Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa
File:                     bc01ea38-f371-3faa-acac-14ea10689699.roa (raw, json)
Hash identifier:          Gcq6KXU80weJw0oidwq8LLX2JMhbbksXSnjvsWdthv8=
Subject key identifier:   9E:7D:7B:CB:CE:BB:6D:FE:B9:4F:D1:0E:32:C2:CF:2C:E0:B3:26:6E
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434CAB89BA2354671118F280
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.57.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:ab:89:ba:23:54:67:11:18:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=3e91339e-1faf-4b02-9b0b-7df608dbadd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:56:08:ee:12:ad:35:6b:54:30:da:4d:61:
                    67:0b:f2:50:23:9d:9e:69:a9:7a:16:b8:1c:31:cc:
                    c0:30:89:e3:b0:74:21:2c:18:5e:fe:56:c7:09:d7:
                    44:30:e6:ab:70:88:f7:3c:6b:ac:05:7d:28:2d:1c:
                    25:ea:ae:98:55:8a:ee:35:6e:d8:d1:7f:ca:45:b6:
                    8c:e4:10:24:23:c3:bc:e7:0a:24:27:a8:76:7a:c4:
                    64:9e:59:ca:08:24:c4:e9:6f:17:32:f3:62:6e:ba:
                    6c:ba:dd:b1:6f:38:db:28:f1:93:44:a6:8b:85:3b:
                    99:e7:2a:79:09:6d:ce:09:81:2b:aa:eb:29:ab:cb:
                    23:72:a1:13:8d:92:0f:6b:2e:3f:6f:e2:a2:e8:9e:
                    e5:8f:b7:eb:f7:b7:89:40:3a:15:44:b6:ba:2e:ca:
                    f1:38:64:71:93:72:20:5f:f5:0a:67:f6:9c:31:79:
                    d3:40:3b:ae:7f:92:c8:71:be:1b:57:72:32:88:10:
                    29:ce:7c:34:32:33:ae:7e:96:4f:b6:bc:8f:e1:93:
                    bf:cc:9a:66:ca:9e:2e:79:d5:cd:8c:22:2b:9b:7c:
                    6c:2d:80:74:30:5c:4d:a3:c9:35:39:ea:37:81:ef:
                    96:a9:f6:65:f5:c4:5c:bb:7a:15:c8:e9:d5:6d:16:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7D:7B:CB:CE:BB:6D:FE:B9:4F:D1:0E:32:C2:CF:2C:E0:B3:26:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:cd:4c:ba:e5:c9:87:40:c7:3c:22:76:0f:e6:22:a5:5d:
         69:28:eb:f6:e4:9a:a1:ec:e6:75:96:8e:35:97:d9:ee:bb:52:
         60:d0:39:f0:e7:2c:52:ce:21:f7:d9:98:64:ea:1a:fa:a6:ad:
         08:0f:4a:e5:39:11:9c:14:d5:de:2d:93:2f:2c:88:0f:37:46:
         af:6e:9a:29:ce:1e:cb:15:d4:7c:90:cc:7a:8b:b3:20:1d:20:
         ff:17:8a:29:a3:0e:10:f8:9e:81:df:c6:a8:24:80:d2:5e:e4:
         04:aa:3e:cf:2b:88:d2:33:7f:0c:2d:06:84:92:c5:24:49:9e:
         7c:cd:00:7d:b4:a5:e6:81:50:8c:17:52:42:c4:eb:65:5e:a3:
         90:b5:f3:61:41:62:e7:51:a3:a6:14:98:fe:ac:0c:72:9c:f8:
         25:47:16:45:fe:db:0b:42:ef:3b:3f:89:fc:ee:8c:27:46:82:
         52:c2:8e:f5:8d:3a:52:a2:22:cc:52:4c:fa:82:e0:08:61:f5:
         8a:68:3b:4c:3d:68:c7:61:d2:8a:0d:56:97:52:99:b1:b4:6c:
         86:b8:06:ef:70:a4:38:65:47:99:7a:df:b5:04:5a:5c:de:4e:
         7b:fc:8d:23:95:dc:9f:80:2c:e5:c5:da:93:b8:04:d6:b6:35:
         ea:36:4d:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKuJuiNUZxEY8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
M2U5MTMzOWUtMWZhZi00YjAyLTliMGItN2RmNjA4ZGJhZGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJFWCO4SrTVrVDDaTWFnC/JQI52eaal6Frgc
MczAMInjsHQhLBhe/lbHCddEMOarcIj3PGusBX0oLRwl6q6YVYruNW7Y0X/KRbaM
5BAkI8O85wokJ6h2esRknlnKCCTE6W8XMvNibrpsut2xbzjbKPGTRKaLhTuZ5yp5
CW3OCYErquspq8sjcqETjZIPay4/b+Ki6J7lj7fr97eJQDoVRLa6LsrxOGRxk3Ig
X/UKZ/acMXnTQDuuf5LIcb4bV3IyiBApznw0MjOufpZPtryP4ZO/zJpmyp4uedXN
jCIrm3xsLYB0MFxNo8k1Oeo3ge+WqfZl9cRcu3oVyOnVbRYLHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ59e8vOu23+uU/RDjLCzyzgsyZuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmMwMWVhMzgtZjM3MS0z
ZmFhLWFjYWMtMTRlYTEwNjg5Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9/zUy65cmHQMc8InYP5iKlXWko6/bkmqHs5nWWjjWX2e67UmDQOfDn
LFLOIffZmGTqGvqmrQgPSuU5EZwU1d4tky8siA83Rq9uminOHssV1HyQzHqLsyAd
IP8XiimjDhD4noHfxqgkgNJe5ASqPs8riNIzfwwtBoSSxSRJnnzNAH20peaBUIwX
UkLE62Veo5C182FBYudRo6YUmP6sDHKc+CVHFkX+2wtC7zs/ifzujCdGglLCjvWN
OlKiIsxSTPqC4Ahh9YpoO0w9aMdh0ooNVpdSmbG0bIa4Bu9wpDhlR5l637UEWlze
Tnv8jSOV3J+ALOXF2pO4BNa2Neo2TeU=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:46 2025 by rpki-client