Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/490ce204-77bd-331a-8935-0cd50cc85c8c.roa
File:                     490ce204-77bd-331a-8935-0cd50cc85c8c.roa (raw, json)
Hash identifier:          EmYxdsg+mqwgokYc9zQthCbVu08QIG+P4aRH/ghNlEU=
Subject key identifier:   AE:90:4D:10:36:B3:B7:66:EE:DF:88:D6:7D:DD:56:21:95:49:EE:E6
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFF9D9A3ED6DAAA787DB20
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/490ce204-77bd-331a-8935-0cd50cc85c8c.roa
Signing time:             Sun 03 Aug 2025 02:35:41 +0000
ROA not before:           Sun 03 Aug 2025 02:35:41 +0000
ROA not after:            Sat 01 Nov 2025 02:35:41 +0000
asID:                     22616
IP address blocks:        136.226.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:f9:d9:a3:ed:6d:aa:a7:87:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:41 2025 GMT
            Not After : Nov  1 02:35:41 2025 GMT
        Subject: CN=370021f3-0fe2-41cf-a6b1-26ae3d65224e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:06:46:43:0b:d2:a9:41:75:e0:10:bc:b9:
                    9b:4e:3b:20:66:93:27:db:d0:da:fb:c5:38:8c:72:
                    a8:0e:76:fb:39:12:4b:29:a8:4c:84:7d:91:d5:3c:
                    3a:46:1a:6f:7a:3d:b8:f7:83:66:a6:5e:0e:0a:0b:
                    db:f3:22:6e:0d:6b:c6:d7:d4:2b:7b:0f:5e:72:2d:
                    6f:61:4e:fc:6b:6e:83:f2:33:c6:64:40:3d:34:2f:
                    74:43:5a:27:12:f4:74:54:67:04:61:34:87:79:87:
                    b3:6d:55:bc:43:ad:0c:47:a8:37:73:8b:88:cc:42:
                    69:4c:dd:2a:35:eb:9c:25:77:75:cd:c9:84:9c:f8:
                    83:57:44:b3:b9:8a:dc:34:bb:a3:43:c6:c3:cc:6f:
                    5d:37:b3:a5:9b:89:3f:fe:d5:ee:fe:e1:03:20:40:
                    0f:b7:20:1b:5c:b9:36:17:e4:d3:59:c2:25:f5:ad:
                    63:96:d5:1f:f1:3b:78:f3:72:e4:04:df:14:80:5b:
                    61:74:21:9f:9c:85:dd:5c:50:3f:35:ed:ad:c9:49:
                    ac:99:98:94:55:4d:ae:64:19:c3:c1:04:be:16:c5:
                    bf:be:01:44:1d:c0:46:b5:74:31:3e:4f:83:5f:75:
                    23:37:3d:6a:ef:2a:5c:09:2b:b7:56:f3:64:82:72:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:90:4D:10:36:B3:B7:66:EE:DF:88:D6:7D:DD:56:21:95:49:EE:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/490ce204-77bd-331a-8935-0cd50cc85c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f5:2f:25:ed:aa:a0:62:e1:54:9d:cf:3e:a6:48:5d:60:5f:
         78:22:1c:a9:d2:aa:0a:68:f1:ac:a5:2d:af:c7:c7:35:81:77:
         f7:0e:7b:9c:e9:67:63:a0:d4:c3:09:b7:f7:bc:03:4c:54:36:
         0f:7e:0a:78:49:f1:07:25:15:65:9f:7c:4a:65:64:c1:6f:69:
         de:94:30:7a:d5:0a:33:9a:2d:0b:c6:d1:fb:f2:15:76:9d:fe:
         7c:2c:12:fd:4c:2e:fe:e8:66:85:38:e3:cd:34:71:90:a7:4b:
         98:c0:ce:1c:a9:63:74:55:34:c8:d6:83:fe:94:e8:56:09:59:
         44:d5:20:b1:f8:86:7d:3a:c9:f1:85:ff:e8:0d:60:5b:7a:69:
         3b:72:96:7d:24:91:c4:4d:d8:a5:8e:a4:10:37:6c:ad:49:43:
         ce:73:7b:3c:68:d5:22:d5:85:ff:a1:5f:df:85:5d:8f:d2:2d:
         be:0c:70:4b:c5:40:9a:73:ed:8a:a5:2e:ea:29:2e:ea:98:a2:
         df:41:4f:2d:83:58:4c:81:c4:d9:61:04:e2:e4:ee:28:b6:bc:
         0f:0a:10:20:65:2a:08:db:04:4f:9a:53:76:67:45:2d:4b:96:
         ad:ec:2c:5b:93:98:58:4c:2a:28:f2:bf:f6:73:3e:93:3e:fe:
         61:88:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:15 2025 by rpki-client