Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa
File:                     b968a0f5-a9a4-37a1-ae22-297830d659f3.roa (raw, json)
Hash identifier:          uC5HBLTa4eIY+0C+ZkDP2BeMCsxVzJu/Ux4vtjlJmXo=
Subject key identifier:   FA:69:2C:5B:2F:08:7F:72:EC:CD:CB:70:D6:D5:F2:59:49:42:F9:2A
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434CA95195FD534DF25A5140
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.56.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a9:51:95:fd:53:4d:f2:5a:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=4c2a726f-424b-44bb-8cd0-57b34472124b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:c1:52:b7:e1:ed:87:94:ff:2e:9c:2e:70:
                    9a:33:98:f3:3b:55:1b:42:e4:f9:f3:26:3e:04:3c:
                    c3:dd:55:a5:95:74:f8:13:ce:e6:9f:ad:12:11:85:
                    56:92:9a:d3:0a:fe:b6:79:58:2c:26:c7:4a:3e:2c:
                    cb:14:be:b4:33:e7:4e:ad:6e:b8:2c:12:3c:3c:ec:
                    1f:04:11:91:fa:45:97:55:29:74:71:ba:ba:ec:5c:
                    51:42:3a:ad:ff:51:76:5e:b9:fb:c0:93:1e:52:8b:
                    13:66:27:14:32:2a:37:26:7b:8f:ea:79:4c:75:67:
                    d6:48:33:7f:73:91:93:9d:1f:ca:e2:fe:46:5f:df:
                    68:8c:f3:35:d8:00:bb:3c:83:91:59:48:27:de:37:
                    4f:8b:8f:c8:84:6b:f1:68:a5:5c:b3:51:95:36:2f:
                    66:5a:5b:2b:3c:f5:a1:2c:04:42:0a:70:ae:f6:2d:
                    3d:97:91:1b:fa:2a:66:a0:5d:de:5e:37:86:ea:39:
                    3a:ab:64:45:43:6e:23:a4:8d:3b:fb:7a:4e:87:ef:
                    a0:ac:67:26:d7:f1:f0:51:02:b3:a4:1a:64:f9:50:
                    ed:1d:a4:2c:01:0d:79:3c:da:e3:ae:c5:d8:57:1a:
                    aa:61:72:74:00:f6:24:04:60:61:45:71:34:8a:9d:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:69:2C:5B:2F:08:7F:72:EC:CD:CB:70:D6:D5:F2:59:49:42:F9:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:19:6d:88:7c:69:77:23:7d:fe:a3:de:e7:85:63:be:46:
         2b:54:51:5f:4d:23:7a:c6:03:27:d1:e3:da:a1:a8:19:37:1a:
         f8:d0:72:b6:79:f9:cd:81:65:90:be:e4:6a:90:58:cd:4b:67:
         ed:70:06:4c:a8:e2:0e:a5:d0:b0:a9:4c:01:61:ea:88:1e:8d:
         12:eb:b9:b9:e7:40:05:45:30:86:cd:b7:7c:71:bf:e5:3e:77:
         0f:d9:86:31:1e:15:63:b3:4b:f9:24:1b:b9:68:6a:17:d5:65:
         89:5f:f7:a5:8e:7b:b2:2d:b1:b4:1c:70:3a:66:37:dc:c1:43:
         19:19:59:8f:b2:9f:c8:dc:cf:11:c7:fe:b6:d2:f4:a4:1b:5f:
         c4:cb:9c:25:64:f3:21:65:7a:e3:88:e1:fd:62:9b:de:86:46:
         95:b3:82:82:02:48:5a:b5:d0:3a:b4:c3:b4:1a:f9:3f:8f:02:
         65:98:90:22:ba:d4:ce:51:a0:80:bc:31:29:ba:ea:38:7c:ea:
         3e:b5:90:26:ca:5c:54:61:24:a4:cf:d4:26:1c:0f:b3:3d:f5:
         a2:bd:20:05:d8:76:71:2e:db:bc:73:a5:b1:ac:56:4a:2a:76:
         93:d1:0d:aa:9c:52:16:d6:3e:ab:90:50:4a:d1:74:19:ea:e7:
         d1:ea:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:11:45 2025 by rpki-client