Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
File:                     a6e045d3-3586-3be0-8f1c-ee95cb321013.roa (raw, json)
Hash identifier:          WogxozSwKLUGViBQA561Y7mO7u7Nqqots2OjvXMC7Ao=
Subject key identifier:   C2:29:32:BA:97:D9:17:F6:3C:25:E2:53:6C:66:40:E1:C5:73:6E:2C
Certificate issuer:       /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial:       010D0C9F4328584A23C0176CA0F14CB19F4FDE80
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     5065
IP address blocks:        174.136.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:17:6c:a0:f1:4c:b1:9f:4f:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=939844bd-c3b9-467b-9877-fc52c37844c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:43:31:ff:93:79:cd:2c:47:f3:47:0b:99:
                    16:c0:0d:5b:42:1c:c7:fc:c0:e4:08:27:c2:11:80:
                    7e:58:c2:30:54:11:cf:b0:c9:75:ba:15:7a:47:77:
                    8c:29:9d:fc:33:c8:29:75:7a:8f:6a:7a:8b:dd:27:
                    27:0e:9c:67:f1:fb:90:c1:6e:d5:16:97:3d:6a:92:
                    bc:c1:54:61:d6:3d:2e:01:52:da:94:24:36:7c:43:
                    e8:f7:ff:36:e6:65:18:c5:8b:9c:6a:d2:64:6c:3f:
                    ac:5d:ce:d2:d4:38:32:cf:51:0c:28:72:80:ba:91:
                    e4:0d:98:56:bf:03:bb:e4:18:39:e0:f0:39:53:b2:
                    ae:8b:89:9e:cb:6e:77:1a:7b:f1:30:7e:f7:84:16:
                    25:c4:31:8f:97:21:75:ec:b5:85:fe:0d:d2:e0:c8:
                    57:09:f9:af:50:65:d7:d9:ed:c4:24:1a:03:6d:b0:
                    97:8c:22:53:74:51:04:6b:44:3f:46:88:e8:02:5c:
                    f5:68:99:4c:71:2d:fb:89:df:ce:a8:6e:3c:32:c6:
                    a8:08:0a:7e:44:6a:dd:36:2b:01:85:77:e6:9b:a2:
                    bb:b6:61:51:8b:f3:61:83:48:0e:71:ad:cb:94:c1:
                    1f:30:9e:4e:2d:91:7f:ca:4e:e9:7e:8a:8b:d4:1b:
                    bc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:29:32:BA:97:D9:17:F6:3C:25:E2:53:6C:66:40:E1:C5:73:6E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl

            X509v3 Authority Key Identifier:
                keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:46:d2:4f:49:94:d2:c2:99:96:d0:c2:ba:02:2d:3d:1c:18:
         49:07:74:45:19:b6:74:4e:88:0a:88:24:9d:a5:58:5b:f6:84:
         af:af:00:5e:43:49:ce:25:6a:bc:8d:17:46:ef:6b:bc:16:ea:
         7f:31:f7:83:9e:6e:43:3f:73:90:63:c3:ac:d3:d7:0c:e8:dd:
         47:69:6c:06:f1:6d:10:11:3c:1e:6e:07:76:f2:2f:71:7c:a9:
         8c:c0:ba:72:f6:10:1a:53:31:24:8f:2e:3a:1b:14:9f:d6:6c:
         b2:a3:2b:1f:e1:43:f6:93:f3:07:c6:8e:e5:cf:9f:a7:d9:75:
         46:4b:b7:e4:fb:77:36:5c:f6:18:c5:77:d4:78:3d:9b:bb:5d:
         41:70:29:d0:41:96:e6:b8:a8:ff:57:09:be:e2:15:cb:6d:3b:
         66:e2:37:5b:2f:2a:b2:98:4c:fa:8a:ad:7e:c9:20:e1:7c:53:
         fc:d4:84:5a:6b:c5:68:88:7d:31:27:e0:83:48:90:f1:75:fb:
         a2:69:0d:21:24:05:8e:0f:0c:89:c4:cd:70:bf:b2:66:32:71:
         cf:6a:c6:86:39:ed:69:fd:52:0e:4a:66:38:db:39:18:59:17:
         75:04:9d:5f:96:0e:ac:eb:3a:40:06:96:80:5f:73:1a:ce:4c:
         aa:80:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:50:22 2025 by rpki-client