Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/19e0b13d-972d-345a-ab73-5c57313f5b7c.roa
File:                     19e0b13d-972d-345a-ab73-5c57313f5b7c.roa (raw, json)
Hash identifier:          ucFEdunqhcCToj8HmRS9HuCIgdvNDbiw5y38adAkMf8=
Subject key identifier:   80:C8:55:34:B7:65:56:53:7A:C7:5E:C1:C8:2C:D6:2C:5B:DC:D7:15
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C54534660CF25590E6F80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/19e0b13d-972d-345a-ab73-5c57313f5b7c.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.33.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:54:53:46:60:cf:25:59:0e:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=848f3b10-6ff1-431d-9119-b7ee0d928a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:61:59:7f:8b:1d:ba:e7:43:cc:3c:7f:d3:
                    56:9d:8a:55:7c:12:73:a1:c9:75:d3:14:ae:3e:96:
                    e7:fe:ca:4d:8f:72:fd:d3:7e:8d:b5:c2:80:2e:08:
                    5c:fb:91:48:0f:4b:22:fb:5e:a1:25:4d:05:ff:dc:
                    89:b4:d6:c3:10:f5:09:60:69:80:4d:0a:ea:53:dd:
                    aa:79:0a:bf:0d:67:9c:c1:9a:50:3d:01:05:e7:7a:
                    53:2c:64:da:32:64:a9:16:a4:19:03:7c:e9:f7:03:
                    b1:5f:1e:45:11:39:54:5d:b7:86:7a:41:af:52:a5:
                    ed:94:c3:78:37:55:7c:f8:de:29:89:40:e4:0d:00:
                    6e:c1:c7:bc:30:c1:fe:be:c4:42:f1:33:e7:a1:bd:
                    a0:f7:9a:5d:f6:24:27:9e:fc:1e:2d:b7:c0:06:87:
                    ca:c9:d1:dd:18:ae:9c:ea:7e:0f:51:47:8e:fb:70:
                    d4:92:20:f7:c5:b8:42:01:da:83:0d:9a:b4:03:37:
                    a1:73:40:c3:42:36:fd:34:7e:bb:a4:ed:12:72:47:
                    ba:56:d1:04:b1:36:ee:0c:98:fc:3f:06:49:a6:61:
                    c7:34:c3:b5:7b:01:f4:ac:5d:c4:b9:13:20:d1:41:
                    80:de:dc:9c:3c:ee:ef:b9:13:17:90:8e:29:4e:e1:
                    5e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C8:55:34:B7:65:56:53:7A:C7:5E:C1:C8:2C:D6:2C:5B:DC:D7:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/19e0b13d-972d-345a-ab73-5c57313f5b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:aa:7a:92:87:c6:51:94:55:6e:40:35:93:f4:25:3e:8d:56:
         32:36:a8:e6:49:33:59:ca:7c:9f:e5:8d:33:9a:34:fb:8a:22:
         e9:1b:d1:7b:0c:41:ee:43:ef:8c:40:d3:1a:e7:5b:6b:e7:ff:
         ac:0c:36:85:fd:80:73:ef:f8:b0:c5:b3:cc:e5:8c:4c:c3:8a:
         7e:a0:24:59:e5:b1:aa:55:c0:2a:22:c3:60:fd:16:ee:ff:77:
         7c:94:36:6a:c3:04:46:77:bb:8f:23:49:6b:9b:0a:c9:75:f5:
         0a:59:ca:be:0f:6d:75:55:e6:de:47:af:4d:6e:f1:ed:f2:24:
         96:a9:68:2f:c0:6b:9b:86:b6:0f:9d:ee:97:df:ef:20:41:b2:
         b7:59:85:97:44:55:6f:b3:c7:22:6d:7b:fd:f0:b9:4c:e9:76:
         7f:20:f2:e1:f8:8c:d3:cc:7b:78:cb:8b:6c:05:ca:04:51:89:
         49:40:6b:bb:89:29:cd:01:52:12:6e:a2:82:5a:e4:c5:ee:a1:
         e8:3a:79:d9:fb:8e:dd:1a:cc:dd:cb:89:b5:33:49:28:b7:aa:
         7e:2e:ac:b6:e6:44:74:7b:79:8e:b5:7e:70:a2:ff:bc:8b:6b:
         9f:f6:11:1d:eb:bb:ac:f6:be:1a:9b:f9:5b:be:df:2e:fd:77:
         ab:96:70:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFRTRmDPJVkOb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
ODQ4ZjNiMTAtNmZmMS00MzFkLTkxMTktYjdlZTBkOTI4YTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXthWX+LHbrnQ8w8f9NWnYpVfBJzocl10xSu
Ppbn/spNj3L9036NtcKALghc+5FID0si+16hJU0F/9yJtNbDEPUJYGmATQrqU92q
eQq/DWecwZpQPQEF53pTLGTaMmSpFqQZA3zp9wOxXx5FETlUXbeGekGvUqXtlMN4
N1V8+N4piUDkDQBuwce8MMH+vsRC8TPnob2g95pd9iQnnvweLbfABofKydHdGK6c
6n4PUUeO+3DUkiD3xbhCAdqDDZq0Azehc0DDQjb9NH67pO0Scke6VtEEsTbuDJj8
PwZJpmHHNMO1ewH0rF3EuRMg0UGA3tycPO7vuRMXkI4pTuFeaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDIVTS3ZVZTesdewcgs1ixb3NcVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTllMGIxM2QtOTcyZC0z
NDVhLWFiNzMtNWM1NzMxM2Y1YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJaqepKHxlGUVW5ANZP0JT6NVjI2qOZJM1nKfJ/ljTOaNPuKIukb0XsM
Qe5D74xA0xrnW2vn/6wMNoX9gHPv+LDFs8zljEzDin6gJFnlsapVwCoiw2D9Fu7/
d3yUNmrDBEZ3u48jSWubCsl19QpZyr4PbXVV5t5Hr01u8e3yJJapaC/Aa5uGtg+d
7pff7yBBsrdZhZdEVW+zxyJte/3wuUzpdn8g8uH4jNPMe3jLi2wFygRRiUlAa7uJ
Kc0BUhJuooJa5MXuoeg6edn7jt0azN3LibUzSSi3qn4urLbmRHR7eY61fnCi/7yL
a5/2ER3ru6z2vhqb+Vu+3y79d6uWcE4=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:09:48 2025 by rpki-client