Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8ed9c9f4-407c-371c-883e-e564fbd9384c.roa
File:                     8ed9c9f4-407c-371c-883e-e564fbd9384c.roa (raw, json)
Hash identifier:          aWxffq/fed8Oq37rsdP/GYesiJ2Is5JSWe4RxzdZh68=
Subject key identifier:   CA:FA:9F:C8:CB:76:83:01:3C:1E:92:F6:C8:D3:72:6B:A4:60:EF:6C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFF9203CD4DA336432A740
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8ed9c9f4-407c-371c-883e-e564fbd9384c.roa
Signing time:             Sun 03 Aug 2025 02:35:41 +0000
ROA not before:           Sun 03 Aug 2025 02:35:41 +0000
ROA not after:            Sat 01 Nov 2025 02:35:41 +0000
asID:                     22616
IP address blocks:        136.226.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:f9:20:3c:d4:da:33:64:32:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:41 2025 GMT
            Not After : Nov  1 02:35:41 2025 GMT
        Subject: CN=84e9ba59-7d9e-49c1-8e15-b1b6b618570d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:76:52:53:12:bd:6e:57:3f:a2:73:fd:1a:
                    10:69:9b:db:17:8f:a7:82:36:6f:06:7d:5c:eb:c0:
                    0b:9c:11:8d:7c:7a:91:ac:fd:0c:47:5f:7b:38:f3:
                    9c:1e:5d:57:c1:cc:1f:ad:45:67:3d:2c:2a:d2:cd:
                    3a:d8:a7:2e:40:2d:8d:6a:c2:ca:51:86:55:b7:eb:
                    3d:f1:45:6b:06:34:7d:7c:76:30:58:3e:38:51:f3:
                    e1:e1:2c:7c:6f:cc:1c:ec:2c:fc:e3:a5:69:bd:2f:
                    7c:05:cd:7a:48:27:24:c0:d3:01:94:00:be:19:4e:
                    e1:36:e4:af:cb:37:b1:4d:d1:d8:f3:ef:bc:0b:4f:
                    2b:a8:e8:b4:39:96:10:e0:8f:66:c4:02:30:2c:62:
                    9e:54:14:33:e1:b0:a7:cc:9a:8c:74:31:b4:96:73:
                    b3:fb:ca:0f:71:e9:c4:b6:45:bd:d6:e1:36:e0:92:
                    5a:ba:0e:03:cb:49:86:10:c6:1c:7c:77:1f:25:68:
                    75:bb:de:fa:66:88:e2:02:32:00:6d:95:1b:28:a1:
                    8f:ff:41:1b:7e:f7:23:52:2e:32:d0:7b:61:91:bc:
                    6a:90:46:ec:55:98:24:ea:d7:62:2d:c1:7c:52:ea:
                    7f:7b:86:0c:a2:7b:ad:e4:e1:8b:ae:11:52:11:c5:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FA:9F:C8:CB:76:83:01:3C:1E:92:F6:C8:D3:72:6B:A4:60:EF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8ed9c9f4-407c-371c-883e-e564fbd9384c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9b:c5:98:07:ba:b3:b7:dd:62:53:ef:4e:81:a9:9a:af:14:
         27:da:ae:75:ba:ca:f8:be:51:49:d8:9a:d8:64:27:8c:11:03:
         13:5b:e4:e0:16:bb:6b:8a:c8:ac:44:75:ea:6d:5e:c2:99:27:
         2a:6c:0d:1f:82:d0:65:eb:a2:5a:78:3a:65:40:a7:f0:54:0c:
         dd:cc:c4:c9:6e:cf:6f:60:62:46:85:e7:bf:8d:83:b7:34:91:
         26:fe:c4:62:a8:4d:57:1c:c2:81:cf:7e:e6:d6:ff:38:f8:2e:
         c8:76:94:e6:dc:6b:6a:b5:8e:9f:20:6f:57:ae:38:aa:1d:f9:
         a1:ec:3b:11:29:ef:d2:90:7d:e5:a0:db:fb:cd:4f:e9:9b:48:
         07:26:f5:94:b9:24:f6:ff:88:fd:38:2b:d8:7f:f6:38:a5:67:
         aa:ef:f4:4c:85:e3:6d:6d:6c:55:20:fa:33:6e:61:87:87:ca:
         ad:82:66:eb:f5:40:1d:26:19:65:8e:76:b9:6a:68:7a:50:ad:
         7a:5e:85:04:a8:9e:8f:1e:93:2a:2a:2a:1a:0c:05:af:0a:2f:
         79:8c:39:37:4d:d0:98:98:3d:1d:11:38:9a:64:21:81:b5:9b:
         2b:e0:3e:47:a1:c8:e8:7f:42:4d:9a:1b:e6:98:0d:69:83:2f:
         1b:9f:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:37:34 2025 by rpki-client