Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/44b7132c-1c88-3306-84c8-3b1477b4bbb2.roa
File:                     44b7132c-1c88-3306-84c8-3b1477b4bbb2.roa (raw, json)
Hash identifier:          UDOgrMpTQcpzVDlhqKZdFgI7R76uykMvX7gwyAzO2EY=
Subject key identifier:   7E:75:D0:6B:D7:1C:28:C9:A5:93:91:B8:E7:80:C4:88:EB:C0:20:9F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFFA0D2C08B572786C9700
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/44b7132c-1c88-3306-84c8-3b1477b4bbb2.roa
Signing time:             Sun 03 Aug 2025 02:35:41 +0000
ROA not before:           Sun 03 Aug 2025 02:35:41 +0000
ROA not after:            Sat 01 Nov 2025 02:35:41 +0000
asID:                     22616
IP address blocks:        136.226.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:fa:0d:2c:08:b5:72:78:6c:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:41 2025 GMT
            Not After : Nov  1 02:35:41 2025 GMT
        Subject: CN=c3dc6220-bb23-4311-8788-5f0f990ee932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:14:63:7c:ac:46:07:15:43:e1:bb:ec:9e:9d:
                    5c:f2:3a:54:4d:87:e5:22:f1:a0:42:82:78:09:29:
                    4f:b3:06:6b:46:b9:85:bd:7e:b4:57:cd:a7:f0:3a:
                    a9:8c:70:ed:c8:ce:52:4d:e4:e5:ea:ef:34:3b:5a:
                    2d:2e:df:48:04:fd:00:44:64:a8:ea:15:3f:8d:ca:
                    e3:33:47:02:3e:bc:e0:14:ff:89:3c:e5:7b:a7:a7:
                    68:64:ed:e4:26:a5:37:09:23:79:65:6a:38:ad:63:
                    f7:37:c4:57:7e:c9:ed:7c:8b:81:cc:c6:0b:7e:3f:
                    c5:72:18:a7:5b:1b:ec:1c:e8:fc:54:99:1e:03:f9:
                    3d:74:f8:a5:2a:2e:9d:55:48:25:f4:38:cf:fe:68:
                    d2:d8:fa:cc:89:4a:76:19:d2:a1:84:20:73:90:cc:
                    9f:35:14:4d:ca:dc:75:77:36:fa:78:69:7c:b4:48:
                    c7:62:39:ec:9b:ce:57:ab:93:03:f9:c6:31:c4:4a:
                    f3:af:8b:e2:4c:c8:9d:1f:16:20:f5:75:fb:2f:4e:
                    16:68:ed:25:1d:0b:02:a4:56:44:e4:11:5c:bf:1d:
                    b2:bf:d7:1f:21:53:a2:6b:4b:78:91:fc:04:d5:21:
                    0e:c8:77:77:84:29:43:1e:3e:7d:1e:0e:e7:be:9b:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:75:D0:6B:D7:1C:28:C9:A5:93:91:B8:E7:80:C4:88:EB:C0:20:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/44b7132c-1c88-3306-84c8-3b1477b4bbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fc:85:6c:c0:31:17:6e:36:6f:69:31:0f:70:97:04:92:ca:
         e7:91:57:2b:b0:0c:0c:58:f5:57:f0:97:a1:4d:5d:7f:26:ee:
         a9:12:bb:99:f4:39:c7:47:c6:7d:78:98:6f:fa:8c:62:aa:c4:
         bc:f0:d5:35:a2:23:d5:1b:ed:f0:2d:e5:db:4f:5d:68:5e:86:
         58:9b:2e:71:ba:36:93:86:a6:6a:03:4c:26:64:6d:5a:73:59:
         ee:9d:47:a8:d3:b0:30:5b:8a:88:dc:18:19:86:47:5c:dc:a0:
         33:f0:ef:f8:ca:86:1e:23:95:c0:2a:9a:ca:73:31:37:e5:a3:
         eb:5f:3f:b4:e4:eb:c4:a0:25:fe:d4:c4:c7:ef:f2:b7:7f:a4:
         5e:63:51:27:3d:59:ed:96:90:4e:97:4f:ac:88:49:08:ff:4e:
         24:28:3a:29:88:26:48:14:ea:31:d3:08:c8:79:37:ea:54:53:
         9e:b3:15:cc:f8:ff:0f:5a:48:5f:36:a5:0a:ee:ff:35:e0:41:
         93:32:98:56:78:86:27:32:92:4e:43:2e:0a:50:5f:fb:fb:18:
         c7:e4:84:c6:39:11:d3:a1:21:05:29:82:f4:50:b5:d2:a3:63:
         37:93:ff:97:1e:f6:a5:43:de:64:cf:33:36:a1:05:11:17:ad:
         dc:e7:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:31 2025 by rpki-client