Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/037ab9d0-1dd8-31d2-86e6-df05501d0606.roa
File:                     037ab9d0-1dd8-31d2-86e6-df05501d0606.roa (raw, json)
Hash identifier:          PU8tzFdakBp28Lj0ypAGlaoOK/QVCqP8RShFa4wyUOA=
Subject key identifier:   B7:40:18:53:17:FA:68:1D:F1:A4:94:31:96:F5:20:8A:8F:64:06:35
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290CD69E5E5DDC544EE97A0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/037ab9d0-1dd8-31d2-86e6-df05501d0606.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.53.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cd:69:e5:e5:dd:c5:44:ee:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=295757c1-4673-4bd7-bae8-875070925219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:51:a1:46:ad:7d:69:6c:d9:bc:bd:7c:84:
                    3a:eb:89:6e:ef:d4:94:9c:f0:8d:db:25:0d:ea:fc:
                    e1:60:bb:66:7e:c1:25:5e:e9:d5:5c:41:48:dc:ab:
                    ae:4e:06:88:57:ac:58:18:60:23:d5:40:ad:d6:da:
                    8b:f7:8a:fc:48:30:68:ed:ce:c2:b6:28:3c:0a:63:
                    b7:07:ee:1a:64:45:0a:77:f5:58:9d:3d:06:90:de:
                    ff:35:2c:57:13:54:f4:1b:39:d7:c4:cd:d7:a1:f5:
                    4e:eb:77:d8:45:70:d4:d4:76:c8:b2:0b:c9:2c:34:
                    d4:8b:9b:70:b8:40:54:04:c8:09:fa:69:14:ae:33:
                    ed:0c:69:fc:22:f1:17:05:2c:3e:39:eb:9f:64:81:
                    81:0d:ec:13:36:c1:7f:9d:bd:d1:56:47:a3:18:3d:
                    27:19:48:5a:59:e8:48:e1:f5:b8:16:41:6d:51:5b:
                    c1:4f:82:f4:22:65:e0:3a:e0:a0:a5:ae:54:0f:06:
                    ba:09:9c:a3:98:83:54:4f:91:10:e6:23:06:bc:50:
                    ef:ca:bd:8a:0c:c5:49:b0:17:74:7b:54:1c:80:09:
                    bd:92:2f:48:96:eb:5a:b7:20:f3:83:4e:95:d0:60:
                    c2:2c:06:78:aa:c7:26:69:b4:3f:ce:60:15:fd:5e:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:40:18:53:17:FA:68:1D:F1:A4:94:31:96:F5:20:8A:8F:64:06:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/037ab9d0-1dd8-31d2-86e6-df05501d0606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:70:31:f1:d7:47:fc:86:a6:c9:b2:83:d2:c0:73:95:2e:91:
         43:79:50:65:49:65:9d:7d:af:fb:72:d8:53:78:f5:00:bc:ff:
         eb:62:55:e9:fc:94:9d:eb:c8:3a:65:0f:57:13:2a:2a:ac:b2:
         d9:4f:e3:f3:76:f5:f0:15:e9:33:af:a6:12:3b:d0:0e:36:5d:
         a0:e7:a3:4b:c2:ca:98:5d:a1:9f:38:6e:74:87:06:7b:fa:0c:
         34:a5:84:e4:c3:82:c2:60:cc:44:9c:79:34:07:31:94:83:e1:
         8a:55:0a:42:8f:c5:7d:20:9b:50:dc:ef:e3:80:29:89:25:4b:
         51:b9:25:e6:35:b5:7f:e8:ed:ce:a9:36:55:e7:4c:d0:5c:46:
         92:99:b1:b3:5a:f7:8e:65:9f:21:a2:5e:36:e3:d0:d9:2b:d5:
         f2:03:aa:6b:d6:ff:58:67:9f:9d:19:81:72:60:c0:a9:9a:4c:
         1c:ed:4e:e4:83:8b:15:3e:9b:d2:97:76:f8:33:1a:42:4c:03:
         f5:78:5b:b2:db:ed:1c:d7:1c:b6:25:72:12:b0:87:fd:fb:90:
         19:01:fc:f4:08:78:76:9b:47:f8:78:f7:d1:c0:f2:56:2c:af:
         47:b8:30:7a:2a:fc:4a:3d:a9:21:ee:95:4b:d3:61:af:7f:4d:
         31:ec:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:19:26 2025 by rpki-client