D0:D8:FF:D1:0A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/88d3dcc7-1b28-350a-90c9-f2f9a282c2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:36:d1:ba:a3:95:b9:df:a7:21:25:72:e7:b9:2c:9e:f9:
         08:a3:3f:09:23:36:41:0a:95:81:7c:a9:74:08:a8:6c:0b:14:
         08:56:7e:7a:48:66:6c:95:c0:64:7c:a1:a1:4e:64:69:a2:25:
         5c:81:63:e6:65:1b:3c:d2:5a:c7:f0:a5:0e:29:d9:35:84:62:
         a4:c6:50:f2:ad:58:e7:2b:2d:b0:c4:a6:a1:b1:d5:d4:bd:06:
         29:34:d6:31:6a:07:32:07:c6:b2:d6:f2:44:74:23:e6:7a:42:
         76:5b:6d:9e:e3:a4:5d:cf:c3:9d:86:1a:5b:31:cf:4f:84:af:
         fd:0c:46:13:b9:11:24:ca:be:76:f3:0f:5f:22:75:a0:fb:db:
         e6:e8:7e:3b:d7:c8:56:d6:e3:80:19:4c:9c:70:79:9d:4c:b4:
         40:7c:11:c7:8d:04:7a:b8:3c:89:69:b2:69:19:3f:3d:d6:6c:
         f3:d3:25:86:37:2b:a2:7f:3c:0b:eb:40:70:84:32:8b:26:e7:
         3b:83:6c:56:8c:85:43:23:42:c0:66:93:ba:67:7c:cb:ae:fc:
         01:31:1a:29:a4:ee:70:3f:23:26:ad:5e:43:f4:b7:db:1c:2e:
         8f:6d:64:7d:62:44:b1:57:7f:82:7e:ce:fc:19:23:b2:06:e7:
         7a:61:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:35 2025 by rpki-client