Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e734e610-ef89-3d24-bb50-76cf853c2257.roa
File:                     e734e610-ef89-3d24-bb50-76cf853c2257.roa (raw, json)
Hash identifier:          1edEUg3HyWFCASgkRKTbackyTyZLW9fIiOFGWckapyY=
Subject key identifier:   A1:A0:95:DA:BE:3F:9C:E3:DF:BB:CF:02:F3:D2:20:C7:A2:14:C5:9B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAAFFA81B54C46BF3E108DC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e734e610-ef89-3d24-bb50-76cf853c2257.roa
Signing time:             Sun 03 Aug 2025 02:35:41 +0000
ROA not before:           Sun 03 Aug 2025 02:35:41 +0000
ROA not after:            Sat 01 Nov 2025 02:35:41 +0000
asID:                     22616
IP address blocks:        136.226.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:af:fa:81:b5:4c:46:bf:3e:10:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:41 2025 GMT
            Not After : Nov  1 02:35:41 2025 GMT
        Subject: CN=725e4281-8aa3-44a5-800e-0fe7c6866499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2c:88:50:72:12:69:e2:d0:ac:83:92:b8:22:
                    67:99:95:cb:0f:82:69:12:f3:8b:fe:b8:51:e0:a2:
                    24:fc:21:6c:a4:0f:8f:70:eb:5f:a1:de:a4:31:31:
                    34:4f:c4:d6:88:9c:29:47:c8:b8:1b:f9:da:25:df:
                    94:10:14:fe:1f:9e:3f:bb:a2:a6:41:0d:56:4d:11:
                    b1:7b:e4:22:35:2f:8b:46:69:28:c0:1f:3f:77:d7:
                    68:3f:8b:d7:68:bd:ed:87:bd:3e:76:0b:00:f9:7a:
                    e2:f3:09:e0:43:71:41:b7:45:86:8d:fd:84:7a:f1:
                    03:09:4b:f3:83:a8:32:df:6b:8f:9e:1c:ea:1e:b2:
                    82:16:ed:38:75:87:18:88:d7:21:41:c2:94:c7:4a:
                    55:c7:5d:a8:4b:23:9b:f6:a6:62:15:e8:51:ad:6c:
                    0d:ed:41:85:42:47:64:d5:a4:79:f4:b6:09:e9:1e:
                    4c:f9:65:d9:07:dc:9a:c5:72:fa:35:d9:ca:c4:81:
                    5f:88:b8:49:3b:56:d3:4a:89:cc:ac:1a:3f:d4:c5:
                    73:dd:d9:3b:e8:a6:4c:ea:3e:03:45:02:34:4f:81:
                    aa:9d:d4:26:22:fa:92:2d:d5:de:08:d6:d8:2b:39:
                    1a:1f:ea:82:90:8f:5f:6a:aa:e3:3a:53:59:54:3a:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:95:DA:BE:3F:9C:E3:DF:BB:CF:02:F3:D2:20:C7:A2:14:C5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e734e610-ef89-3d24-bb50-76cf853c2257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:61:70:99:8b:ac:0a:b0:ee:4a:c3:95:30:b5:60:ab:b7:21:
         d3:4c:ad:5e:e0:71:84:55:f5:7a:cc:82:db:18:b6:9f:54:c9:
         79:c5:2d:d1:2e:47:62:c1:28:f0:cb:ba:f4:10:bd:fd:4d:17:
         57:ae:64:c7:fb:04:11:f5:4f:af:e9:85:44:4c:5a:38:fb:55:
         65:3d:c4:bf:ee:0b:53:e5:dc:62:f6:2e:d3:1f:cf:ac:06:ea:
         58:8f:fe:db:ff:f5:87:de:60:31:99:59:97:de:bd:9c:bd:cd:
         c2:ab:f1:91:14:4a:e6:0c:00:71:8c:15:ef:5d:dd:f8:b1:14:
         0d:2f:75:94:77:e0:75:bc:46:3e:05:bb:c7:ea:6b:f5:aa:43:
         33:d5:26:65:51:00:bb:8e:ec:a8:21:c5:0d:a8:9a:36:f2:97:
         e4:68:5f:1e:17:c0:9a:2c:d2:ba:e3:5f:49:bc:10:cb:e0:df:
         ec:d1:98:2e:60:b7:29:a1:4b:dd:95:e8:96:8f:74:60:b0:f5:
         b5:b1:2b:ee:34:c7:e7:24:87:45:05:24:b3:0b:ee:ee:d8:6c:
         b6:48:41:63:fd:62:39:5b:50:22:86:5e:f3:9d:aa:42:b9:38:
         20:c7:ce:60:83:7d:67:9b:9d:f6:d5:08:4d:59:dc:a7:06:c5:
         bc:da:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:34 2025 by rpki-client