Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/653b963f-a553-3554-a571-619ed9f7c4e3.roa
File:                     653b963f-a553-3554-a571-619ed9f7c4e3.roa (raw, json)
Hash identifier:          9kHYMUKrM4y1ca60rw38K1O73J+NciyaQhVYp2G9Daw=
Subject key identifier:   90:C4:87:21:D1:42:DB:D5:86:A8:76:97:F6:B6:CE:C0:D3:88:C5:39
Certificate issuer:       /CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
Certificate serial:       010D0C9F4328584AC2E0D7A79604AD5BF339F360
Authority key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/653b963f-a553-3554-a571-619ed9f7c4e3.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     62490
IP address blocks:        136.175.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:d7:a7:96:04:ad:5b:f3:39:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=69802212-65a5-44fa-8f6c-674c2c0dad0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:50:a4:27:ab:86:0f:e7:1b:2c:50:88:eb:
                    44:d7:49:49:cd:de:13:ba:b7:f2:17:30:8c:25:f9:
                    68:b4:bf:64:61:5e:8c:44:da:89:cb:b5:36:1d:30:
                    c1:12:8d:c7:ad:39:1b:4b:97:dc:09:da:98:80:47:
                    fb:d6:d7:e6:75:fe:6a:08:e9:cc:ea:75:66:d5:f9:
                    89:8e:83:61:16:64:f7:33:98:b3:75:5f:75:b4:22:
                    76:9c:19:79:20:c2:bc:b0:b3:42:ce:7d:ca:ca:1e:
                    ed:65:37:74:f0:06:0e:19:ec:71:22:13:c5:4a:c6:
                    72:94:c6:2f:dd:b1:3e:42:fd:2b:c7:d4:fa:47:f8:
                    10:9b:db:e7:59:e6:c5:c4:81:30:75:0b:6e:c0:df:
                    08:4b:52:92:0b:54:61:97:8b:72:f9:90:63:a8:a7:
                    0f:c3:38:86:52:a2:7b:0e:a2:c3:9c:d0:1a:db:62:
                    6a:8a:c7:c3:58:e2:17:24:42:2e:e7:c5:39:a3:7f:
                    c4:a5:11:b3:12:54:75:23:51:2e:71:d3:ba:7b:cc:
                    fe:c7:36:2c:7c:ad:5e:f8:1e:5d:65:1b:17:8f:2d:
                    d7:d0:c5:fd:05:a1:f8:2f:ff:c6:af:09:37:d4:29:
                    fa:0f:72:6a:28:a7:d2:91:b0:ca:b0:4c:be:c3:fa:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C4:87:21:D1:42:DB:D5:86:A8:76:97:F6:B6:CE:C0:D3:88:C5:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/653b963f-a553-3554-a571-619ed9f7c4e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl

            X509v3 Authority Key Identifier:
                keyid:4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ff:59:28:24:ee:53:99:06:8d:1c:d3:07:27:d3:1b:3d:03:
         7a:01:34:e1:35:38:86:c7:6e:18:86:81:7b:b4:c0:e2:1e:91:
         c5:6c:f4:99:5e:f1:ba:ab:3e:72:7f:9a:fd:63:5e:b0:1e:fb:
         9e:d4:84:9f:52:fe:60:fa:b0:e2:d7:95:4c:5a:65:44:3e:3f:
         76:a2:dd:90:39:30:b6:ae:d3:bc:5d:1e:80:71:06:51:48:e0:
         51:66:3e:64:ea:46:05:94:f3:a6:28:b7:69:95:f2:10:82:b6:
         1c:bc:8c:dd:3a:b4:10:26:fc:2e:23:0b:8b:a2:ba:55:bb:9d:
         e0:8b:41:f1:70:96:50:a9:f2:b5:bb:46:84:22:61:32:3c:b3:
         39:15:95:9d:6d:4f:0f:5f:4a:6f:2b:69:c7:90:f7:95:fe:74:
         65:60:a2:ea:2e:48:9d:e2:8c:6b:4f:b5:0a:8f:58:92:80:f3:
         6c:71:0d:43:15:49:03:0b:59:11:c7:34:4f:76:8a:7a:d2:9d:
         21:a5:ca:a6:38:db:0c:16:0a:65:fe:eb:4d:d5:e3:ec:95:bf:
         d7:41:25:b6:f4:ab:97:41:be:1f:38:b4:b9:b2:d9:cb:d7:c5:
         56:58:db:04:bc:b1:94:57:84:4c:dd:b0:39:c3:93:67:a7:42:
         15:3e:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:13 2025 by rpki-client