Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa
File:                     299bcb5b-09bf-3065-927b-7c024222515a.roa (raw, json)
Hash identifier:          WShsf6YParkTi2f/407Tla6OmQe9Z9ZUEArVvU2FHDg=
Subject key identifier:   63:08:A3:37:F5:4C:19:5D:46:70:4E:93:33:94:69:F2:57:9F:1C:41
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C9F30B5D0609266127C80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.53.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9f:30:b5:d0:60:92:66:12:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=92b2bdea-90d3-4403-96c2-eadef4a6f202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:3a:5c:9a:95:19:40:0e:04:a6:00:7c:99:
                    e5:91:e4:06:49:d8:36:c8:88:61:17:0c:54:0a:b2:
                    30:c8:99:f9:a7:ad:89:61:ef:73:47:52:e0:dc:8c:
                    af:f7:77:6c:ab:8d:78:78:fa:2c:f9:49:cf:fb:0f:
                    cc:6f:a4:0e:fc:ec:63:81:1f:21:73:be:9f:3a:a9:
                    79:45:36:a3:c7:c4:d7:f7:9f:0f:71:7f:49:fa:44:
                    29:67:8e:c8:94:82:85:86:ca:a3:17:87:c5:77:c3:
                    ad:ac:d0:4f:58:e6:6d:eb:62:8c:79:ea:5c:5e:21:
                    9f:1f:23:7b:d2:e4:5d:ee:0c:61:92:b3:1b:6b:ad:
                    15:af:d7:44:67:ba:03:79:13:5c:13:67:07:1c:64:
                    40:9b:f6:cd:29:86:0a:7b:db:41:c5:e3:cd:6a:f5:
                    f2:33:16:b8:91:6e:ee:e8:fa:6f:4d:6d:cc:61:b5:
                    5f:75:c2:fc:cd:fe:6c:24:a6:3f:a1:b7:aa:fe:35:
                    cf:8a:71:ac:c3:4e:12:1d:2d:fa:cc:dc:f1:aa:d1:
                    be:b9:7b:3d:07:d5:c9:e6:91:b9:b2:21:f1:e7:be:
                    86:91:ea:39:7c:d2:f4:38:48:68:6d:a4:de:fb:e3:
                    52:7e:91:86:4d:c2:78:88:bf:03:2d:b9:9f:83:c4:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:08:A3:37:F5:4C:19:5D:46:70:4E:93:33:94:69:F2:57:9F:1C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0c:15:74:ee:a4:af:fd:02:d1:93:d5:1d:68:92:64:62:81:
         20:93:1b:c7:d1:f4:09:fe:97:29:cf:20:92:3e:df:a4:50:90:
         5b:f7:44:6d:1d:f1:4f:c3:cb:a7:15:52:5b:b6:11:c4:3a:38:
         85:13:ce:f7:cc:41:4d:79:1a:b6:23:8d:34:17:37:18:0e:8b:
         27:29:79:fa:5f:02:10:24:62:cb:6b:62:a7:30:a8:b0:f9:f1:
         57:bb:0c:56:0a:7b:c2:62:e9:fb:c8:7f:61:ef:1d:d1:32:eb:
         fd:fa:bc:66:f2:fe:53:fe:d3:d5:73:24:04:ca:f0:2b:c6:54:
         d8:c2:87:6e:f9:2a:5c:df:68:90:32:65:c9:c8:92:e0:67:07:
         88:e3:e8:16:27:f3:b7:47:83:11:8b:3c:76:5a:44:e8:c6:8b:
         b1:bc:fc:01:24:96:ef:d8:11:28:e3:d5:88:04:78:41:55:2e:
         16:ae:b9:44:d5:e8:0d:45:ef:6e:f8:87:e0:63:eb:9a:84:db:
         37:d7:c1:82:dd:ed:42:7a:f6:4f:09:f3:6d:f5:d7:30:c0:06:
         76:4c:db:0a:6f:d7:2d:3e:aa:11:b3:fd:fa:a0:c8:90:5d:4e:
         9c:70:83:30:0d:d7:de:6b:1f:f8:3c:25:16:d2:f7:01:ea:3f:
         55:30:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:01 2025 by rpki-client