Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/379980ca-01ba-3c8f-9f27-78bd14776ac1.roa
File:                     379980ca-01ba-3c8f-9f27-78bd14776ac1.roa (raw, json)
Hash identifier:          az2Gw9qnHsIveXR16LJmuT541Q0He7P6k6qLch+7l3w=
Subject key identifier:   BA:7A:32:A0:AA:77:73:44:0F:DA:E8:8D:25:0B:AB:45:F2:24:BE:A7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C54697C593B5C0A2C1700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/379980ca-01ba-3c8f-9f27-78bd14776ac1.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.57.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:54:69:7c:59:3b:5c:0a:2c:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=a50346e5-1b84-425c-bc7b-e8cc0b0a5762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:c6:3c:b2:e5:81:c7:8e:90:54:9e:92:87:
                    02:d5:f6:6a:18:75:ba:6d:b2:ae:df:6f:65:a4:11:
                    42:bf:22:33:8c:74:ce:75:ac:42:ca:2a:b9:54:af:
                    fb:5c:09:c4:62:fe:b2:cb:8d:7a:77:6c:ba:90:c8:
                    3b:15:13:58:bf:6b:02:d6:1a:92:e1:1c:ed:44:4c:
                    cd:2b:1d:64:e1:07:18:2f:45:bf:af:ef:de:70:ec:
                    a6:fe:0f:5c:2a:e3:4b:14:57:0f:51:23:94:3b:d3:
                    dd:74:29:cb:72:b2:b5:3b:ce:14:d7:eb:d6:cf:b9:
                    a9:09:7a:e7:4b:f4:5a:b1:f5:a1:40:63:71:89:5f:
                    5d:72:15:7e:31:d5:b0:4c:37:bd:a7:c7:fd:b0:fb:
                    f1:08:f9:f2:4b:9b:6c:f6:69:8a:7b:67:b5:fc:e1:
                    6b:49:a4:82:de:c7:31:e5:eb:8b:ba:1a:a5:74:0f:
                    1b:a8:75:4d:8e:36:b2:8a:ea:e0:d8:0e:44:da:73:
                    7d:82:36:9f:98:5c:20:d4:16:e1:e9:7a:5c:e0:0e:
                    08:cc:a6:28:ec:c5:28:4d:90:7a:5d:7c:b1:c8:8a:
                    66:9b:42:72:42:b4:71:3e:fa:ae:d0:22:ea:6e:20:
                    5a:5d:c4:8e:fc:9e:90:cf:fe:34:5d:26:60:6a:43:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7A:32:A0:AA:77:73:44:0F:DA:E8:8D:25:0B:AB:45:F2:24:BE:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/379980ca-01ba-3c8f-9f27-78bd14776ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:43:11:d4:6b:cc:d0:bf:3f:da:34:20:43:a7:bc:83:e1:
         80:30:fa:5f:64:11:84:33:63:75:54:cf:38:44:50:2a:7e:19:
         33:76:f2:3e:2d:77:f8:74:0c:8a:fc:17:bf:a2:1e:28:8b:1b:
         88:4f:26:a7:61:3a:5c:a8:5d:f8:85:73:fc:9d:bc:d8:f1:dd:
         cd:99:df:c8:3c:57:c7:48:88:2b:52:95:2e:55:99:60:a8:3c:
         01:7b:82:2d:ea:54:a3:a5:2a:88:88:8d:6e:8b:b9:23:5d:5e:
         59:1f:6e:91:f3:08:5f:5b:1f:3d:58:0f:ab:9e:16:6b:60:6c:
         32:6d:ba:b9:c9:88:aa:54:60:4c:09:bc:3f:de:fa:07:7e:b3:
         aa:87:9b:a3:29:69:51:b2:62:ad:b6:38:3e:c8:24:da:e6:08:
         81:a8:5d:83:e9:b7:bb:4a:c0:aa:ea:7f:f0:f3:77:f6:c6:63:
         17:80:36:bd:fa:f3:a6:bc:54:7c:5b:69:f9:16:a6:17:74:92:
         bd:ac:48:0d:c0:cd:50:d8:31:f6:02:06:ef:c0:3b:5e:b5:2d:
         13:9d:fb:b6:cf:05:b5:a2:bf:0b:93:39:da:1a:c2:b4:d1:1e:
         5c:27:c6:6b:b6:5c:4a:52:98:54:1d:28:59:90:b7:66:bc:49:
         f3:09:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:14:59 2025 by rpki-client