Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9e552c4-74d5-3fe5-a591-8e4c9b846b8e.roa
File:                     f9e552c4-74d5-3fe5-a591-8e4c9b846b8e.roa (raw, json)
Hash identifier:          qdetgETYDLHrnhWf3iceK+CXGoqwdy/ab9rgQDVknqA=
Subject key identifier:   26:6E:D1:64:7B:F7:E9:C6:78:76:E1:BA:99:D1:08:B4:6B:8F:2B:E9
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C4A2D82F355372D45D180
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9e552c4-74d5-3fe5-a591-8e4c9b846b8e.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.47.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:4a:2d:82:f3:55:37:2d:45:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=7ba82f6c-12cc-4e5a-9af6-8395f8f95bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:d1:01:5f:59:01:87:37:de:f2:49:bc:3d:
                    7e:08:c0:f7:40:59:b4:04:e8:a0:94:7e:ec:a2:e0:
                    7d:d4:51:58:33:c4:ae:1d:3e:ed:60:e3:2f:83:5a:
                    13:38:24:7e:88:ae:d7:11:a8:8f:79:c8:60:e5:30:
                    8d:aa:89:a9:de:6d:be:1f:1f:4f:c1:de:e6:ef:94:
                    cb:28:6b:45:f3:df:d3:2e:ea:55:13:47:00:9b:f3:
                    3f:65:40:e1:74:d9:54:2b:b0:27:86:f6:b7:d6:c7:
                    49:51:46:5e:b7:1a:c1:6d:84:94:22:af:87:ae:4a:
                    8d:5e:cb:41:0f:62:62:a9:a8:22:2d:7a:e0:1f:96:
                    dd:89:89:2e:c1:4c:8b:d4:6e:d0:e7:23:cf:9c:87:
                    90:5b:ea:0f:0f:89:a2:6e:ca:ab:25:54:4d:f4:b0:
                    5e:eb:20:28:15:f7:f4:45:a6:30:84:79:a3:53:b4:
                    89:1c:cd:74:60:61:1e:9f:05:12:3b:93:0e:a8:6b:
                    31:f2:66:86:30:83:74:50:f3:6f:79:e2:35:64:65:
                    5e:d8:5d:c5:eb:16:75:d6:c6:d4:af:2f:49:f0:4b:
                    a8:e8:3d:cf:2f:28:4f:9c:f4:aa:f4:ba:c3:ef:3a:
                    cf:1d:b1:e0:95:e4:d6:41:00:f3:19:52:e3:7c:aa:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6E:D1:64:7B:F7:E9:C6:78:76:E1:BA:99:D1:08:B4:6B:8F:2B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9e552c4-74d5-3fe5-a591-8e4c9b846b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.47.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:af:64:ba:3a:bf:92:f5:b0:b9:e8:0b:24:ae:28:ae:ae:3f:
         2a:71:fc:b3:1f:98:74:3e:08:2d:71:8a:73:0e:07:17:7b:c9:
         91:4d:a9:4f:f4:c3:88:5f:7b:1f:14:f4:07:15:fb:20:52:b6:
         9b:51:8a:fb:b7:69:2f:b2:bb:7b:d9:ba:58:0e:ce:37:9a:87:
         d6:9d:e0:71:cf:16:00:f7:f0:1f:9c:66:4a:66:9b:bd:12:48:
         4e:17:5a:60:c9:41:15:b5:a5:83:42:94:8b:2c:83:be:9f:10:
         8f:a4:23:a9:a3:e7:29:0b:db:ea:2c:3a:26:da:8e:3d:c2:76:
         5f:3f:37:3e:3d:d0:b8:f7:6f:47:34:49:7a:92:30:4c:c6:22:
         2c:29:a1:ea:5f:88:9d:b7:60:00:9b:0a:80:90:18:e5:b4:67:
         89:53:6b:e1:0f:54:c5:63:1c:52:4f:e7:46:a2:d5:b7:00:fa:
         1e:d7:21:a3:8f:80:2b:6b:40:cc:80:9d:5d:ed:f2:c2:86:ef:
         7d:e8:19:1d:f5:41:d5:9a:53:34:1f:0f:97:02:2d:7c:7d:7e:
         2a:58:de:28:a0:a3:e3:31:d6:9c:4e:45:57:d8:fe:27:fd:61:
         74:ad:e3:a3:ea:88:53:7c:f7:88:70:80:10:ef:b2:bb:9b:24:
         b3:df:d7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:14:44 2025 by rpki-client