Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/9853c903-f2c7-39ec-a317-f8c992870b21.roa
File:                     9853c903-f2c7-39ec-a317-f8c992870b21.roa (raw, json)
Hash identifier:          R1MU736xGJWFXRPls/sBfC8nT0KQS8x7UUbomjy6LhQ=
Subject key identifier:   C7:C9:3A:99:8D:11:77:2A:51:A1:66:BD:10:BC:A3:57:FB:A9:20:37
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584A90A0A859D442FCE6C6D04A00
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/9853c903-f2c7-39ec-a317-f8c992870b21.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     19165
IP address blocks:        136.28.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a8:59:d4:42:fc:e6:c6:d0:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=ff030fdc-f892-4c21-bf6d-bb14233dbd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:cc:d2:d5:e7:c8:6a:f3:f0:7c:26:fa:7f:
                    8c:c7:88:ed:f2:66:06:79:45:1b:1b:f7:1e:63:f5:
                    45:c2:ac:3a:ce:23:1e:db:98:bb:eb:9a:65:67:24:
                    84:e0:c7:36:15:dc:a7:f1:3a:c4:a4:82:2e:50:aa:
                    d2:97:0b:2b:ce:2b:26:9e:6f:7a:a8:e6:01:a3:88:
                    84:ed:d7:ce:e8:d1:e0:6d:7c:4a:6b:71:36:62:f8:
                    6c:1d:91:a9:ef:3c:4f:6b:5a:71:49:c3:64:c4:2b:
                    5e:f6:c0:78:08:f2:45:5f:e2:2c:ec:4e:25:4c:78:
                    98:15:81:bc:8e:c1:24:ba:6a:1e:b3:a2:90:20:6b:
                    31:af:65:70:ac:d3:72:ee:af:22:08:4c:48:25:75:
                    9a:14:0e:2b:af:e2:34:6d:68:d4:47:bb:60:96:99:
                    9c:55:84:03:24:11:94:72:4e:39:2e:20:39:e2:a1:
                    d7:90:33:a1:1a:bf:33:6c:85:dd:9c:09:9b:1c:6b:
                    30:5b:09:1f:d5:66:3f:aa:7d:6b:fc:f4:87:f4:1b:
                    31:31:e5:42:56:ba:0e:27:98:27:0c:08:c5:54:e6:
                    62:bb:51:64:36:ac:e6:e5:18:d4:8f:f7:75:64:7b:
                    ea:18:9e:2a:ce:85:8e:de:45:c8:fe:48:81:4a:b4:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C9:3A:99:8D:11:77:2A:51:A1:66:BD:10:BC:A3:57:FB:A9:20:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/9853c903-f2c7-39ec-a317-f8c992870b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.28.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:86:dd:8e:4c:52:9d:78:96:6a:be:1c:1b:6a:00:e8:2d:0d:
         42:00:32:6f:01:d4:29:aa:95:20:80:bb:af:2e:53:81:84:04:
         5c:6b:91:4d:66:16:7f:46:d8:ef:70:49:19:0f:1c:4e:0e:5b:
         70:f5:55:73:76:28:05:40:5a:21:d5:2a:3d:7e:e1:36:e2:41:
         10:62:67:b0:af:79:a9:54:be:01:04:5c:d9:7f:8a:2a:06:3b:
         92:7f:4c:e2:8f:05:19:32:40:ab:55:84:c8:e6:b6:aa:26:68:
         e3:c2:f2:69:b6:2e:4d:8f:28:cc:63:f1:69:19:b5:f8:ac:3c:
         80:8d:8e:00:1f:18:28:6b:1d:3b:98:16:7a:fb:35:c9:b8:b8:
         e0:67:f6:d0:f2:15:c3:5f:15:8a:31:0e:83:00:eb:78:6b:05:
         39:42:f6:e2:2c:e5:0d:48:8d:5b:8d:56:e2:2d:38:d1:59:c2:
         37:67:94:6b:a5:59:6a:0e:96:65:10:bd:15:ec:de:3b:43:94:
         af:e1:95:91:3c:29:f4:42:7a:67:bc:68:77:1c:4b:06:54:02:
         a2:78:90:47:e7:d4:44:ab:47:a5:42:f1:83:c2:9e:80:61:31:
         eb:3b:69:3b:ff:8e:f0:a9:fb:70:2f:93:6b:a0:67:9c:29:9f:
         bc:d5:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:18 2025 by rpki-client