Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f5240dbf-e67a-3452-a378-c17350bcab35.roa
File:                     f5240dbf-e67a-3452-a378-c17350bcab35.roa (raw, json)
Hash identifier:          IjJ8ecgPKfFOHOCyrJfSZgno174pHlBW2HUasdEuZl0=
Subject key identifier:   2B:9C:26:69:4A:38:49:A3:97:18:67:E5:E6:77:9C:3B:93:6E:5A:CF
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C560FC5A8AE2771EABCDB
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f5240dbf-e67a-3452-a378-c17350bcab35.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.35.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:56:0f:c5:a8:ae:27:71:ea:bc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=0dc8f1cd-477f-451e-8189-8d6a204de3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:0a:dc:a9:7f:a4:3b:7d:82:a0:bb:64:71:
                    0c:5b:26:36:22:da:a5:61:de:e9:5d:fa:f0:de:3c:
                    ec:59:8b:86:b3:a9:6e:08:24:c4:87:57:09:0c:5b:
                    1f:c8:98:30:06:ee:91:43:f5:ad:ed:34:b2:9d:5d:
                    d1:cf:32:0a:cf:73:e3:8d:e5:1b:a7:31:b8:f5:ff:
                    cb:8e:86:a9:58:79:d5:1a:3c:75:9f:a8:ca:50:dd:
                    af:4c:0b:ce:34:bc:ad:3d:93:8c:04:4b:93:4e:d2:
                    0f:8f:df:a1:26:62:60:42:29:b0:d8:2a:ef:47:03:
                    41:e8:b4:13:97:e8:1f:33:3f:c1:76:1c:76:d9:49:
                    0d:51:f2:c9:2a:c6:3e:5b:09:aa:90:df:9f:d1:61:
                    b3:ee:f2:04:16:31:9b:37:fb:65:86:2d:2d:bd:68:
                    8d:5e:d3:11:24:f6:c9:f3:46:86:ed:6b:75:c2:3b:
                    48:c9:d7:57:9d:ad:83:47:0c:46:28:d6:46:ad:69:
                    17:a1:c4:ec:a0:c9:a6:68:9d:9b:ff:36:db:cc:59:
                    28:f5:6d:7c:d8:e3:f6:3e:b3:09:a0:df:c4:2c:2d:
                    89:6d:a6:d8:3b:11:3d:1a:df:f7:51:a9:7b:2f:b5:
                    40:9d:01:88:23:9b:07:f3:dd:97:72:71:93:57:a8:
                    c3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9C:26:69:4A:38:49:A3:97:18:67:E5:E6:77:9C:3B:93:6E:5A:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f5240dbf-e67a-3452-a378-c17350bcab35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b3:6a:ad:03:b1:24:04:71:17:d0:b6:e9:01:7e:cc:6f:5f:
         71:87:43:54:3f:f9:8b:4c:17:52:1d:f4:61:3b:d4:1b:78:49:
         3f:80:47:c1:f8:50:93:4b:bb:08:2e:58:73:91:a0:2e:7c:6e:
         a1:c3:ba:67:e1:dc:36:3c:4f:47:50:41:a0:60:20:8d:5a:9b:
         34:f8:2f:11:a1:86:16:6f:c2:ce:de:89:b0:ed:48:ba:c8:22:
         22:a9:75:98:cb:76:b5:8d:60:aa:32:d8:21:06:72:a8:84:33:
         13:64:53:35:80:43:da:12:d8:50:af:7f:c6:f1:e2:93:f5:37:
         5b:6e:1b:8c:45:39:08:d6:d7:a1:6f:82:b3:2e:2a:87:c6:33:
         a1:9f:b5:da:b5:d1:e7:5e:4b:16:a3:ac:85:64:4f:e7:5e:d1:
         0c:3d:a9:4f:cd:fa:5b:1a:ba:b7:0b:51:95:62:30:36:22:af:
         ab:ca:3d:a9:78:3b:7b:43:c2:a9:d9:05:87:af:40:30:d2:f6:
         94:3c:fd:e4:2a:da:82:e0:6f:fe:54:f0:88:65:51:43:a8:e5:
         d8:e1:6a:6c:a6:c4:11:cf:18:a9:07:7c:f7:bb:12:86:79:f6:
         c0:7e:4d:cd:c7:46:bb:53:90:63:6a:cf:2d:22:47:ff:4a:a7:
         4f:37:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:12:00 2025 by rpki-client