Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/45d36e72-fccb-38a6-84b0-d1eed708a696.roa
File:                     45d36e72-fccb-38a6-84b0-d1eed708a696.roa (raw, json)
Hash identifier:          QQFsbRV0lbFYvIh9OkswfLLSUyb+kz/Lgu4IlHlohI0=
Subject key identifier:   35:A7:17:CE:55:C3:E3:2F:8E:7C:90:6D:83:43:F8:9B:0D:F7:4D:21
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C48673EBA3AD9C8A4FC80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/45d36e72-fccb-38a6-84b0-d1eed708a696.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.62.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:48:67:3e:ba:3a:d9:c8:a4:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=77605186-3f0e-43cf-af47-ae0f05d5f07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2c:5b:4b:9e:09:ae:3a:85:48:b5:d4:52:b7:
                    06:b1:cf:83:a8:32:75:27:74:d4:37:cd:c3:bb:2b:
                    db:2d:eb:e0:c8:3b:85:ce:6b:95:58:60:25:0c:e8:
                    4e:c2:5e:be:fa:27:99:79:06:a0:a2:c5:48:a7:ae:
                    ca:f8:b6:95:c0:b2:5b:32:f3:d1:2c:5e:0e:da:f9:
                    64:2a:f2:33:7d:12:87:1f:75:4e:e7:b0:5d:d8:51:
                    66:0e:59:62:71:91:df:1c:eb:07:e4:51:06:ef:5e:
                    7c:c7:f5:b2:17:7b:b9:cf:9d:4e:3d:e8:d1:15:b9:
                    7a:53:0e:68:01:cd:6f:c0:f4:b9:fe:19:6e:69:54:
                    9f:62:e3:01:a2:ee:7e:88:13:ed:71:ed:a7:4f:f1:
                    3b:ed:dc:8e:5a:ad:cc:c5:94:99:82:fa:43:91:f9:
                    0e:e7:7d:54:c9:86:59:bb:10:fc:b2:7f:bb:fe:96:
                    87:8e:bd:94:36:7a:6e:3d:fa:82:d7:43:c2:a5:44:
                    f8:26:17:df:6f:2f:46:8d:13:ae:70:e3:07:db:da:
                    91:8e:2b:54:db:a3:bc:12:2c:78:e0:26:31:30:f1:
                    f5:f7:25:ac:95:ee:85:d6:33:45:12:34:90:20:bb:
                    4f:d2:01:3f:a0:75:a1:97:97:4c:8e:dc:a5:26:e7:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A7:17:CE:55:C3:E3:2F:8E:7C:90:6D:83:43:F8:9B:0D:F7:4D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/45d36e72-fccb-38a6-84b0-d1eed708a696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:76:6d:94:5e:67:f8:39:f1:82:db:e1:41:1a:46:c3:51:9c:
         1b:4b:89:30:4a:b0:9a:b2:3a:a9:24:c2:62:0b:b3:e3:fd:96:
         ab:72:b2:64:e3:7e:6e:3b:84:5b:71:11:a6:b9:4a:86:34:17:
         b1:02:7c:a0:4b:7c:f6:2d:a4:e8:e2:ef:c5:69:6d:28:83:60:
         d9:8a:e3:58:a5:ba:00:43:20:37:98:34:7c:8b:af:09:8f:23:
         24:1e:19:ad:f6:bb:5f:ed:36:60:6d:cd:d5:e6:66:0c:1b:41:
         bd:35:45:81:d8:58:b7:fb:60:8a:66:b0:50:b8:7e:de:d5:03:
         44:65:10:6a:cf:b5:49:86:4d:45:5b:6a:b8:bd:0c:51:ce:76:
         51:06:a3:d2:39:6e:c2:aa:4f:ec:f1:7f:67:6b:09:f7:51:a7:
         3d:e4:25:c0:c0:1b:8b:6f:4d:26:16:95:a3:dd:0d:28:83:87:
         37:a7:9b:03:b4:80:fe:fe:ab:fe:8b:83:a5:c3:fd:07:ec:e3:
         45:8e:7e:2e:1f:00:14:f1:de:2e:42:90:57:73:27:d0:34:3b:
         cc:a7:6f:60:7d:ba:cd:08:56:cb:2a:7e:72:85:9a:81:bd:2b:
         ae:73:0d:f4:71:2c:55:39:a0:9f:f6:cf:be:87:60:e6:66:a3:
         de:fb:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:05 2025 by rpki-client