Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
File:                     f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa (raw, json)
Hash identifier:          kX69emTfafnREvw7W4Oqc9fQYcg6jZ2fd6fMoaFbzQQ=
Subject key identifier:   DE:AA:E0:06:86:FF:95:42:48:2D:65:AA:7E:FE:F6:86:3B:9C:72:48
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C4C8CB226A3216A3B9800
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.33.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:4c:8c:b2:26:a3:21:6a:3b:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=099c9937-beff-4471-a136-c5036d5e86b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:d8:6c:e1:97:68:87:83:c6:26:1b:8c:b9:
                    76:48:56:a3:7d:de:03:bb:83:33:26:fb:41:f4:00:
                    d6:8f:be:da:3a:37:ee:c4:50:03:48:a1:86:62:d2:
                    c2:27:9a:44:a6:a1:a7:0f:a8:8e:cb:22:84:f9:1b:
                    f0:f7:aa:74:e9:3e:f0:a9:f2:ad:c7:b2:f1:7b:1c:
                    81:8a:9b:26:d1:2a:82:df:a2:70:b4:ff:a8:65:18:
                    27:dc:94:f1:45:79:c9:75:6f:35:63:f8:dc:db:52:
                    44:e3:fe:94:5d:f0:0d:2b:88:6a:f1:86:bd:d2:8e:
                    83:83:5e:3f:95:6f:70:61:26:33:6b:f8:e5:67:92:
                    c4:78:78:55:f7:da:fd:e8:16:71:2d:93:6a:f1:51:
                    54:ec:8e:85:f3:96:fb:b6:65:11:df:ed:a9:94:e3:
                    fd:ad:d7:01:8b:9c:11:06:15:a2:fb:ab:6d:34:10:
                    83:73:e5:24:18:cc:39:aa:e9:8c:30:1e:c4:e1:a4:
                    bd:3b:7a:5c:dc:23:c8:99:97:38:06:52:3d:31:49:
                    4c:67:e7:61:74:b7:39:ef:32:ab:90:4e:01:ec:71:
                    8f:9a:75:df:c2:d7:5b:e9:f3:5b:c2:21:ca:cc:50:
                    ab:c3:b5:31:77:b4:ec:b7:09:f9:12:d9:b5:d8:16:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AA:E0:06:86:FF:95:42:48:2D:65:AA:7E:FE:F6:86:3B:9C:72:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d7:ed:f4:72:fb:72:4f:06:38:80:fc:24:42:7c:84:66:82:
         81:71:7c:d8:ab:fd:f5:5f:60:bc:26:34:f0:a5:70:93:72:03:
         cb:5e:14:7d:03:45:00:4c:bd:a6:ab:db:aa:5a:c9:84:46:18:
         a5:d6:0f:7e:55:e2:17:34:17:ae:cd:15:ad:d0:0f:53:99:9a:
         c6:3f:2b:d4:d2:3d:70:fe:58:99:a1:ee:0c:fe:ba:d3:8a:89:
         c7:d2:f6:07:4f:3f:b0:6c:d1:11:8f:d1:54:8f:01:5f:15:ec:
         59:cf:e7:68:50:ce:59:a4:ab:bf:58:09:ad:d8:5f:ca:51:43:
         2e:16:12:30:99:ba:b2:f7:93:50:26:b5:e6:d1:a4:1c:20:2f:
         89:1a:13:9c:06:de:1e:4d:57:47:c1:11:09:ee:6a:17:11:bc:
         cd:01:7d:d9:6b:8c:54:76:c4:ff:b6:9a:1e:9a:0a:50:57:fc:
         30:b4:e0:ad:50:de:77:c1:19:59:94:3b:e4:26:f6:e8:ca:20:
         21:f6:99:0d:84:0a:e4:f4:ab:58:8f:16:ac:87:41:3d:ec:f5:
         12:4b:68:29:3b:ab:c4:92:81:45:15:cd:44:61:e3:d2:9c:f5:
         a8:3b:2b:31:12:65:f8:c2:66:0a:c3:b2:7d:b6:5c:b7:cb:e6:
         24:7f:cf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:19:40 2025 by rpki-client