Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa
File:                     9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa (raw, json)
Hash identifier:          /vwH/XBCT4pw5fZwndp0mdYJRV2QoXyly31nKnjPrLI=
Subject key identifier:   73:3D:22:3F:A9:21:3A:5D:D0:69:5A:24:58:26:41:2C:1F:31:65:52
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584A8C70D180EA3526E23D2B8F40
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     401170
IP address blocks:        23.181.136.0/25 maxlen: 25
                          23.181.136.0/26 maxlen: 26
                          23.181.136.0/27 maxlen: 27
                          23.181.136.0/28 maxlen: 28
                          23.181.136.0/29 maxlen: 29
                          23.181.136.0/30 maxlen: 30
                          23.181.136.0/31 maxlen: 31
                          23.181.136.0/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d1:80:ea:35:26:e2:3d:2b:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=6248430e-53bc-4562-ba5a-f4ae14de8052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:67:51:a9:68:75:ef:16:b5:07:99:07:16:
                    f4:d5:26:5e:04:68:ed:b7:c1:15:d1:f8:46:13:37:
                    41:27:7e:0d:80:13:57:91:03:d3:fe:9f:3b:85:de:
                    a0:27:83:7c:68:e9:0c:62:a5:db:40:13:61:7e:26:
                    7e:8e:ac:d7:61:bf:d4:52:1a:41:1c:32:2b:c8:98:
                    3a:e1:b2:87:24:c1:c3:05:8c:15:ab:b0:d5:5f:45:
                    de:dd:f6:2e:c0:be:d7:0a:9a:9a:39:8f:e5:66:ce:
                    ed:a0:9f:7a:cb:c2:bc:4c:ee:81:fb:4e:94:37:3b:
                    de:62:c5:85:6b:61:92:0e:14:b3:ae:44:28:ea:3e:
                    b7:07:00:38:ce:2f:12:b8:e3:88:da:b5:6a:38:1b:
                    0a:9a:72:c8:2f:e0:8a:e6:d0:40:4e:e4:d9:36:bb:
                    34:37:52:c4:ca:ce:c2:d6:68:9f:43:2a:c1:3d:c6:
                    97:9e:33:6a:13:99:af:cd:ec:29:cc:26:14:01:39:
                    20:66:e3:a9:41:cd:eb:2b:d6:32:6b:8c:1f:fc:58:
                    5f:dd:3b:86:51:cc:b3:dc:08:30:7d:c5:9b:64:c7:
                    8b:4e:ba:86:ce:0b:ee:b2:75:ad:85:e2:f6:97:39:
                    7f:54:15:e8:ad:d7:3a:b8:c3:67:4d:39:d9:9c:65:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3D:22:3F:A9:21:3A:5D:D0:69:5A:24:58:26:41:2C:1F:31:65:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.136.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:2f:dd:2b:d0:15:04:0a:80:43:0f:4c:2f:d7:9c:18:5e:
         a3:9b:d8:68:20:e6:0d:76:f9:13:e8:04:be:bf:23:49:e8:a5:
         cd:76:bf:f2:cb:bc:f1:1c:e5:15:3a:c2:09:6e:2c:64:eb:cd:
         c1:2e:9b:34:a9:f4:e4:6c:7a:df:40:87:15:d0:67:47:05:00:
         db:85:a3:85:e7:db:22:3e:ed:39:de:71:d3:2f:ce:3a:d8:f9:
         c1:c5:1b:a4:e5:c4:8d:b8:fe:72:cf:b8:2f:35:6d:d1:e1:6c:
         eb:0e:87:fd:de:ca:bf:b7:3d:e5:ff:3c:1f:18:79:24:66:df:
         67:03:1b:73:64:50:12:56:a9:76:bb:0d:66:22:77:8b:2d:13:
         19:8e:26:34:e9:c6:ec:e7:00:5d:85:a2:6c:93:68:76:3d:cb:
         26:63:c3:8e:0d:b5:2c:d4:0a:52:bf:50:02:04:1a:61:42:e9:
         81:90:a6:ef:77:96:7b:f2:db:6d:02:18:15:96:ce:8b:ac:53:
         ff:a8:a2:c7:82:59:dd:8d:e2:35:29:25:96:01:24:5d:03:02:
         9e:bc:7c:b1:61:f8:a2:43:62:db:8e:3c:96:83:aa:08:91:18:
         30:60:55:f0:ae:0f:47:42:09:77:0f:68:68:67:78:a8:5f:14:
         9b:c9:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:13 2025 by rpki-client