Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/9b932496-8617-3782-b323-f91a6e65e5ac.roa
File:                     9b932496-8617-3782-b323-f91a6e65e5ac.roa (raw, json)
Hash identifier:          vJB9Uh+Uu53yVycXWgeBEITPCVSjWhCkQtMDw/AzNxc=
Subject key identifier:   2B:EB:67:EF:35:A2:E0:B3:29:8D:86:7E:5B:FC:AB:6E:BB:BF:A6:89
Certificate issuer:       /CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507
Certificate serial:       010D0C9F4328584AB4EF0598CBB1248809B28840
Authority key identifier: 31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/9b932496-8617-3782-b323-f91a6e65e5ac.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     13447
IP address blocks:        136.227.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:05:98:cb:b1:24:88:09:b2:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da4555e-4472-4f7d-b9f9-c0b1d2714507
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=f11c5f1f-2286-4c00-9d7a-83bf156d30a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:ed:f7:b3:01:f8:d0:a7:6f:73:15:f6:21:
                    b3:2d:e7:80:55:36:39:40:46:25:6e:be:a9:4a:84:
                    e1:6e:8c:e7:85:65:55:6c:c7:55:11:07:e3:9e:c2:
                    c5:9f:ed:e6:23:69:be:80:6f:5f:af:6f:c9:37:75:
                    8b:f2:0b:fb:64:30:14:2b:9f:58:2e:ab:43:4c:b8:
                    8d:3b:65:13:cc:5e:d2:d9:97:20:f8:9e:bc:7b:c0:
                    8a:ed:fb:1b:02:b6:eb:21:0b:8e:e6:b3:1c:b0:e3:
                    c2:7d:5f:bf:58:78:8b:b5:93:8f:2a:b1:27:19:14:
                    d4:82:ed:07:cb:fd:1e:c0:05:19:d8:d5:d2:d2:10:
                    fb:cb:05:0f:0c:86:86:82:11:fb:60:6c:5d:45:ff:
                    40:44:62:9c:f2:b5:fa:ed:17:ac:ca:4e:2a:78:ea:
                    cd:31:fe:ea:40:68:50:28:26:0b:a7:1c:f3:32:1f:
                    7c:ec:6a:c8:f9:75:f5:44:67:f8:28:e6:ae:ab:a9:
                    c3:4b:95:b7:4f:e6:45:6b:80:19:61:de:78:f7:0b:
                    ab:ce:0e:58:cb:23:ef:29:09:cb:9b:37:46:82:4a:
                    c0:c0:7e:e7:c2:ae:79:c2:b9:88:e1:7c:38:0c:48:
                    43:68:e5:c3:95:f6:ae:29:11:f3:9b:b4:0b:26:62:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EB:67:EF:35:A2:E0:B3:29:8D:86:7E:5B:FC:AB:6E:BB:BF:A6:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/9b932496-8617-3782-b323-f91a6e65e5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507/7da4555e-4472-4f7d-b9f9-c0b1d2714507.crl

            X509v3 Authority Key Identifier:
                keyid:31:04:BC:DF:1D:2F:F1:FE:E3:E9:70:50:3C:75:B9:B8:06:FB:8D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7da4555e-4472-4f7d-b9f9-c0b1d2714507.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.227.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:2b:f6:3f:49:19:84:d9:e4:af:c7:32:63:44:37:d6:3d:0e:
         ba:54:4d:01:a4:f2:c8:7c:a4:c7:6f:a2:1c:cd:be:4e:60:f2:
         e8:14:14:9b:2b:51:3b:96:6c:91:f6:b6:93:c5:8a:1b:17:4f:
         52:6c:61:4f:6c:35:69:46:4c:33:50:c8:6e:05:32:f3:8b:54:
         7b:7d:29:03:d3:a1:b9:91:ef:ae:6e:01:ad:04:cb:73:d2:c8:
         83:b0:bc:17:03:98:e9:37:d2:48:05:a3:80:de:4d:3a:33:ce:
         84:15:c6:e4:3a:2b:02:c6:b0:4f:32:ec:73:ae:77:5b:aa:92:
         36:5d:17:bd:c2:2b:59:1c:53:ac:5a:de:bf:9a:81:13:b3:01:
         85:98:52:fc:27:6c:b0:40:88:98:4d:3d:ee:7b:c0:3b:3e:83:
         5a:d0:a1:0c:df:57:7b:d4:42:41:51:60:3b:3d:cd:f2:f1:6a:
         bb:b4:35:89:ef:53:d1:92:1a:63:29:61:f7:54:15:c7:8e:3a:
         28:e6:0f:be:4b:e7:22:b8:d5:50:8d:74:9f:a9:fa:d0:9e:4a:
         4c:84:3b:6c:ff:c3:9a:89:a9:dc:71:e6:ce:fd:ef:52:7f:72:
         50:35:a6:bd:f4:66:75:1f:91:b9:93:1c:40:bb:ad:13:f6:ec:
         1d:d9:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:15:03 2025 by rpki-client