Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2f1195b7-1f12-3715-a9b0-b03486d97d69.roa
File:                     2f1195b7-1f12-3715-a9b0-b03486d97d69.roa (raw, json)
Hash identifier:          LTe4kTujKxRBkoOvK4WoFgVlPzP84QAyVAjN49epxLU=
Subject key identifier:   3B:66:33:BB:C4:1A:07:62:0A:53:0F:F2:F5:A1:E0:BD:A5:43:CF:19
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFFBDB07AA226312C13740
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2f1195b7-1f12-3715-a9b0-b03486d97d69.roa
Signing time:             Sun 03 Aug 2025 02:35:42 +0000
ROA not before:           Sun 03 Aug 2025 02:35:42 +0000
ROA not after:            Sat 01 Nov 2025 02:35:42 +0000
asID:                     62044
IP address blocks:        136.226.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:fb:db:07:aa:22:63:12:c1:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:42 2025 GMT
            Not After : Nov  1 02:35:42 2025 GMT
        Subject: CN=7c86390c-490d-4a61-84b7-353160060d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:df:c9:25:92:ad:cb:b9:15:49:ad:c8:a0:17:
                    18:3d:ca:c8:95:a7:20:2a:b1:00:4f:af:0f:cb:9d:
                    5a:ab:68:80:04:f2:08:c5:20:7d:f3:5b:ef:af:9a:
                    36:59:4d:8a:fe:d0:48:89:99:17:7c:af:fc:b0:20:
                    eb:18:4c:a7:1b:c4:d6:09:31:33:08:7f:3a:30:a5:
                    c6:70:b3:c2:57:17:1a:e8:28:29:22:a9:b3:37:5b:
                    cf:6d:9d:7d:36:9e:c6:b1:9c:a7:00:83:93:86:57:
                    a8:a4:e5:38:c9:0b:8e:aa:4c:df:84:e9:f8:92:dc:
                    3f:64:70:39:a4:fb:76:e4:1a:d7:44:9e:a0:3e:40:
                    fe:1f:e9:3d:a7:ca:35:b7:2f:1d:3c:5b:32:43:58:
                    f7:a4:4d:bd:53:1c:75:7d:46:2b:8e:4b:7a:d6:33:
                    92:4a:7f:d8:a3:4c:1b:fb:0e:1b:11:56:02:93:75:
                    77:9a:bc:58:f3:3f:0b:1f:1d:82:82:be:fa:be:ae:
                    41:17:ca:2b:ea:20:dc:d0:2f:3e:cc:9c:76:f5:7e:
                    54:80:16:cf:ca:8d:3f:17:bc:58:c6:44:43:ce:43:
                    b7:a6:d5:10:55:c8:27:32:51:87:f7:68:d0:aa:21:
                    ce:48:22:cc:a1:45:f8:bb:53:1a:1d:d7:c1:34:69:
                    c9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:66:33:BB:C4:1A:07:62:0A:53:0F:F2:F5:A1:E0:BD:A5:43:CF:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2f1195b7-1f12-3715-a9b0-b03486d97d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:36:14:5e:2b:db:7b:fd:3a:dc:26:33:fb:41:34:b1:13:df:
         40:88:f1:66:b0:e8:42:a6:94:9a:54:f8:77:1f:3f:a8:41:91:
         20:03:1e:e2:c3:ae:ab:43:da:66:61:02:0c:4f:df:5a:35:57:
         b3:a6:ea:b2:54:04:37:dd:10:9f:68:9b:ef:7d:d7:d2:69:2f:
         a5:30:40:cd:1e:7f:1e:69:5c:d5:6c:99:36:a1:e5:40:02:16:
         57:79:8a:c7:70:7c:77:d2:be:f9:55:b9:e0:e7:7a:80:11:86:
         e9:9b:16:08:53:19:ee:af:97:da:2d:04:38:d8:4e:5c:88:f7:
         1d:5f:02:59:eb:92:bb:eb:e2:01:00:b0:31:ba:cf:ba:44:f0:
         35:a5:3f:12:82:c3:90:c1:9f:96:44:17:d0:4e:1e:64:58:6f:
         ce:8a:c5:c5:9f:52:07:3a:e0:41:65:16:ab:da:bb:a6:e1:f8:
         37:8f:03:63:83:8c:0e:60:47:61:68:cc:8a:9d:66:15:77:05:
         8d:20:db:5d:1f:3b:90:02:b1:11:24:27:18:47:0e:7c:0b:d5:
         82:fd:fa:19:da:69:9f:a0:6e:32:29:1c:e0:e1:d7:b4:ed:9a:
         cf:47:27:38:53:c7:1c:9f:1a:ff:48:1c:39:3b:7c:85:1d:bf:
         02:f3:cd:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6r/vbB6oiYxLBN0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDgwMzAyMzU0MloXDTI1MTEwMTAyMzU0MlowLzEtMCsGA1UEAxMk
N2M4NjM5MGMtNDkwZC00YTYxLTg0YjctMzUzMTYwMDYwZDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8t/JJZKty7kVSa3IoBcYPcrIlacgKrEAT68P
y51aq2iABPIIxSB981vvr5o2WU2K/tBIiZkXfK/8sCDrGEynG8TWCTEzCH86MKXG
cLPCVxca6CgpIqmzN1vPbZ19Np7GsZynAIOThleopOU4yQuOqkzfhOn4ktw/ZHA5
pPt25BrXRJ6gPkD+H+k9p8o1ty8dPFsyQ1j3pE29Uxx1fUYrjkt61jOSSn/Yo0wb
+w4bEVYCk3V3mrxY8z8LHx2Cgr76vq5BF8or6iDc0C8+zJx29X5UgBbPyo0/F7xY
xkRDzkO3ptUQVcgnMlGH92jQqiHOSCLMoUX4u1MaHdfBNGnJywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtmM7vEGgdiClMP8vWh4L2lQ88ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmYxMTk1YjctMWYxMi0z
NzE1LWE5YjAtYjAzNDg2ZDk3ZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOKkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHE2FF4r23v9OtwmM/tBNLET30CI8Waw6EKmlJpU+HcfP6hBkSADHuLD
rqtD2mZhAgxP31o1V7Om6rJUBDfdEJ9om+9919JpL6UwQM0efx5pXNVsmTah5UAC
Fld5isdwfHfSvvlVueDneoARhumbFghTGe6vl9otBDjYTlyI9x1fAlnrkrvr4gEA
sDG6z7pE8DWlPxKCw5DBn5ZEF9BOHmRYb86KxcWfUgc64EFlFqvau6bh+DePA2OD
jA5gR2FozIqdZhV3BY0g210fO5ACsREkJxhHDnwL1YL9+hnaaZ+gbjIpHODh17Tt
ms9HJzhTxxyfGv9IHDk7fIUdvwLzzbw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:19:26 2025 by rpki-client