Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d158e54d-cfa2-307c-95d0-4e82f644ecfb.roa
File:                     d158e54d-cfa2-307c-95d0-4e82f644ecfb.roa (raw, json)
Hash identifier:          y2PUv0QDrQoRfBDO9SEkcx1KsBQES/BaaMBAK1X5NDM=
Subject key identifier:   FB:5A:BC:F3:F8:FA:6D:FC:0C:9E:AE:0E:09:16:DE:B0:0E:B1:60:FF
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C5EB8F9A57D551B933600
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d158e54d-cfa2-307c-95d0-4e82f644ecfb.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.53.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:5e:b8:f9:a5:7d:55:1b:93:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=a4b5244a-766a-465a-9b81-0b2228a64f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:08:43:f6:0b:56:c5:13:4b:e5:84:0c:ed:1e:
                    26:4f:63:44:0f:c1:ad:77:58:db:a2:47:8e:64:fd:
                    7d:b1:74:8c:2a:68:73:7b:84:b0:f4:57:b3:4d:8c:
                    33:b8:f6:e1:f4:a6:17:d9:03:fe:26:1d:73:57:66:
                    8e:0b:a8:f4:a6:e6:cd:7e:84:2a:46:e9:b8:9f:fe:
                    c9:fe:0c:21:f1:fd:59:6d:fd:f3:dc:6a:36:32:81:
                    7b:24:c5:f2:e6:79:86:4d:5c:1c:b8:e5:ae:f1:cc:
                    3a:3e:06:a9:fb:79:8e:62:cb:b9:bc:75:7a:10:87:
                    5b:48:90:41:c6:53:6c:08:16:96:6e:81:98:ba:12:
                    db:ba:01:86:24:9a:f1:8e:75:f6:d7:b6:8b:71:35:
                    7e:57:d6:22:cc:7a:28:b5:e8:e4:61:8f:c2:a9:19:
                    93:d6:99:4b:e0:7d:81:32:71:a3:97:af:bd:bc:a7:
                    59:4a:39:40:88:d1:1c:18:65:31:b2:54:0d:f2:b6:
                    9e:78:79:c9:8f:a5:ba:a8:98:4a:ee:b4:75:e6:23:
                    04:7a:99:33:0b:b9:63:a7:4f:77:18:64:59:c7:e4:
                    0b:84:95:2a:2e:a4:58:26:67:38:ad:dc:15:a1:b5:
                    2f:e5:f0:99:aa:2f:1f:35:59:11:0c:59:be:dc:4e:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5A:BC:F3:F8:FA:6D:FC:0C:9E:AE:0E:09:16:DE:B0:0E:B1:60:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d158e54d-cfa2-307c-95d0-4e82f644ecfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:39:5f:02:5c:7f:b3:ec:4f:2c:88:77:c8:8a:78:fa:9c:be:
         34:9f:4d:e4:98:0b:aa:bc:08:ce:22:36:94:3f:cd:34:bb:55:
         29:e8:77:ba:38:8d:06:58:2b:c1:7f:a2:af:ff:22:35:d2:b6:
         b0:aa:7f:77:5e:3c:6e:c7:01:1d:70:65:2d:3a:58:1c:b4:bf:
         f3:eb:e2:88:5f:19:ae:55:b6:13:50:2b:36:bd:8d:d6:cf:90:
         e5:9d:32:1e:46:b0:e4:d2:cd:bd:55:d9:53:a9:b2:f1:d7:eb:
         76:df:2c:ff:77:f4:77:51:a4:03:aa:8d:26:6b:91:07:01:b3:
         df:a6:bc:a2:f2:7e:43:40:5b:13:56:51:f2:06:7b:42:e5:22:
         f4:a8:7d:d5:2e:6f:f0:21:81:57:c4:f9:69:44:f6:e7:21:b0:
         06:0a:97:45:ce:c5:f8:fd:ce:24:45:b9:45:bd:04:ad:1f:33:
         72:32:cd:ae:41:83:13:26:1e:cb:8d:cf:4f:f2:14:c1:71:09:
         9b:ae:27:de:9a:64:f1:b7:de:23:29:16:ab:6a:e9:1f:b5:2d:
         f4:20:c9:c0:a4:c9:e2:07:24:aa:52:30:e2:c4:1b:94:08:74:
         4b:ce:b4:f1:11:02:cd:c4:d3:71:3a:46:f2:fb:46:d7:0c:24:
         3f:ab:91:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTF64+aV9VRuTNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
YTRiNTI0NGEtNzY2YS00NjVhLTliODEtMGIyMjI4YTY0ZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQhD9gtWxRNL5YQM7R4mT2NED8Gtd1jbokeO
ZP19sXSMKmhze4Sw9FezTYwzuPbh9KYX2QP+Jh1zV2aOC6j0pubNfoQqRum4n/7J
/gwh8f1Zbf3z3Go2MoF7JMXy5nmGTVwcuOWu8cw6Pgap+3mOYsu5vHV6EIdbSJBB
xlNsCBaWboGYuhLbugGGJJrxjnX217aLcTV+V9YizHootejkYY/CqRmT1plL4H2B
MnGjl6+9vKdZSjlAiNEcGGUxslQN8raeeHnJj6W6qJhK7rR15iMEepkzC7ljp093
GGRZx+QLhJUqLqRYJmc4rdwVobUv5fCZqi8fNVkRDFm+3E4/AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtavPP4+m38DJ6uDgkW3rAOsWD/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDE1OGU1NGQtY2ZhMi0z
MDdjLTk1ZDAtNGU4MmY2NDRlY2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGg5XwJcf7PsTyyId8iKePqcvjSfTeSYC6q8CM4iNpQ/zTS7VSnod7o4
jQZYK8F/oq//IjXStrCqf3dePG7HAR1wZS06WBy0v/Pr4ohfGa5VthNQKza9jdbP
kOWdMh5GsOTSzb1V2VOpsvHX63bfLP939HdRpAOqjSZrkQcBs9+mvKLyfkNAWxNW
UfIGe0LlIvSofdUub/AhgVfE+WlE9uchsAYKl0XOxfj9ziRFuUW9BK0fM3Iyza5B
gxMmHsuNz0/yFMFxCZuuJ96aZPG33iMpFqtq6R+1LfQgycCkyeIHJKpSMOLEG5QI
dEvOtPERAs3E03E6RvL7RtcMJD+rkQ0=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:19:40 2025 by rpki-client