Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2eb50b07-58eb-3acd-b4ed-b052c02253d5.roa
File:                     2eb50b07-58eb-3acd-b4ed-b052c02253d5.roa (raw, json)
Hash identifier:          y2fTwLgwBjsY73Kn55pQytkr001K6Cj7VTwAodCZtD8=
Subject key identifier:   9A:7D:EE:C1:ED:C1:CF:AA:37:43:04:8A:3F:0C:53:C8:32:4A:B5:41
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C638D80CC6C07BD8F2F20
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2eb50b07-58eb-3acd-b4ed-b052c02253d5.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.34.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:63:8d:80:cc:6c:07:bd:8f:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=dc9408d3-9276-4e98-922c-fbe919128073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:ee:93:e5:df:da:41:23:64:91:91:6f:9b:
                    52:99:14:c5:60:91:61:f9:92:ea:b0:bb:4e:e5:0b:
                    a3:38:7d:c5:b7:a7:b3:99:4f:8d:82:c2:5f:84:44:
                    54:c1:7c:52:df:ff:c6:1b:1d:72:7e:4f:71:ca:fd:
                    e5:87:94:66:e9:12:40:5b:64:02:1a:ab:a9:6e:31:
                    2a:3f:bb:05:77:01:63:1e:73:5a:ed:b4:52:fb:89:
                    04:44:55:ce:c4:7f:4e:c4:1d:fc:29:43:be:7c:6e:
                    3b:1f:f6:55:6a:09:0c:fb:20:a5:93:1d:69:62:ec:
                    8f:3f:6a:74:2f:f7:de:6d:03:eb:94:03:10:0e:02:
                    0b:c4:87:b0:8d:bf:53:ef:0a:b4:18:2b:b7:2c:13:
                    94:b3:b7:a0:f5:bb:26:83:34:6e:98:ea:49:57:ee:
                    b0:0a:e3:b1:57:71:fa:c0:29:77:d6:58:ca:fb:8c:
                    b0:c4:a4:86:b0:d5:ab:c4:3e:78:43:1d:1a:47:9f:
                    b6:29:d0:d2:b9:3e:3a:20:f9:f9:3c:ba:ab:80:30:
                    45:df:2b:ca:5a:9b:e0:c2:ac:bc:69:b7:2a:81:c4:
                    b6:b8:c9:e6:51:d4:7d:8b:22:b8:d8:ae:dd:32:83:
                    a3:1b:88:81:ed:4f:e3:e4:9f:07:e0:cf:f1:7c:7c:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7D:EE:C1:ED:C1:CF:AA:37:43:04:8A:3F:0C:53:C8:32:4A:B5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2eb50b07-58eb-3acd-b4ed-b052c02253d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c4:03:05:56:9d:55:10:d3:3a:a2:50:e0:64:86:e5:58:98:
         dd:74:64:0b:2e:5b:3c:a8:65:aa:e5:c7:95:f6:dd:00:64:69:
         bd:db:23:5b:2f:01:1d:1e:fd:d1:bf:66:49:85:d5:7d:eb:fd:
         e6:9b:41:20:5e:bc:90:64:13:28:44:d1:f0:c1:71:8d:3d:d9:
         e0:9b:63:be:25:6a:77:c7:28:bc:5f:1b:b6:61:85:ce:f4:6a:
         19:ed:df:68:55:20:16:da:24:58:e6:66:e9:1f:36:67:29:3d:
         8a:aa:fa:89:57:55:75:f7:8d:26:38:aa:3d:a2:cf:d0:0f:08:
         87:ae:39:2c:be:fd:d8:48:0f:2a:d3:81:16:d7:06:0f:f6:f8:
         5c:75:cb:65:a2:6c:47:2a:4f:a7:a0:0e:28:38:15:a4:fa:df:
         99:c3:d3:ae:7e:4f:23:4c:8a:74:d8:73:bb:77:e4:4f:65:be:
         5d:43:f2:dd:71:d7:52:55:12:92:45:e4:ee:de:2e:b2:6d:7d:
         32:62:46:d0:64:ef:4b:fd:9e:a7:58:4b:e2:98:87:13:f6:76:
         b6:5d:c2:7a:3c:45:7f:6f:d8:c3:14:00:4b:55:10:8d:b5:42:
         43:20:ca:16:5a:6d:39:cf:8a:32:78:92:24:5a:05:eb:14:a8:
         0e:cb:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:11 2025 by rpki-client