Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa
File:                     c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa (raw, json)
Hash identifier:          fYNAd3jcz7eUYk0JHxAOgWFuM2HFrtrFCG0KAmv1z0A=
Subject key identifier:   8E:CD:70:CB:F5:3B:A1:CC:54:69:72:46:B2:C4:27:9B:BB:BF:FE:C6
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C9C4A91A1ABA7A84E9280
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.34.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9c:4a:91:a1:ab:a7:a8:4e:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=d3e3e006-3b7c-4600-9ce2-6971e9948411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:5e:f0:97:c9:e5:98:cc:5f:a5:3c:3e:77:
                    ea:4c:05:b2:e0:28:7f:4c:36:1b:e8:58:3b:ca:49:
                    b2:58:e5:e8:1b:90:f8:a6:e3:25:a5:d1:77:c6:63:
                    13:bf:08:a3:c5:0b:f8:7f:03:c7:ef:02:bb:c0:11:
                    01:ec:23:ec:b6:7b:8a:92:3e:dc:6f:7b:9a:33:e0:
                    54:78:23:5c:ae:1b:7d:cd:54:47:aa:9a:d8:d9:ec:
                    bd:25:89:e1:84:d8:21:cb:78:c1:78:31:69:e1:1f:
                    22:d5:f1:ba:e5:ed:3b:6c:66:35:86:90:94:8d:1a:
                    b6:65:cc:c0:fe:ea:81:d3:a3:ba:ff:02:42:71:92:
                    eb:7e:bb:8f:2b:fc:5e:d5:21:ee:93:a3:61:74:ad:
                    ff:01:20:25:d9:0e:27:bf:eb:a7:14:f0:62:7a:9d:
                    c1:8d:9b:0d:fb:b1:dc:a1:3a:30:ed:d5:6b:84:99:
                    31:dd:f4:82:47:07:fb:6c:35:34:08:1d:ea:61:bb:
                    5e:8d:8e:dc:f0:85:a9:de:db:97:f7:20:93:09:8f:
                    63:4a:0d:07:89:74:08:55:b5:66:8d:15:44:bf:cf:
                    8d:23:b6:af:1a:53:80:17:24:1f:cb:a6:7d:36:ab:
                    6a:d9:c7:85:ba:f9:c7:ae:9a:8c:c6:f0:4f:a5:1f:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CD:70:CB:F5:3B:A1:CC:54:69:72:46:B2:C4:27:9B:BB:BF:FE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:36:22:6a:61:f4:f7:24:0c:ee:78:bd:dd:ff:05:94:57:
         cd:fc:88:3e:8e:46:ce:85:45:3d:21:ca:44:6c:01:2b:0b:3a:
         98:bf:18:49:7f:ab:ce:00:68:e6:81:69:9b:81:48:37:db:21:
         42:d8:9b:9f:ef:c9:b0:20:af:ce:e6:2f:d7:ae:f2:b0:ff:cb:
         d9:7f:c3:03:9a:73:44:dc:e3:7b:fa:ed:f4:65:6f:b3:03:91:
         c9:b0:82:14:44:4d:b8:5d:83:d1:66:8c:ca:8c:52:2c:b9:a9:
         e4:a2:39:3c:02:31:0c:3f:80:43:fd:7b:0b:a6:48:52:c1:8b:
         11:b5:be:6e:46:ff:74:0e:04:a1:87:c8:7b:2c:eb:c8:aa:52:
         77:94:32:d3:c9:7c:0a:e3:bb:e8:cf:61:7c:6e:18:2a:4b:9f:
         f8:9d:de:e9:5c:3a:df:dc:7e:c9:83:6b:bf:51:79:a8:25:78:
         c3:b2:fe:bd:7e:6e:8f:4f:5e:60:fe:62:15:a2:5d:82:02:6a:
         d3:57:73:4f:96:0c:55:95:58:de:4a:26:44:79:c4:74:d3:f5:
         09:6b:53:0c:a5:3e:79:bf:38:16:cb:64:79:2b:cc:52:5b:8f:
         37:e3:6d:84:8e:81:83:8c:fc:83:63:b8:c8:81:e0:35:5c:10:
         54:58:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:10:14 2025 by rpki-client