Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0431d5c3-e313-37a5-8362-b85e4b398aa8.roa
File:                     0431d5c3-e313-37a5-8362-b85e4b398aa8.roa (raw, json)
Hash identifier:          F4LvL6e1Em67YkAJtRCkIwb4ZQ8/id3j6FZmdidKO24=
Subject key identifier:   4B:7B:CC:E1:49:BA:39:03:3F:C2:72:17:BC:92:C0:AA:AB:62:D1:A0
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584A90A0C4AE9441BBF3AD093C00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0431d5c3-e313-37a5-8362-b85e4b398aa8.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        136.245.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c4:ae:94:41:bb:f3:ad:09:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=3955e43a-9d96-4f15-9e42-131b0f094c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:40:a7:67:29:02:7d:34:66:7f:06:00:2d:
                    ba:0b:04:c7:b1:cb:a0:98:51:e1:c7:85:bf:b1:1c:
                    0d:06:7a:87:0b:b0:83:aa:5e:0b:05:ac:5c:0d:44:
                    79:91:e3:c1:65:4c:3f:9e:b1:9f:1e:6f:51:ed:49:
                    85:7d:3b:a0:d7:b3:17:11:28:85:44:b5:7f:2c:87:
                    7d:2c:b7:1b:dd:d7:a8:3b:31:01:7a:96:37:d3:0d:
                    56:28:3d:e3:c9:d6:08:ff:db:3e:e8:40:fc:35:a8:
                    39:7e:ed:7f:68:a9:87:0a:b4:81:5b:64:a9:6c:ad:
                    09:1a:de:a9:9a:91:7e:de:91:10:c8:60:5b:bd:49:
                    b5:a7:40:2f:39:e3:e7:f0:8c:72:59:16:69:e9:ce:
                    a1:44:49:12:97:53:10:a5:b1:26:d7:c3:12:28:52:
                    85:9c:d7:f6:c0:4d:91:31:ea:ca:1f:9e:df:6d:20:
                    f7:fd:09:2d:86:69:71:d0:99:b3:30:3f:45:71:18:
                    50:4d:4f:b8:35:4f:83:a2:bf:d4:84:7f:36:77:a9:
                    63:62:4d:28:bc:74:d1:21:f4:ac:96:b1:65:88:fb:
                    a5:b6:90:2a:14:a8:8d:a8:25:96:bd:56:1f:0d:c8:
                    86:29:b5:6b:0a:f0:b8:19:45:47:ec:61:4a:7b:fa:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7B:CC:E1:49:BA:39:03:3F:C2:72:17:BC:92:C0:AA:AB:62:D1:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0431d5c3-e313-37a5-8362-b85e4b398aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.245.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c5:99:eb:34:50:a2:1c:8e:84:68:da:64:29:fc:8e:f6:b9:
         98:76:3e:0f:35:31:22:61:d0:e3:1a:4d:b7:3e:10:8e:b9:5d:
         6f:e4:7b:27:0a:78:e4:35:fb:47:ef:0a:6d:49:89:62:e1:fa:
         87:92:78:ae:5e:02:3c:a4:16:94:00:c1:86:a3:da:4d:9e:fd:
         8c:7c:88:67:a6:a2:3b:b4:c6:11:8f:f4:23:ac:33:72:59:80:
         a4:26:c2:6f:c5:b1:f8:80:cb:ca:6b:aa:91:17:91:11:8f:ca:
         fb:96:78:76:07:ef:ff:67:7d:ff:47:76:f0:02:cb:d0:c9:c9:
         f1:89:17:a7:09:64:dc:d3:73:98:e8:31:f8:56:b3:cc:b3:e8:
         fb:11:e4:64:c7:ae:39:f0:d3:fc:15:25:01:40:0a:f3:f9:15:
         da:d1:8f:a7:50:2f:8b:1d:ca:07:6c:c4:cf:31:27:45:dc:40:
         8d:d9:b1:c2:d2:70:ff:cb:a5:d8:29:da:61:bc:4a:c6:17:d0:
         3e:ea:27:5a:50:48:27:17:36:41:b9:bb:91:6a:10:63:93:70:
         cd:29:fb:55:ae:e1:28:fe:bf:59:f8:ca:b8:e9:d7:7c:5c:70:
         33:53:17:d3:2a:2b:fe:78:22:09:6c:69:13:71:83:ce:a0:3c:
         31:a2:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:24:37 2025 by rpki-client