Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/54c74d45-2333-35d1-acb9-c34fab199cd5.roa
File:                     54c74d45-2333-35d1-acb9-c34fab199cd5.roa (raw, json)
Hash identifier:          b0sm2AAjd6p+CfBBK4R2VZGBYsazkvtBUr7UZGdYLMM=
Subject key identifier:   89:0D:9C:14:98:51:C9:EB:54:09:27:38:3E:A2:70:47:F2:27:3D:7C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B21CC40894EFBC219C266F480
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/54c74d45-2333-35d1-acb9-c34fab199cd5.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     16591
IP address blocks:        136.51.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:40:89:4e:fb:c2:19:c2:66:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=5c9c246f-de9b-41d0-a8db-b86ac6c844bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:e6:1e:2c:47:46:a6:de:4a:a9:47:75:89:
                    9f:b4:5f:8a:ed:23:75:4f:42:f5:fb:0a:25:38:7d:
                    e9:f3:ac:dc:32:5e:30:a4:fa:87:19:b0:c9:29:ee:
                    c8:07:ef:ba:67:23:c3:7c:a0:96:61:e6:52:7a:94:
                    bd:dd:2e:78:a5:01:1d:e7:db:71:b0:79:a6:88:30:
                    d7:bc:07:ac:59:77:de:e5:cb:4a:1c:08:76:9c:ed:
                    fe:d4:b1:1e:10:96:6b:c1:4d:2c:e4:d9:ac:37:c0:
                    2b:a1:ca:0a:9f:c9:68:63:01:fe:0c:ab:cd:d0:4b:
                    bc:b9:a7:78:d3:1d:81:8b:f1:b2:33:26:84:0a:3f:
                    0b:01:fa:e9:96:ed:df:24:0e:12:14:01:a2:c5:55:
                    45:7a:c0:88:9a:db:7b:ff:65:44:44:7f:cf:27:9a:
                    8e:ac:27:24:53:de:0b:83:7e:be:c4:05:4c:99:87:
                    e7:9b:d0:43:3f:d9:2c:1a:64:2e:7e:e2:15:57:a4:
                    3b:f9:64:7a:59:91:69:97:c0:a8:a3:86:5c:d5:7c:
                    9e:f6:2b:4f:0a:3f:05:e4:f9:dc:c1:ab:63:93:d0:
                    dc:69:5f:1d:d0:36:88:86:7b:62:7d:3f:da:80:32:
                    81:da:32:19:d0:65:b6:63:1c:35:1a:f7:38:6b:db:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0D:9C:14:98:51:C9:EB:54:09:27:38:3E:A2:70:47:F2:27:3D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/54c74d45-2333-35d1-acb9-c34fab199cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.51.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:06:9b:81:39:a7:89:8e:8c:ca:de:1c:a7:3d:d4:5f:70:55:
         1c:e2:23:2e:60:bb:9b:06:51:ab:52:13:31:77:51:29:5f:82:
         a0:fd:10:07:fb:14:f4:15:83:b5:94:82:91:cf:ff:7b:98:ff:
         1d:76:52:9f:4b:ab:48:ec:b3:1e:fb:7d:8e:fb:e1:fc:11:d5:
         87:f1:86:aa:42:54:6a:e2:bd:d6:d7:9d:0a:ee:c0:e3:28:22:
         ee:77:8d:cf:24:ac:1d:d1:d2:ef:25:d6:1f:de:2f:5f:16:54:
         3f:ec:15:85:46:1a:42:6e:d9:ce:2b:ed:8e:7f:63:89:a8:3f:
         3e:3b:45:42:0c:1e:b2:ce:46:0d:b2:3a:86:bb:2a:13:92:94:
         ca:65:b7:c7:c3:9f:9d:8c:55:43:9c:af:2e:71:72:a1:8a:6f:
         57:5f:ae:9a:29:e7:7d:e4:f6:02:78:9a:93:d4:d3:9e:ba:d2:
         ad:18:20:55:7e:72:12:0f:7b:c5:79:41:44:75:f5:64:0b:75:
         1b:f5:0a:af:c9:b8:a9:82:38:f9:3a:5b:f7:05:34:ba:f8:21:
         f3:0a:59:c4:82:6c:7a:93:fd:b4:4f:a2:57:38:6a:d1:30:f7:
         59:6c:08:89:9e:0a:6d:8f:d4:2b:04:8d:19:07:e0:fb:7b:c7:
         c5:34:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:11:47 2025 by rpki-client