Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0a0c920c-71b6-3c53-8692-b76389a22c56.roa
File:                     0a0c920c-71b6-3c53-8692-b76389a22c56.roa (raw, json)
Hash identifier:          x9izrNYtRl3KtaML0BE0mkq6oj1yecSqk8s3GMx+Cc0=
Subject key identifier:   F1:6A:5E:D2:9D:3C:30:F7:9D:2C:27:C9:87:93:F1:D1:5E:B2:A4:ED
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318ADCAA1D5F558BD96B880
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0a0c920c-71b6-3c53-8692-b76389a22c56.roa
Signing time:             Thu 23 Jan 2025 06:13:22 +0000
ROA not before:           Thu 23 Jan 2025 06:13:22 +0000
ROA not after:            Wed 23 Apr 2025 05:13:22 +0000
asID:                     16591
IP address blocks:        136.52.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ad:ca:a1:d5:f5:58:bd:96:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:22 2025 GMT
            Not After : Apr 23 05:13:22 2025 GMT
        Subject: CN=36824bc7-c12d-4033-983e-278aceca553c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:71:eb:ff:87:18:e8:e2:d2:37:8f:31:fc:
                    f9:3f:3c:a7:63:f8:fb:21:20:26:59:40:1f:0e:ad:
                    1f:2d:5c:dc:61:94:9b:fc:0c:0e:47:b8:7e:11:01:
                    0e:13:2a:d1:e7:15:27:77:55:44:f9:3d:0a:4d:c8:
                    c4:0a:e9:8b:ee:aa:ed:46:8b:28:f8:32:50:76:db:
                    8d:c3:33:48:88:6f:d2:41:1d:4b:3f:c4:b0:b1:35:
                    1e:2f:0e:a5:66:c2:e9:50:1c:c6:c8:77:dd:d1:8e:
                    7c:a2:85:78:e6:54:22:60:da:8f:1b:4c:5d:95:c9:
                    dd:8f:6b:65:62:3c:4c:5a:15:89:48:98:3a:6a:44:
                    42:20:b9:5d:85:e8:6d:28:4f:be:7d:36:73:90:2e:
                    71:48:db:48:a1:ab:c3:a8:22:6d:02:4a:ff:55:a0:
                    29:77:04:9a:76:9f:6f:de:1a:b8:ff:0a:bd:e0:3a:
                    96:09:86:e0:7d:37:eb:9d:22:f1:a3:37:f5:7d:10:
                    b5:ed:73:c8:5d:a8:73:fe:bb:10:7d:55:7f:a6:69:
                    aa:87:6b:ad:d7:9c:08:d2:82:e4:c4:f2:2c:ec:dc:
                    26:4f:a0:39:ea:49:29:a3:f9:41:14:00:aa:29:bc:
                    f9:82:35:9e:18:e5:70:6e:c9:3d:dd:01:7d:b1:55:
                    44:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6A:5E:D2:9D:3C:30:F7:9D:2C:27:C9:87:93:F1:D1:5E:B2:A4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0a0c920c-71b6-3c53-8692-b76389a22c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:d8:bc:da:f6:a2:16:b3:a1:ff:57:d2:94:20:8e:ea:f2:
         a2:8b:00:e9:61:fe:cf:be:96:54:ff:1a:36:7f:39:98:a4:03:
         52:17:48:17:76:ec:ab:17:ed:4d:7b:61:b3:a5:ac:70:ab:33:
         10:81:a5:a9:4a:c4:03:f0:41:82:cf:f2:af:2d:15:a3:16:c2:
         3d:fe:d8:e5:02:3c:3b:e8:80:8b:a2:0f:3a:d1:91:37:ca:e5:
         3a:eb:c0:06:2a:ac:64:9b:b9:d0:be:8c:a0:bc:ad:2d:82:2f:
         cd:75:38:2e:52:7a:4b:f6:79:ad:29:95:df:39:71:d1:65:77:
         dd:37:7d:d3:07:21:8f:ab:b2:d5:dd:22:f9:9c:68:e6:c2:32:
         93:d0:74:46:e6:74:36:e2:17:a1:04:23:a6:e7:d5:b8:2c:e8:
         f7:c5:f1:9e:85:db:52:4c:08:1c:75:56:0b:40:8c:84:ff:b6:
         08:8a:06:bf:25:2e:19:d9:00:6b:e9:0a:bd:c2:4f:13:27:76:
         a0:df:87:40:e6:90:1f:04:67:0c:1f:c2:06:b8:72:6d:f3:22:
         a4:2f:84:dc:d0:42:a2:19:a1:ae:06:49:c3:47:8b:c2:36:52:
         a6:ce:23:b4:da:4b:74:01:f3:db:2e:3b:a9:8d:6f:dc:fc:d9:
         3e:d8:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:53 2025 by rpki-client