Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
File:                     1b223cca-1417-3066-b397-805664ddda0b.roa (raw, json)
Hash identifier:          S+MncYcuZaiIsZahy4I9aiKdMSxxrwaXTs/sbzRhyS0=
Subject key identifier:   40:C1:76:DB:C5:B2:EA:48:B7:05:59:0F:4B:E0:74:20:22:C8:62:3E
Certificate issuer:       /CN=836bd820-5504-47bf-baac-f0d3a943c97c
Certificate serial:       010D0C9F4328584ABD4B9DBC6421B9F3430E0200
Authority key identifier: 45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     36419
IP address blocks:        64.239.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9d:bc:64:21:b9:f3:43:0e:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836bd820-5504-47bf-baac-f0d3a943c97c
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=2c547de7-3c84-49c1-ad15-4f9659b5f3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:1b:94:68:34:2e:16:5b:b3:59:8e:39:51:
                    46:9f:f7:5d:47:19:4d:ec:28:dc:ea:07:2d:7b:aa:
                    77:7e:e1:4d:13:fe:14:67:3e:db:f6:49:ff:7a:7d:
                    d1:50:f3:9f:ed:3a:ab:4a:9a:ac:1b:7f:d7:7c:e0:
                    0d:17:40:b9:bb:09:a1:d1:1c:9b:51:19:58:61:2b:
                    5f:02:a3:1d:ae:bd:7f:67:cb:47:4a:0c:09:d5:b0:
                    3b:07:d6:63:63:12:cf:fd:39:51:0d:ae:b8:e6:66:
                    79:f5:7c:16:d7:24:42:2a:85:48:56:77:89:e8:bf:
                    85:82:44:82:69:80:3f:37:80:d2:da:32:ce:85:05:
                    cb:f0:7d:6d:98:9c:33:ec:53:09:54:23:2e:c7:e6:
                    86:c2:0c:52:09:84:25:47:c9:0c:15:0c:9d:34:2f:
                    d7:46:d3:54:c9:95:41:f3:6c:45:1e:48:c3:94:3d:
                    d9:7a:19:ec:6f:bc:bb:d9:f4:5a:f6:05:f3:92:69:
                    ea:69:f1:fc:32:ca:97:4d:e3:0c:d2:5b:5b:1e:5e:
                    77:8c:2d:d7:2a:d2:b2:23:77:40:19:6e:48:26:8e:
                    9e:7c:2f:df:ba:90:e3:29:12:6b:94:23:5e:99:80:
                    8d:f2:03:bb:b6:82:0b:6a:2a:e7:a8:8f:d1:df:76:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:76:DB:C5:B2:EA:48:B7:05:59:0F:4B:E0:74:20:22:C8:62:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.crl

            X509v3 Authority Key Identifier:
                keyid:45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8e:05:32:db:03:56:a5:1d:32:2d:49:0b:b9:09:3c:26:0f:
         18:ba:5e:17:ac:26:ae:9e:48:fa:9b:db:b7:df:de:de:a2:00:
         06:34:75:0d:6e:6a:be:7e:c4:fa:ba:54:3d:2a:9f:c1:9c:36:
         17:59:82:6c:21:70:c1:66:5e:ab:36:52:bc:8f:64:e3:a2:75:
         7a:43:86:fb:ad:a5:72:a3:bd:f1:eb:5b:0f:da:f0:57:5d:cc:
         dd:3e:8d:89:a1:6b:33:57:5a:12:34:6b:06:ab:b8:11:29:1b:
         30:3f:20:23:d5:d0:ab:d3:df:fd:a7:3d:07:c4:20:d7:16:21:
         e2:47:b6:00:0d:d8:7a:33:fb:60:1a:b0:65:f7:2e:83:32:59:
         0b:61:4e:66:87:fe:7b:2d:ad:28:97:40:37:65:9e:b5:2a:44:
         06:03:c1:54:fd:ec:89:2f:61:0d:0b:32:b5:4d:66:1c:7a:d1:
         78:57:cc:13:a7:b9:33:55:6d:13:b3:bd:29:95:3f:cf:69:fb:
         f7:ac:69:71:f2:fa:32:d6:2d:41:a9:9f:56:d4:74:65:f8:c8:
         69:42:9d:3c:57:99:0a:e1:b4:63:7a:9f:bc:cb:ae:9c:70:d5:
         ce:cf:1a:39:8b:de:9f:63:02:7b:4b:a2:7e:6e:2c:6a:69:bf:
         20:1f:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:11 2025 by rpki-client