Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/763cfa6e-9e26-3e14-88ad-6b57d696a4c4.roa
File:                     763cfa6e-9e26-3e14-88ad-6b57d696a4c4.roa (raw, json)
Hash identifier:          Jp7e+kfUNQqya9ApT9++c+kjlVM6kryQIkPpx/UOTCo=
Subject key identifier:   FD:FF:8E:86:7D:E1:5A:67:11:09:D7:4C:0A:B9:66:33:D6:83:71:AE
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858499F24DB0E51E39B6D3B2ABDE0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/763cfa6e-9e26-3e14-88ad-6b57d696a4c4.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        136.22.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:db:0e:51:e3:9b:6d:3b:2a:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=3ab5f23d-24bb-4b82-8289-03b7a35b6153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c7:27:81:b3:90:a9:f5:9a:3a:5d:08:75:cb:
                    60:aa:35:56:a7:c8:4e:d7:30:ac:5d:46:15:b1:87:
                    7e:b7:8d:46:b8:61:6a:d7:d6:81:68:c4:e2:ef:9f:
                    dd:15:ed:ec:81:90:d7:ca:de:a4:6b:95:5e:72:24:
                    14:44:2c:69:d7:5f:c8:d0:15:6b:1a:14:9f:e1:cb:
                    dd:73:82:26:b0:f0:37:ff:2b:d0:e3:47:fe:62:8b:
                    9d:88:40:43:fe:95:49:4d:78:76:9a:7f:0f:16:5a:
                    ea:3b:ee:a2:71:b6:ae:6c:08:f3:38:76:0b:e0:81:
                    1a:c9:70:a8:8f:8b:6f:f0:c5:53:a4:a4:d8:b5:4e:
                    0a:0b:ad:e3:60:f5:22:f5:32:a2:82:13:38:e4:91:
                    8a:14:70:2a:59:a3:6d:28:33:74:6b:aa:1c:fb:a3:
                    6e:4f:37:23:a4:5b:22:38:88:16:36:2f:f6:3f:43:
                    1e:80:0a:23:a6:f9:77:9d:e1:b3:e6:4d:d2:79:d2:
                    cf:b6:87:19:89:b5:ce:62:c4:d2:a9:b0:c9:e5:6b:
                    31:ae:48:62:e4:8f:41:39:63:ea:f4:2a:a0:f8:a0:
                    47:7f:4c:a8:76:e3:f1:0f:e1:af:64:e5:ac:bf:e6:
                    ce:5d:ea:8b:d8:a2:59:ec:e7:19:ec:0d:c2:5d:c1:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FF:8E:86:7D:E1:5A:67:11:09:D7:4C:0A:B9:66:33:D6:83:71:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/763cfa6e-9e26-3e14-88ad-6b57d696a4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:06:25:4c:72:86:f9:6b:36:56:f7:32:0f:a1:77:ce:70:62:
         6a:ab:0b:31:c1:00:90:ac:ee:13:ab:4b:f8:3b:9b:1a:49:c4:
         ad:1b:98:06:d3:5e:af:51:db:65:4f:03:46:8f:e0:76:84:ec:
         5a:d6:b3:5a:65:5c:10:5a:5e:d3:38:81:5d:bd:5f:d7:3a:a5:
         a8:14:34:e1:60:51:04:a4:9f:26:55:c8:f4:2e:c3:7a:3f:5a:
         37:83:5c:2a:52:1c:87:ac:c5:39:ea:42:e8:0e:ab:ff:a8:a9:
         e9:9a:5d:c7:7c:36:ae:bc:fb:06:5a:bc:17:75:37:ec:2d:a1:
         8f:85:7b:d2:0f:6a:8a:d9:7e:ae:6a:3f:68:7f:8e:1c:fe:68:
         a5:d0:f6:60:4f:31:59:d8:b0:08:24:75:48:06:fc:0f:60:c4:
         27:cb:f0:b5:d7:3a:08:c0:3c:b3:00:c6:d5:2f:ea:5f:32:86:
         c8:74:57:66:9a:e4:60:fc:33:84:80:fc:7d:4b:64:36:26:10:
         1a:ac:91:13:3d:27:02:9f:22:2e:60:35:a2:e7:37:55:26:f6:
         31:8f:08:3e:64:38:82:8f:59:f4:28:33:9e:c9:ad:1b:46:24:
         db:6d:3a:7e:86:68:ad:24:b2:9a:10:4c:4a:19:a7:60:3d:aa:
         c6:d4:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:58 2025 by rpki-client