Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/624680ae-44d7-36e5-afc4-41388607f3d1.roa
File:                     624680ae-44d7-36e5-afc4-41388607f3d1.roa (raw, json)
Hash identifier:          qGIib4PT10KJ6Oj/kR14dwusk+7fYQ1DG+B57VWHBe4=
Subject key identifier:   9B:10:46:E9:E3:75:29:1E:D7:31:FC:F0:C8:D9:49:15:BF:1B:28:79
Certificate issuer:       /CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507
Certificate serial:       010D0C9F4328584B95A7876932095414C67FAB00
Authority key identifier: 31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/624680ae-44d7-36e5-afc4-41388607f3d1.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     13447
IP address blocks:        136.227.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:87:69:32:09:54:14:c6:7f:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=36d0f1a5-a8e0-437a-b85b-bd57c8ba76de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:4d:e9:cc:b1:e5:e0:83:d2:9a:c4:e5:00:
                    f3:c7:32:93:9b:d9:e5:e2:32:bc:30:95:8e:5d:39:
                    00:82:23:a7:f3:63:06:7e:89:c5:ce:0f:09:d3:db:
                    89:a6:34:df:41:24:eb:34:f0:9d:56:cc:96:8f:c9:
                    2a:0b:64:95:0d:bb:a1:04:48:2a:12:e9:cc:92:eb:
                    33:07:67:1b:48:fb:c8:2d:07:c3:8c:9a:e5:1a:c4:
                    0b:ab:88:53:82:0a:78:79:9a:5a:ba:cf:b2:ce:c1:
                    41:30:f5:18:6d:e0:fe:95:ea:0e:03:78:21:0f:51:
                    56:b5:4b:9b:d2:5a:e9:1d:56:e8:47:1c:ca:c4:03:
                    f9:ac:df:5e:4d:83:75:d3:35:00:c9:79:5f:b9:2b:
                    83:fa:f9:fe:80:eb:0d:a9:76:c5:0b:15:a2:44:e4:
                    b0:c7:c2:97:3c:c3:50:77:e7:f6:5a:fb:6a:91:21:
                    a8:d8:49:2b:f3:be:99:9b:57:04:88:82:b8:5c:0f:
                    be:6b:d4:84:ee:21:24:d6:2c:7b:12:36:5f:f8:6a:
                    d4:bc:8c:1f:73:4d:08:71:da:6f:76:45:fa:84:09:
                    7f:b4:0d:dc:ef:af:bf:d8:d4:aa:6c:80:17:8a:e7:
                    58:72:6c:b8:f9:26:cc:7b:f3:25:23:9f:a2:40:09:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:10:46:E9:E3:75:29:1E:D7:31:FC:F0:C8:D9:49:15:BF:1B:28:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/624680ae-44d7-36e5-afc4-41388607f3d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl

            X509v3 Authority Key Identifier:
                keyid:31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.227.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:26:5a:1e:b7:16:3a:57:2e:11:ad:b0:05:ee:1e:f5:82:3a:
         ed:d8:7a:f3:ba:99:13:0b:3e:75:08:9a:dc:dd:67:fa:10:4a:
         b4:b8:1a:60:b1:6f:bc:56:12:5c:c6:54:01:cf:b3:d6:13:c1:
         bf:48:67:11:e2:7d:8b:da:b0:76:72:35:da:40:d1:e4:be:d9:
         66:f8:8f:d1:4a:ee:1a:39:6d:b9:1c:98:c6:16:76:02:91:d3:
         71:d6:26:a2:6f:b8:93:cc:0b:52:4f:02:f9:41:81:64:65:c6:
         48:cb:d6:09:e9:5c:ea:91:68:fb:62:a9:84:3e:66:05:79:ce:
         c9:a9:af:72:87:0c:f3:0d:f3:f7:c7:ee:4b:31:a9:43:89:42:
         10:b7:70:99:f7:b3:01:c6:7b:7e:6f:5e:1b:04:bb:f0:e8:32:
         fc:62:90:0d:77:62:02:f9:9a:f5:62:a1:79:05:18:0b:2d:85:
         44:f4:99:12:e1:55:c6:9c:03:bc:65:33:88:e8:ba:f4:fa:e2:
         8d:ff:ac:b2:de:4d:df:da:52:2b:f4:da:18:21:e3:50:27:b0:
         a4:80:39:ce:91:a7:fe:c3:da:3c:25:5b:05:05:4a:60:5f:47:
         65:68:f1:88:06:16:d5:c5:43:ff:1f:e1:08:d8:66:de:25:5a:
         36:58:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:12:53 2025 by rpki-client