Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa
File:                     6db07d60-40ed-3ad4-a297-e8c49b593112.roa (raw, json)
Hash identifier:          oU8dyuKm+SQVYqsazzjD0Wt5Ey3a/EECJFF8YSY0RP8=
Subject key identifier:   29:FF:B8:77:40:DE:C6:EE:0C:D8:3D:A0:07:EF:09:6B:C7:E7:8A:57
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858499F24B5E3E84AB3D696B40660
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        136.22.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:b5:e3:e8:4a:b3:d6:96:b4:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=6c4e357f-7ced-47f7-bb7b-e62aa7c2987e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:18:0f:98:7f:d1:73:09:a0:43:91:11:f4:ff:
                    78:ae:5b:c0:6b:e1:e4:e5:6b:f4:fc:2d:70:51:99:
                    8c:79:4a:b2:cc:70:b0:3e:08:0c:95:e0:3e:bd:b2:
                    4c:74:60:62:6a:1c:74:bd:b6:6d:3e:c3:31:18:4b:
                    cf:8b:6a:83:1e:2d:9d:6d:2c:36:80:a2:8e:0b:ec:
                    13:45:6f:87:86:f6:28:40:23:0a:c4:ef:fe:aa:7d:
                    7a:64:a8:79:1f:2c:6e:8f:df:6d:aa:d3:3e:bf:e9:
                    b9:38:8f:ba:e6:c5:7b:9e:00:56:75:18:c5:5c:d6:
                    56:04:42:f6:e7:c7:37:f1:b3:ce:90:1a:76:60:f5:
                    f3:cb:a1:bd:ab:b0:68:82:60:ae:a7:5e:5d:09:26:
                    e7:fc:4d:66:70:f3:d3:a1:cd:0e:41:b5:e0:aa:68:
                    7e:35:7f:14:b0:67:e4:49:af:2b:60:7a:e3:1d:cb:
                    55:aa:b8:1a:f3:94:0b:85:6e:a7:87:90:89:40:2e:
                    bc:fb:1c:09:3d:1b:43:44:11:48:41:db:e5:19:ca:
                    62:af:ec:b8:d6:1a:98:6e:6f:79:a0:c0:ac:7e:ff:
                    0e:0b:37:87:a8:e5:63:2a:53:ec:c8:3b:4e:91:29:
                    08:a5:da:10:d6:c5:37:54:3d:8d:8f:0e:de:56:90:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FF:B8:77:40:DE:C6:EE:0C:D8:3D:A0:07:EF:09:6B:C7:E7:8A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/6db07d60-40ed-3ad4-a297-e8c49b593112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:03:6f:35:ed:68:55:2e:42:88:eb:87:eb:9a:7e:30:75:17:
         7d:8f:03:d1:5c:20:3e:29:8e:3f:20:f1:62:33:3a:8c:2d:3a:
         d1:63:9d:ab:33:c4:b0:a0:93:b5:93:e6:10:06:be:ee:3b:bf:
         f1:0e:91:08:a2:b9:00:9b:0d:06:c6:34:a7:77:9e:89:bd:69:
         a2:10:8d:fa:cf:e9:e1:68:02:75:7e:43:e4:90:91:a9:f8:cc:
         12:cc:b6:19:10:37:25:ad:23:be:03:9e:9e:f7:f4:c6:9b:df:
         c6:38:81:a7:7e:1c:d6:cb:6d:05:c1:59:2b:27:3b:82:63:59:
         33:cf:9d:f5:c1:7b:62:52:c6:01:ef:4b:b3:d1:2d:b0:54:7a:
         f6:a6:40:bc:2a:b7:01:2f:cf:73:57:c7:f1:a9:65:bc:ad:11:
         14:d0:4b:06:45:e5:41:14:23:af:d6:2c:2c:a4:be:90:9c:de:
         9f:31:58:78:7c:54:17:7d:17:b8:66:77:69:c3:db:0c:9b:29:
         6c:b7:1d:d6:65:a0:1e:b1:9d:c2:df:ab:0b:ca:57:a5:94:42:
         2b:e9:77:c8:12:8a:b4:36:74:26:b9:a7:cb:84:cc:b8:7f:06:
         6b:53:58:de:35:41:0a:ad:fa:be:14:44:81:e4:1b:f9:5f:a3:
         d6:54:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:50:35 2025 by rpki-client