Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/e23dc04a-b46a-3d80-b52a-c19f01de72b5.roa
File:                     e23dc04a-b46a-3d80-b52a-c19f01de72b5.roa (raw, json)
Hash identifier:          xgEQo1oVlcLa5k4LJrKCFqlPQADdJ8NE2ht/rT2kDbM=
Subject key identifier:   B4:6A:0E:05:B4:5B:8C:68:B5:10:CB:42:20:5C:22:64:48:3D:09:D7
Certificate issuer:       /CN=45c66754-6161-4548-b519-3f3f38d6030b
Certificate serial:       010D0C9F4328584ABD4B77BA32D2D2F408C5D990
Authority key identifier: 73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/e23dc04a-b46a-3d80-b52a-c19f01de72b5.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16509
IP address blocks:        136.175.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:77:ba:32:d2:d2:f4:08:c5:d9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c66754-6161-4548-b519-3f3f38d6030b
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=f6065a7d-9731-4b67-a796-c1f99d71626f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cc:9e:60:7a:21:77:4f:bf:83:6b:51:c6:fe:
                    d1:61:85:5a:1f:60:cb:68:d3:f7:ea:39:6d:cb:16:
                    0f:7c:37:c1:88:d5:c0:b6:f2:60:e3:2e:ca:18:7c:
                    f9:c6:7b:b5:d2:4e:73:76:03:a8:91:b8:77:54:5c:
                    fa:5e:1f:2b:ce:84:c2:bc:23:22:45:f0:d8:46:be:
                    c6:e9:e1:6a:90:2f:e9:96:44:88:67:7b:20:c6:89:
                    e1:28:11:0e:fe:e5:b8:d0:a5:c6:21:e7:f4:d5:25:
                    1c:8f:a3:bb:03:d0:a8:ee:8e:58:7d:e4:6d:69:b4:
                    16:c9:f3:24:2d:6b:17:65:7b:3e:8e:35:8b:23:4a:
                    0c:56:9e:fa:3e:c4:7a:2d:2a:df:34:83:29:ee:4b:
                    2b:00:23:7e:f0:42:df:c4:68:37:94:86:e8:cf:6e:
                    ca:21:55:62:9b:82:ff:fc:25:2f:48:6e:78:3c:2e:
                    7a:b0:f4:56:a7:1d:22:8b:12:7f:aa:5e:51:d3:05:
                    ae:25:bb:86:5f:31:30:bd:fa:56:e7:42:06:96:7d:
                    48:39:15:e0:af:41:b1:20:03:04:0d:b7:12:7f:62:
                    6a:a6:5c:96:dc:bd:7a:9c:70:ed:b7:d0:d2:7a:76:
                    0c:76:9c:f5:ba:c6:14:9f:2b:03:f6:4d:68:be:dd:
                    45:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6A:0E:05:B4:5B:8C:68:B5:10:CB:42:20:5C:22:64:48:3D:09:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/e23dc04a-b46a-3d80-b52a-c19f01de72b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b/45c66754-6161-4548-b519-3f3f38d6030b.crl

            X509v3 Authority Key Identifier:
                keyid:73:4A:E2:1F:5C:28:AF:8E:91:9A:0D:39:7E:F4:21:94:35:3C:38:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45c66754-6161-4548-b519-3f3f38d6030b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fb:01:e1:b7:e1:7e:7f:c4:3b:58:ea:b1:b9:d6:1e:13:bd:
         fc:cf:eb:60:56:71:94:d7:ab:c5:7b:69:62:dd:39:20:df:34:
         5a:1d:87:9d:36:71:19:c9:e9:23:66:ea:0d:0e:27:6e:0b:d3:
         e7:f6:6f:83:7d:9b:3c:39:e5:dd:38:f6:4a:62:8d:f5:1d:59:
         8c:31:13:a3:77:21:e7:83:20:06:98:4d:d4:9d:87:6f:9b:c3:
         3f:24:a9:44:4a:6b:04:6b:a4:4f:58:4a:70:e8:22:f1:61:65:
         37:73:5e:d2:f4:8d:ee:1d:35:c9:07:83:c5:0e:ea:0e:17:27:
         ab:27:41:59:37:0e:aa:c5:62:2f:37:f9:bf:d9:a5:06:a1:71:
         da:44:b0:fa:a9:38:fb:3e:38:d8:6b:bc:2e:aa:1b:d7:a2:e0:
         ec:6a:6a:6f:9d:9d:74:04:1a:40:39:54:39:ee:fa:82:55:5e:
         fd:b6:6f:2d:8b:13:cb:5a:fa:8b:1f:26:f3:aa:db:00:5e:03:
         60:38:85:b8:3b:49:08:96:df:45:43:b9:b2:b4:6c:c6:dc:58:
         b1:b8:db:45:4a:b4:95:d4:7e:52:e7:dc:68:52:0a:60:0e:f0:
         9a:e7:aa:1b:77:25:a5:c4:7b:eb:2b:fe:c2:1c:d8:65:18:dd:
         be:af:78:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:06 2025 by rpki-client