Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cfc79083-44a5-319d-87e2-52c2d4747cfc.roa
File:                     cfc79083-44a5-319d-87e2-52c2d4747cfc.roa (raw, json)
Hash identifier:          cXzjILq2t5Z2gc3gx0ILR81qZlW85bd5+Uj2t0h4ELE=
Subject key identifier:   EB:ED:0B:24:AD:65:D1:27:6E:83:F6:C7:4E:2A:A2:83:74:23:AE:2F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F4328584A7E7B8971F62EF3FBBC57FB00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cfc79083-44a5-319d-87e2-52c2d4747cfc.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        136.22.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:89:71:f6:2e:f3:fb:bc:57:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=675c4ae1-13d0-4ce1-bf64-0ab7117dc40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:73:2f:2c:5e:8b:7b:a5:69:97:53:df:00:
                    7b:df:c2:3c:84:16:23:d4:63:7c:16:92:2a:86:e0:
                    88:5d:70:dc:ae:a5:d4:36:ba:7b:18:68:8b:b5:8b:
                    a4:d2:40:e3:18:c7:b9:bf:ef:7e:1b:4b:52:60:09:
                    2e:32:17:f3:3b:fa:33:2c:0c:d2:3f:f3:54:f7:ae:
                    88:35:ee:cf:49:3e:43:9b:1f:55:d8:97:cb:9a:30:
                    b1:4a:28:78:5d:64:11:2c:91:02:b8:d7:75:d5:58:
                    eb:5c:9d:9b:ea:58:61:ea:8c:68:47:f2:02:23:b0:
                    b3:76:fd:ad:44:d3:0a:c1:53:be:29:1d:61:e1:b4:
                    b9:6e:fb:03:f2:14:aa:55:99:ff:6a:49:a2:2d:45:
                    ef:38:b7:0a:8f:8c:00:3c:d7:fc:99:b2:99:c2:ba:
                    67:0c:72:e2:d2:3f:f8:38:e7:d9:72:44:b8:1f:56:
                    96:66:e2:7c:f9:59:57:c9:1d:a0:04:af:4a:7f:02:
                    74:15:bb:32:61:c7:d1:d6:ba:d5:c4:c7:28:e3:39:
                    52:cd:bb:e8:ed:64:50:38:7a:dd:05:e3:f5:93:d0:
                    9d:71:be:96:b8:b6:d8:e3:27:30:5e:10:d0:7c:a0:
                    ba:f8:99:2b:18:dc:d5:93:95:b5:46:92:97:9d:2b:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:ED:0B:24:AD:65:D1:27:6E:83:F6:C7:4E:2A:A2:83:74:23:AE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cfc79083-44a5-319d-87e2-52c2d4747cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:28:6a:cb:68:98:f4:d4:16:d2:87:f4:25:41:1e:57:1c:
         12:11:aa:a6:52:9d:4b:22:be:0d:84:ee:ed:72:dc:08:67:65:
         68:7a:11:b1:f9:74:aa:c7:f2:bf:22:4d:5e:dc:f3:a1:65:35:
         a2:56:e0:7c:99:55:a6:22:70:75:7d:24:65:fc:79:67:fb:74:
         58:82:32:6f:10:f1:fd:8a:41:1b:96:0e:1a:b2:61:83:64:54:
         de:57:c3:ca:f5:07:9f:c5:04:10:66:2c:d7:2e:8c:07:fe:1f:
         73:e1:1c:b7:91:e0:39:c1:20:20:69:9d:74:8f:06:57:78:94:
         a5:0a:16:a6:3a:9e:9f:6b:05:1c:a4:37:10:ff:2a:b2:20:87:
         2f:d1:7f:ee:54:6e:fe:3e:42:a4:a4:48:e7:f5:ca:ce:6b:25:
         9a:be:f4:b9:26:5d:f3:2c:dc:6d:ac:2d:52:62:1f:91:fa:07:
         4e:f1:17:58:73:a8:ce:c4:13:58:a9:87:0e:05:ac:38:e6:30:
         72:d1:1b:01:2e:08:fc:3f:0c:c5:cf:0e:93:3f:05:37:56:74:
         f7:7e:e5:12:23:b8:2a:71:83:ba:e6:b6:57:c1:cc:7b:c9:2a:
         ef:ca:8c:64:54:92:40:39:89:9f:33:c8:9a:d5:1d:4d:a4:2d:
         2b:a6:a7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:18 2025 by rpki-client