Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa
File:                     0be371a6-479e-3c51-a61d-3d40223861af.roa (raw, json)
Hash identifier:          rrUIfkbqySACOpEZkbXF+GV4hzgaDyuC1NIHzYuBTzY=
Subject key identifier:   A4:E1:1C:27:A2:D1:A7:96:8F:50:4F:1A:6A:ED:9D:19:1D:63:3A:B7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434CA1AD1FE559C404D0BFC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.38.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a1:ad:1f:e5:59:c4:04:d0:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=0c3f67f7-02d0-487d-a836-81675aa1dc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6c:54:58:0d:cb:39:b0:f5:8a:02:b7:93:0b:
                    8c:e6:4f:cc:15:04:96:9f:49:27:3f:48:9d:03:cc:
                    62:b9:d6:b2:ec:a7:b5:b8:bf:dc:f8:47:6c:00:90:
                    b8:d3:3f:b7:b9:50:98:eb:e9:73:5c:40:b5:f7:6a:
                    63:a3:77:10:44:59:ae:2f:70:78:28:36:e8:1a:ba:
                    b5:0b:26:e6:d1:c9:cb:d2:c8:88:47:33:5a:92:10:
                    aa:36:ea:94:5c:66:08:6b:01:ff:38:99:4b:40:2d:
                    44:b0:3f:fc:c4:d8:b5:a8:13:88:55:8a:0e:fb:15:
                    72:50:92:22:35:14:18:c8:92:20:74:49:0a:a4:b5:
                    c0:93:78:fa:b7:f3:22:09:2e:f4:52:f1:e2:52:61:
                    68:4a:d9:a9:65:89:2b:64:b8:1c:a1:1e:49:80:8d:
                    96:cb:6f:77:94:2c:8c:7b:ea:5c:25:13:8f:e6:3f:
                    0e:57:75:08:3e:2e:97:db:46:24:f2:0d:81:39:0c:
                    5e:a6:29:94:1c:a4:1a:98:bd:d1:2e:5c:60:be:97:
                    7e:8e:1b:f4:e4:c7:32:f2:fc:5c:71:dc:f5:f4:64:
                    a1:8d:0c:1f:6f:0c:15:54:20:99:f0:e9:54:0b:3a:
                    28:de:55:69:be:ae:15:52:e2:86:f6:09:68:14:df:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E1:1C:27:A2:D1:A7:96:8F:50:4F:1A:6A:ED:9D:19:1D:63:3A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d1:60:17:2a:74:e1:f5:0d:e5:14:15:fa:c5:83:d9:ac:16:
         e7:f8:82:9d:ba:5f:f4:24:09:17:ff:08:a8:ec:4a:af:f9:f5:
         ff:46:4e:ea:f4:6b:ca:6f:ad:c9:d4:d7:67:1e:ad:18:66:4e:
         ca:dc:57:2c:39:05:8f:14:bf:b9:14:82:d7:fe:6f:32:e0:06:
         21:7e:8d:94:03:42:2b:f2:6c:29:29:5d:4b:86:f7:f4:c5:88:
         05:15:11:e3:3a:6e:ea:d2:9e:59:db:b1:83:a2:a3:f5:89:5d:
         ae:a6:2f:6a:71:d8:45:d6:4b:e2:fe:79:f6:6f:68:a6:55:c7:
         ea:be:85:2f:00:e5:31:2e:0b:b7:bc:11:6d:3c:aa:88:18:15:
         80:65:61:71:15:48:53:9a:68:2c:1a:01:88:9d:6c:34:85:72:
         db:2b:23:7a:48:39:d1:89:ff:da:79:e1:05:a2:f6:21:52:f5:
         74:ab:6d:f5:2a:38:f7:79:2f:1c:25:0f:4c:15:61:11:5b:db:
         c8:ae:fd:80:a2:e9:4d:18:6e:01:b0:b2:0c:73:57:fc:63:b4:
         98:55:d6:c1:a5:c2:31:b5:e5:8b:d8:0b:ec:89:29:b5:f0:0b:
         e1:b7:d0:b7:b1:c4:27:6a:41:8f:39:76:e7:98:f6:24:60:d1:
         6a:82:fd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:08 2025 by rpki-client