Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b2e29e4-7cd4-3572-afaa-1aac04fdf167.roa
File:                     0b2e29e4-7cd4-3572-afaa-1aac04fdf167.roa (raw, json)
Hash identifier:          WQH2maGnIpNnFI1eJlRTd9TgeLugR+xVYZGW9q0cf7s=
Subject key identifier:   45:3C:29:70:35:22:FE:37:61:E9:16:7C:60:41:E3:81:A9:8C:D9:11
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A629097A93F2ECB54C699DE80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b2e29e4-7cd4-3572-afaa-1aac04fdf167.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.51.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:97:a9:3f:2e:cb:54:c6:99:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=d210c5b5-c411-48bf-b1d8-123922d3fda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:8e:77:4b:3a:88:d0:94:a0:8d:b5:0d:70:
                    09:b8:7f:a7:f1:cd:06:5d:e3:04:2b:08:b2:2b:80:
                    a5:11:cb:53:5b:43:13:3d:b6:c4:01:20:d7:9d:18:
                    d3:2c:17:75:7c:7a:5a:27:24:84:2b:f5:3b:66:45:
                    1d:bb:7a:65:46:09:bb:5c:ee:2e:71:a4:36:21:ac:
                    67:22:ea:12:60:21:9b:6e:c0:b7:79:ca:44:2e:33:
                    4f:a6:3c:aa:5d:b1:16:a7:f3:68:0b:a7:d0:12:ee:
                    9f:9a:d1:70:b9:d6:6a:a2:be:e7:79:3c:64:da:fd:
                    b6:09:28:b9:e1:1f:c3:25:1a:bd:8c:f2:d1:e2:6d:
                    8e:e0:9b:31:af:eb:42:6a:8e:2f:cd:5b:3b:04:d9:
                    5f:51:c9:7c:1a:58:a0:4a:4a:ef:e1:ec:48:10:b9:
                    e2:dd:37:19:f6:8b:d5:a2:d2:76:bf:dc:3a:fe:9b:
                    d0:69:4d:70:be:6b:86:7a:11:15:05:a6:80:f1:ee:
                    fa:a2:20:6f:b3:d7:37:17:58:ee:e9:34:ad:2d:33:
                    35:61:ca:49:3a:d0:54:59:72:bc:1b:1f:ef:88:42:
                    c3:9a:dc:33:96:2f:b6:f6:89:63:63:f2:e5:84:d5:
                    a9:6b:41:69:31:6b:18:28:4f:57:64:70:5b:ec:a1:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3C:29:70:35:22:FE:37:61:E9:16:7C:60:41:E3:81:A9:8C:D9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b2e29e4-7cd4-3572-afaa-1aac04fdf167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.51.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:37:aa:a1:51:9e:da:e4:60:fa:06:bf:8f:36:18:e5:90:73:
         a1:00:2e:45:35:16:3f:16:e0:08:30:db:41:cf:3e:b8:88:ea:
         66:8a:88:74:e7:a3:35:10:ee:e1:c9:a3:2f:77:cc:35:19:d7:
         59:5a:dd:d7:55:3f:05:f3:e6:6f:d5:88:f5:62:f4:89:80:90:
         68:23:7d:2a:37:e6:41:96:d4:2e:ee:8f:f3:06:63:98:4c:a1:
         60:4c:f2:11:d8:4e:1c:40:b4:95:0a:e9:cf:b9:5b:85:61:89:
         ae:15:74:4b:39:b7:c3:ba:e5:cc:05:bf:69:93:b0:92:c6:b4:
         c3:d2:ab:9e:b8:3c:be:7f:f4:dd:52:b6:e7:34:ff:f8:2a:9b:
         04:e0:8e:d8:3a:e3:bb:8f:9c:59:11:68:3c:14:04:76:fe:bc:
         6f:05:01:60:35:0a:b1:36:e2:c4:fd:5d:08:1a:7a:38:54:7a:
         fe:42:e6:ef:78:0a:df:06:71:74:c6:5c:53:dd:b0:42:4d:98:
         0d:c6:18:92:da:57:29:e7:61:04:c2:ad:52:72:5a:56:1c:14:
         3a:08:dd:c7:4b:03:3c:b4:61:1a:25:06:11:c5:80:94:a9:88:
         11:75:47:d4:f7:0b:ed:0f:32:d3:48:74:bf:1b:4e:37:07:4d:
         61:76:6b:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJepPy7LVMaZ3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZDIxMGM1YjUtYzQxMS00OGJmLWIxZDgtMTIzOTIyZDNmZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuCOd0s6iNCUoI21DXAJuH+n8c0GXeMEKwiy
K4ClEctTW0MTPbbEASDXnRjTLBd1fHpaJySEK/U7ZkUdu3plRgm7XO4ucaQ2Iaxn
IuoSYCGbbsC3ecpELjNPpjyqXbEWp/NoC6fQEu6fmtFwudZqor7neTxk2v22CSi5
4R/DJRq9jPLR4m2O4Jsxr+tCao4vzVs7BNlfUcl8GligSkrv4exIELni3TcZ9ovV
otJ2v9w6/pvQaU1wvmuGehEVBaaA8e76oiBvs9c3F1ju6TStLTM1YcpJOtBUWXK8
Gx/viELDmtwzli+29oljY/LlhNWpa0FpMWsYKE9XZHBb7KErDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEU8KXA1Iv43YekWfGBB44GpjNkRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGIyZTI5ZTQtN2NkNC0z
NTcyLWFmYWEtMWFhYzA0ZmRmMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACk3qqFRntrkYPoGv482GOWQc6EALkU1Fj8W4Agw20HPPriI6maKiHTn
ozUQ7uHJoy93zDUZ11la3ddVPwXz5m/ViPVi9ImAkGgjfSo35kGW1C7uj/MGY5hM
oWBM8hHYThxAtJUK6c+5W4Vhia4VdEs5t8O65cwFv2mTsJLGtMPSq564PL5/9N1S
tuc0//gqmwTgjtg647uPnFkRaDwUBHb+vG8FAWA1CrE24sT9XQgaejhUev5C5u94
Ct8GcXTGXFPdsEJNmA3GGJLaVynnYQTCrVJyWlYcFDoI3cdLAzy0YRolBhHFgJSp
iBF1R9T3C+0PMtNIdL8bTjcHTWF2a5c=
-----END CERTIFICATE-----
Generated at Thu Jul 10 08:47:46 2025 by rpki-client