Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d6c2382-6896-3d2f-bd56-04c413266850.roa
File:                     0d6c2382-6896-3d2f-bd56-04c413266850.roa (raw, json)
Hash identifier:          t3P+VlC8lUbXQhT17iN6OjfcGsS3Y+OmLexREc+Pdz8=
Subject key identifier:   E2:E1:43:B9:4A:9B:B0:F7:A9:28:5F:6F:10:4A:1E:EA:67:63:B2:35
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290D2D042A2ACDE344903C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d6c2382-6896-3d2f-bd56-04c413266850.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.53.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d2:d0:42:a2:ac:de:34:49:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=494fca38-5050-4244-9707-78f302576e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:d0:a4:92:98:bf:65:2e:3a:b1:ed:ed:9d:
                    5d:f5:2f:69:f3:35:9f:0e:a2:a2:77:52:70:25:92:
                    d6:4d:81:78:15:e7:a4:be:37:f6:6c:bc:c9:44:62:
                    2f:96:ff:8b:b6:a2:52:44:b8:21:a2:4c:84:60:ff:
                    6a:ec:69:3d:ce:d6:7e:25:9f:e7:8f:86:41:42:ce:
                    49:e3:11:01:a7:9a:95:7d:96:40:06:d1:27:de:a6:
                    b3:86:2e:94:46:7d:28:67:22:a0:9f:6e:ec:53:5a:
                    c2:e5:92:7a:97:0a:4a:1e:1d:74:06:21:0b:d0:fd:
                    7e:0d:47:8f:7a:d8:73:0b:4d:5c:cf:87:4f:0a:0f:
                    dd:b6:7f:9b:25:a0:51:f3:14:a8:50:d5:34:a0:88:
                    b4:ae:a2:67:0e:73:0e:18:eb:f1:64:67:6a:92:1e:
                    ff:c4:51:2c:be:85:6c:92:73:81:20:8f:ec:8f:91:
                    f0:cc:0e:b4:4a:9f:7a:9a:8c:de:3b:0f:34:8c:93:
                    08:b6:4c:05:09:f0:62:73:68:f2:b7:d8:53:56:3a:
                    3a:fd:57:cf:b2:1b:a0:50:97:01:4f:e6:60:e6:54:
                    97:ee:75:05:0d:86:2d:d4:97:a5:d8:74:2d:eb:7c:
                    a6:1f:8f:53:29:49:45:ff:80:57:e6:3d:59:25:44:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E1:43:B9:4A:9B:B0:F7:A9:28:5F:6F:10:4A:1E:EA:67:63:B2:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d6c2382-6896-3d2f-bd56-04c413266850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e3:f9:8f:02:b7:a5:41:ce:5f:39:c8:0d:a1:7d:e8:71:5b:
         a0:72:8b:13:73:15:6d:46:a7:55:84:42:1b:31:b5:d6:5c:fa:
         83:66:de:ae:ef:71:8c:59:ac:30:4a:6c:6f:df:e1:e4:ef:71:
         20:c1:6c:e2:1f:3b:db:87:ed:32:fd:e4:eb:4b:0b:2c:b9:2c:
         c7:28:d1:7e:bf:31:fb:5a:9f:ff:6b:86:44:ba:27:20:76:9d:
         ed:32:34:7a:9f:5a:ea:f6:a9:90:12:07:31:0e:69:59:69:b5:
         ee:56:a3:91:9b:c8:14:4d:1a:8f:27:56:0f:8f:2f:9e:03:38:
         07:a9:0b:e0:ab:8d:e8:1d:b9:10:fd:83:54:94:db:1d:28:50:
         d5:c1:8e:31:b7:89:12:01:4b:b3:ba:00:0d:3b:5c:49:25:4a:
         9b:01:3b:bb:e2:5e:85:f1:55:e1:1e:64:42:75:d1:2a:81:2a:
         ae:a0:ce:a0:2b:f6:04:55:08:2a:98:aa:aa:5c:77:d5:30:c3:
         54:21:a4:92:6a:d5:07:64:78:7f:80:73:f6:e4:c1:0f:61:c5:
         90:97:85:9e:bb:1e:8a:2d:26:09:b5:f5:2f:fb:18:fa:3d:49:
         ed:c4:b3:2b:60:3d:fd:f3:9e:87:0d:cf:17:26:a1:46:36:49:
         ab:88:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:17:24 2025 by rpki-client