Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/05b79960-f2fb-37dc-bdb1-7798a156397a.roa
File:                     05b79960-f2fb-37dc-bdb1-7798a156397a.roa (raw, json)
Hash identifier:          bENTMirvH1NUlmStf/UHdyPCWDGXAMlmIf5PNN3D+f4=
Subject key identifier:   AB:BD:76:79:74:F5:A9:7F:BE:41:F5:2C:B1:F8:A8:DF:11:D2:C2:2F
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584A5FC5FFE97808E0CCCE37BB00
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/05b79960-f2fb-37dc-bdb1-7798a156397a.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     19165
IP address blocks:        136.31.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:ff:e9:78:08:e0:cc:ce:37:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=8fd85c99-fb4d-433a-a908-eb920633e034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:39:0f:2d:ae:b4:8f:d8:07:09:6a:5e:84:
                    d0:8b:53:e8:0b:fc:17:4d:fb:74:1a:4f:4b:0a:01:
                    20:97:a8:8e:7a:a1:f2:fc:4c:fd:fd:1f:34:f2:49:
                    5e:80:60:4c:62:32:d2:e1:43:99:89:51:52:9c:f8:
                    3f:4b:c9:3b:c2:e1:2f:c6:9b:42:16:1b:bd:03:0b:
                    d6:60:3c:54:bc:18:a5:46:de:a3:3f:4f:59:79:36:
                    05:1d:9e:d8:b5:0b:16:83:fd:26:c0:29:62:d1:a4:
                    85:20:a3:5a:7d:27:b2:c5:05:80:a4:fb:32:35:4b:
                    35:60:3a:9e:99:65:16:af:94:02:89:76:ba:ca:b4:
                    a0:a4:d5:dd:76:5b:6e:c5:fd:59:e3:a0:0c:f5:c3:
                    32:48:72:71:ba:fa:dc:d1:28:e4:9e:0c:58:06:4a:
                    21:35:52:e9:3b:89:82:1b:87:32:5b:e9:31:9d:b5:
                    91:93:40:51:cc:4b:42:7a:93:79:cd:91:bc:93:cc:
                    64:e7:8e:fa:86:11:90:d0:6f:a8:a7:3f:a9:14:6d:
                    f1:6d:8f:eb:47:22:ab:11:af:18:92:2f:78:12:d3:
                    8e:4e:b3:d5:57:08:0a:90:ca:68:24:b9:f0:11:fb:
                    e5:65:7e:4d:24:92:63:a9:f4:b5:7d:76:13:a5:4f:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BD:76:79:74:F5:A9:7F:BE:41:F5:2C:B1:F8:A8:DF:11:D2:C2:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/05b79960-f2fb-37dc-bdb1-7798a156397a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.31.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:08:a2:6b:aa:b1:ed:69:04:47:ed:96:22:d7:7a:6e:03:00:
         87:e5:09:fe:57:c9:d5:60:3a:04:03:32:49:61:92:aa:1a:ed:
         1d:80:b0:97:33:7d:5d:b5:59:23:5b:15:fd:b0:68:93:33:58:
         a4:20:9a:85:3c:4e:6a:f3:c9:cc:1b:d2:26:d6:68:f6:00:6f:
         cb:07:e5:a9:39:4d:8f:68:e7:76:b3:d2:88:c1:20:9b:ec:0d:
         40:73:61:a9:c3:02:2e:d0:bc:e3:f3:bf:f1:c3:28:5a:81:68:
         e0:ab:e3:ff:02:ff:fd:e5:83:c0:63:a5:e3:7b:22:65:e1:75:
         71:9b:71:87:01:b6:3c:c5:32:ca:f9:43:e6:cb:c4:d7:58:a7:
         d2:34:53:7e:43:76:c7:8b:6b:b9:be:f1:2a:01:6d:b4:5b:2d:
         b3:68:e6:ce:be:cf:23:c5:f7:b3:e8:45:92:7e:f6:5b:79:57:
         c8:8a:64:c0:c0:1c:7f:63:d5:2d:67:d7:84:91:df:8e:03:d7:
         ac:22:61:88:44:cb:6c:37:88:42:35:4a:85:32:b7:67:75:42:
         f2:ab:90:a4:a3:45:7f:79:6e:63:2d:bb:10:1f:65:52:85:53:
         e5:14:8d:d4:b2:d7:6e:89:d8:de:53:6e:f8:e9:a7:a4:80:dd:
         22:f5:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:08 2025 by rpki-client