Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4073fced-abc2-3f30-b22a-c763af1adda6.roa
File:                     4073fced-abc2-3f30-b22a-c763af1adda6.roa (raw, json)
Hash identifier:          U5v7VfpthngECcP4QB9adb8FDCZQYaFRudAzMXdc5xk=
Subject key identifier:   88:AD:7A:89:3E:9B:BC:74:A7:85:09:AE:23:21:8D:F7:39:C1:B4:03
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C605A67F4B65C16EC2140
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4073fced-abc2-3f30-b22a-c763af1adda6.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.62.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:60:5a:67:f4:b6:5c:16:ec:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=4d01b59d-2777-432c-b76e-46ed5a997c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:36:dd:67:b1:4f:ef:47:fe:af:e6:c7:1f:ab:
                    15:d7:99:a8:1a:b2:a7:ad:e5:65:de:40:e4:0b:5a:
                    70:51:8d:99:4c:a0:c2:66:f0:c6:70:4b:f5:fa:d0:
                    33:04:d2:e2:8b:d3:b3:eb:f9:ae:8d:b1:58:f4:d8:
                    1c:8f:e5:21:47:f4:52:8d:5e:69:ae:80:b1:2d:eb:
                    2a:35:50:77:90:00:52:29:58:2b:d2:83:43:2d:ea:
                    e9:af:ff:0b:62:d9:04:87:ff:39:05:37:77:f1:f2:
                    d7:17:80:a3:b9:1f:94:0e:0f:88:ec:c5:94:74:5c:
                    f8:88:3d:21:3e:c3:f5:39:80:c7:4d:41:ca:5c:1f:
                    2a:7d:5b:84:ef:92:e3:4b:be:f4:bc:9f:08:66:19:
                    23:d2:25:26:85:76:8f:61:83:78:02:de:b2:30:11:
                    4f:32:e6:86:f4:c0:1a:33:81:66:38:35:dd:f9:16:
                    77:4b:ec:9d:5c:e5:44:17:5a:76:9f:b2:12:87:d6:
                    87:e5:a6:a1:91:8d:b8:0e:5f:32:5d:37:ec:24:92:
                    d8:b8:c1:94:22:78:f1:57:e3:41:56:3b:e1:72:31:
                    3a:9e:26:20:53:e7:83:70:80:f7:fa:65:31:21:61:
                    5c:5f:44:e7:23:3c:ce:4c:59:f6:6d:ca:8c:fc:32:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AD:7A:89:3E:9B:BC:74:A7:85:09:AE:23:21:8D:F7:39:C1:B4:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4073fced-abc2-3f30-b22a-c763af1adda6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d8:9d:92:a1:0a:d6:8b:07:ff:59:8b:e7:b8:26:86:4e:ee:
         b6:35:89:35:46:3c:73:b8:49:f0:15:d3:9e:04:b3:46:bb:a3:
         91:7f:67:b9:b2:a6:b2:e8:58:47:8e:e7:8a:7d:74:40:06:20:
         66:88:8b:d4:c8:7d:77:46:8f:4c:5e:58:47:81:ca:30:e8:86:
         f3:67:f9:fd:cd:8d:e3:ad:58:27:97:2d:7d:ad:75:90:7d:db:
         1b:ae:99:02:fc:dc:3a:23:c3:c9:36:a8:04:af:da:ef:4c:87:
         0c:d0:49:b0:af:72:7d:6c:91:d9:d4:54:88:77:80:d7:a1:01:
         6d:89:3a:3e:27:cf:a7:9e:16:7c:e8:59:eb:39:78:00:0c:29:
         08:03:84:21:ff:4c:f9:c5:df:37:81:4b:de:48:91:79:4a:18:
         61:32:06:83:55:bc:5d:3e:5e:d5:ab:89:5f:92:5f:ed:63:6d:
         c7:4a:db:6f:0c:f8:91:b9:59:35:50:a6:7f:01:03:45:d4:f6:
         e5:b5:ce:a8:b5:c8:12:be:67:6f:b1:18:1c:0f:6f:25:88:f9:
         53:9f:cd:a5:2b:61:f1:a1:d9:2c:f6:6a:b1:ce:0e:2f:f6:f0:
         15:c3:a7:c7:f2:22:04:d6:b6:e1:2b:e4:90:18:cf:d4:8f:ac:
         c9:40:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:14:52 2025 by rpki-client