Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/aaecb7ae-e675-38a4-878b-c2a7dda47931.roa
File:                     aaecb7ae-e675-38a4-878b-c2a7dda47931.roa (raw, json)
Hash identifier:          nVYnI5X/XgR8UTzXrWLE8DKclISAUmBSMfv/I1BJAGc=
Subject key identifier:   DD:7A:68:09:A6:14:EF:26:A0:24:1D:CB:AA:D0:E5:DA:58:3A:E0:AF
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFFB7D420641FC6DB7B180
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/aaecb7ae-e675-38a4-878b-c2a7dda47931.roa
Signing time:             Sun 03 Aug 2025 02:35:42 +0000
ROA not before:           Sun 03 Aug 2025 02:35:42 +0000
ROA not after:            Sat 01 Nov 2025 02:35:42 +0000
asID:                     62044
IP address blocks:        136.226.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:fb:7d:42:06:41:fc:6d:b7:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:42 2025 GMT
            Not After : Nov  1 02:35:42 2025 GMT
        Subject: CN=472674b3-2fb2-4dfe-9993-ce53a8312742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:fb:30:54:22:a7:e3:d4:ad:a6:4b:a4:a1:
                    87:b5:54:71:a9:5e:ff:98:73:9e:91:48:a4:21:7a:
                    e9:9a:f0:de:a1:83:12:49:5d:9b:eb:39:cd:9f:70:
                    cf:1e:2b:5b:9e:13:79:6c:b4:5c:33:e1:22:1c:34:
                    8f:5e:7e:de:54:91:78:5c:0d:b6:f0:61:3e:8c:40:
                    b0:4b:4f:28:2d:e9:7c:39:78:9d:9c:d7:2e:84:3d:
                    1c:6d:30:48:90:d9:25:6b:00:3f:b2:4b:3f:6c:40:
                    17:e5:95:e2:b0:73:f4:2a:bd:52:42:67:a5:1e:5c:
                    c5:83:1d:ae:76:de:74:86:56:9e:8f:39:e7:9a:e6:
                    f6:a8:57:c8:9a:92:3e:a0:92:ca:5f:57:4a:d4:49:
                    3e:1d:69:49:93:89:2b:89:d4:d7:7a:d4:a0:30:f8:
                    4b:be:df:60:1e:ce:62:20:7e:e4:58:ef:53:4e:3d:
                    9c:69:3b:58:bb:f3:66:1e:b4:78:31:54:81:70:95:
                    a2:36:87:f5:13:04:ba:7f:8c:0c:61:3d:e0:96:30:
                    38:a5:d0:a6:f6:46:f4:d2:15:ad:ee:b9:ef:24:36:
                    cb:5a:75:d8:8f:98:fd:0a:29:21:c5:8a:e3:db:d4:
                    76:db:a9:5a:17:3a:91:3c:bd:ee:68:a8:8e:7b:1c:
                    6b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7A:68:09:A6:14:EF:26:A0:24:1D:CB:AA:D0:E5:DA:58:3A:E0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/aaecb7ae-e675-38a4-878b-c2a7dda47931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:91:0b:e9:10:09:8f:c5:02:e1:db:ff:cb:2c:9e:2b:d5:60:
         6b:12:9e:64:73:91:69:ed:75:06:59:dc:a1:78:6c:82:b6:0a:
         dd:b8:93:50:9f:32:d5:40:b0:a7:bd:cc:54:04:e9:07:ab:a0:
         fc:63:ac:1c:25:41:a0:64:13:28:d7:35:24:15:d5:f8:d3:49:
         47:db:c1:64:b1:e1:9a:4a:5e:9b:46:20:55:d6:44:3a:20:ca:
         ce:ba:84:90:13:ac:00:b1:81:36:ee:67:80:a7:58:23:12:4b:
         5c:93:b2:98:4c:7b:85:c4:e0:f2:c5:24:5a:dd:90:92:c3:b1:
         96:5f:81:a2:7b:16:f9:96:6b:16:97:b6:f7:aa:de:f0:a5:86:
         81:4b:3b:19:44:ed:f1:46:c0:27:68:70:6c:95:57:b6:cf:8b:
         3c:0f:ac:04:85:12:fe:c8:5b:c4:c6:6f:66:68:ca:f0:0e:be:
         a9:f8:a2:2e:78:d9:f4:9c:5a:d2:f0:53:93:96:ff:11:e5:3c:
         c6:fd:cf:7d:46:66:fa:09:c7:bd:c9:f9:c1:fb:be:74:13:35:
         bf:d5:36:b9:9b:f3:c9:09:c2:2f:ab:c7:d6:05:a2:68:d3:b5:
         7b:87:90:ed:9d:85:3d:63:60:b3:36:dc:85:38:0b:86:e5:92:
         5c:11:1f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:55 2025 by rpki-client