Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/037ab9d0-1dd8-31d2-86e6-df05501d0606.roa
File:                     037ab9d0-1dd8-31d2-86e6-df05501d0606.roa (raw, json)
Hash identifier:          rXyaoHL7Y2YW/gsU1p+460mao8T3C96dHHDvLunlLsA=
Subject key identifier:   85:AF:F0:74:8B:BF:21:B9:66:73:68:66:62:E6:75:92:89:68:6C:A4
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318AC9FF892CA4E263CCF80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/037ab9d0-1dd8-31d2-86e6-df05501d0606.roa
Signing time:             Thu 23 Jan 2025 06:13:22 +0000
ROA not before:           Thu 23 Jan 2025 06:13:22 +0000
ROA not after:            Wed 23 Apr 2025 05:13:22 +0000
asID:                     16591
IP address blocks:        136.53.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ac:9f:f8:92:ca:4e:26:3c:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:22 2025 GMT
            Not After : Apr 23 05:13:22 2025 GMT
        Subject: CN=28038b4c-ef1f-481b-8c6f-364d628156e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:2f:f7:10:fe:1a:4d:11:26:4c:6b:50:ee:
                    72:8c:c1:79:33:c9:cf:28:61:0e:90:67:8b:5f:b7:
                    c6:db:e3:1a:8d:53:bc:72:00:3f:3d:d5:78:60:88:
                    f0:11:2f:5d:d0:0a:6c:50:60:c5:49:20:11:bb:f9:
                    0f:22:12:8a:59:dd:13:a6:98:2f:fa:4e:66:9e:2a:
                    ac:10:5d:41:e9:3f:9d:ca:9b:b6:03:15:c6:fe:0b:
                    16:d8:2c:65:c0:20:83:3b:a3:85:b2:88:28:c3:7c:
                    84:70:25:13:a5:3f:0d:e5:79:67:d3:10:7b:15:40:
                    77:5e:9c:30:5b:66:ca:e3:b6:c3:58:da:3e:f4:c3:
                    62:21:b7:d0:88:ce:79:97:f8:7f:c0:ce:6b:19:80:
                    d7:ed:00:e5:1c:e5:e4:82:8f:f7:3c:57:2b:df:bc:
                    2a:c3:2b:02:18:6c:d4:fc:78:b4:1a:a4:8e:6b:50:
                    62:9a:48:1f:cd:27:d9:c5:ab:e5:0e:e2:e2:0b:34:
                    28:39:01:9e:fa:94:bc:f9:6c:74:a6:1d:a6:d2:0c:
                    17:aa:41:bd:fd:7b:7f:bc:cd:bb:b1:80:e1:8e:1e:
                    74:5b:ec:fd:24:87:5b:60:bf:e9:e8:50:ef:55:69:
                    e2:3c:84:a4:3b:86:a3:8a:b4:57:c4:7b:1d:6b:d8:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AF:F0:74:8B:BF:21:B9:66:73:68:66:62:E6:75:92:89:68:6C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/037ab9d0-1dd8-31d2-86e6-df05501d0606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2e:ad:ce:11:e5:84:e7:28:b9:2b:df:d8:f6:4d:03:01:14:
         44:34:03:ab:dc:85:20:18:42:fa:59:a0:fb:67:0b:fc:b5:94:
         7f:ca:a8:76:72:96:05:84:ee:33:69:18:06:4b:ae:09:d9:7e:
         20:44:92:69:fb:14:65:a6:8b:4c:b7:cd:dd:45:ef:b1:77:d2:
         58:96:b5:dd:eb:57:c4:93:ae:ca:57:e3:a4:3d:dd:0d:65:e4:
         b5:2f:74:a4:d4:6f:35:f8:89:8d:46:f9:04:cd:70:94:c2:56:
         ee:32:5e:45:43:4e:29:c7:67:50:d4:d3:6f:de:aa:fe:d0:dc:
         5e:50:af:e8:10:bf:8a:86:76:7d:4e:34:d2:9b:db:c0:1d:b4:
         0e:45:a2:80:5e:f3:6e:a8:9e:40:2d:e5:df:cc:ff:3c:62:14:
         f7:60:0e:bf:cc:ab:cb:87:e2:9e:09:df:01:2c:5f:09:57:52:
         94:f2:ee:c4:2d:45:65:22:1f:93:e3:f0:4c:76:4c:bc:af:4e:
         ed:03:19:4b:99:1a:86:39:83:4b:07:bd:b2:7c:33:bd:69:c6:
         c3:f4:a8:88:c0:b1:8a:6b:eb:17:d5:2f:5e:b4:9f:d3:72:bf:
         11:1a:5c:b6:2d:7c:d9:ac:e3:36:12:ad:f1:d4:b2:29:c6:2c:
         2d:ba:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:43 2025 by rpki-client