Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d6c2382-6896-3d2f-bd56-04c413266850.roa
File:                     0d6c2382-6896-3d2f-bd56-04c413266850.roa (raw, json)
Hash identifier:          Z6XljogCc43grIZ+8hGXN35jkG0Q5j5x1++/TdhMgxA=
Subject key identifier:   AA:2F:44:F0:8C:A5:DD:75:70:91:CA:1F:08:62:CD:A7:43:6E:0B:1D
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434CA8E27538FC2EA30DC780
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d6c2382-6896-3d2f-bd56-04c413266850.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.53.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a8:e2:75:38:fc:2e:a3:0d:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=f8980391-5528-474d-bfb7-f3bb72ac2b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:c7:e3:e6:0d:89:c0:24:a5:96:13:ed:f9:
                    30:b2:0b:f0:8a:10:71:1c:db:8f:e7:d8:0e:40:0b:
                    2b:d4:9b:d7:58:a0:05:65:f8:39:de:47:bd:9f:22:
                    11:19:48:43:98:38:7a:e8:b3:74:c1:93:82:2b:c3:
                    b4:c8:b4:99:4d:d6:15:82:25:89:4c:76:bb:ee:eb:
                    a0:a5:a6:fc:b5:03:c8:e7:23:2c:25:67:09:74:b8:
                    ba:b3:72:70:64:f5:92:dd:35:16:e7:3a:1e:51:21:
                    1a:bf:51:95:c3:b1:d5:fa:a9:a5:0f:6f:cd:69:e9:
                    99:e4:98:c6:5c:3c:a3:c0:6e:52:5b:e5:36:bf:3f:
                    88:6b:08:77:87:59:d4:10:e5:47:86:9f:f6:60:bd:
                    d9:f9:41:3e:19:27:f7:9b:7e:5c:c6:4b:f4:42:47:
                    ce:56:e9:a4:96:32:60:44:ed:f1:6a:46:f9:65:d9:
                    55:c3:23:62:2c:5a:ce:c3:04:50:4f:83:a8:9e:58:
                    ab:99:eb:fd:6c:84:78:36:ca:f3:cf:cb:1c:38:df:
                    45:0c:a1:c6:0e:3a:85:63:ae:f5:12:1d:3d:29:f8:
                    e9:63:77:4c:25:e6:eb:60:f3:10:69:2c:2b:8e:16:
                    cc:fa:69:32:96:c9:c3:3c:1d:77:02:41:09:24:8c:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2F:44:F0:8C:A5:DD:75:70:91:CA:1F:08:62:CD:A7:43:6E:0B:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d6c2382-6896-3d2f-bd56-04c413266850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:62:c7:a1:03:e8:b7:83:d8:f8:16:ce:f5:52:8a:2c:eb:32:
         d7:c7:2b:59:58:87:ba:1e:f0:ba:ae:25:a7:a4:d8:cb:b9:01:
         fc:68:90:29:45:94:70:47:e4:db:54:b2:09:e5:58:a5:4d:6c:
         7b:d6:5b:1d:cd:e7:25:c3:7a:eb:ca:1e:94:e2:bc:03:78:c3:
         26:61:a2:68:38:95:9e:dc:a2:f6:06:58:e2:49:e3:38:73:6b:
         0a:53:3c:21:eb:90:8d:cd:ab:ae:92:69:cf:f6:d3:e5:8b:c2:
         96:9e:39:df:f8:dd:a4:ee:7c:2f:fc:d6:3d:e6:90:8e:20:a2:
         be:f9:e6:22:f0:32:7b:ec:b7:82:87:dd:b6:fc:af:5d:2f:13:
         a5:ca:44:6c:8f:1b:97:6f:5a:ac:54:93:d9:19:0e:df:80:0e:
         28:d0:2e:c7:27:2c:c6:9a:c3:99:94:47:1a:42:14:ff:d4:27:
         8a:a2:88:ea:d3:78:3a:6f:0e:8b:45:ae:35:34:79:50:c8:5d:
         5b:25:7f:5a:d5:fa:fe:04:22:32:0b:a2:03:cc:1b:57:4f:61:
         5b:e9:d0:c1:51:a2:40:19:08:8a:63:c5:e5:f0:7e:da:49:a8:
         46:7f:bc:43:bd:77:3f:ac:90:b1:75:6b:35:ee:7b:40:a0:50:
         05:83:32:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKjidTj8LqMNx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
Zjg5ODAzOTEtNTUyOC00NzRkLWJmYjctZjNiYjcyYWMyYjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/PH4+YNicAkpZYT7fkwsgvwihBxHNuP59gO
QAsr1JvXWKAFZfg53ke9nyIRGUhDmDh66LN0wZOCK8O0yLSZTdYVgiWJTHa77uug
pab8tQPI5yMsJWcJdLi6s3JwZPWS3TUW5zoeUSEav1GVw7HV+qmlD2/NaemZ5JjG
XDyjwG5SW+U2vz+Iawh3h1nUEOVHhp/2YL3Z+UE+GSf3m35cxkv0QkfOVumkljJg
RO3xakb5ZdlVwyNiLFrOwwRQT4Oonlirmev9bIR4Nsrzz8scON9FDKHGDjqFY671
Eh09KfjpY3dMJebrYPMQaSwrjhbM+mkylsnDPB13AkEJJIzt6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKovRPCMpd11cJHKHwhizadDbgsdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGQ2YzIzODItNjg5Ni0z
ZDJmLWJkNTYtMDRjNDEzMjY2ODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxix6ED6LeD2PgWzvVSiizrMtfHK1lYh7oe8LquJaek2Mu5AfxokClF
lHBH5NtUsgnlWKVNbHvWWx3N5yXDeuvKHpTivAN4wyZhomg4lZ7covYGWOJJ4zhz
awpTPCHrkI3Nq66Sac/20+WLwpaeOd/43aTufC/81j3mkI4gor755iLwMnvst4KH
3bb8r10vE6XKRGyPG5dvWqxUk9kZDt+ADijQLscnLMaaw5mURxpCFP/UJ4qiiOrT
eDpvDotFrjU0eVDIXVslf1rV+v4EIjILogPMG1dPYVvp0MFRokAZCIpjxeXwftpJ
qEZ/vEO9dz+skLF1azXue0CgUAWDMgc=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:04 2025 by rpki-client