Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/10d54c49-a46a-3efd-983d-b040d3861287.roa
File:                     10d54c49-a46a-3efd-983d-b040d3861287.roa (raw, json)
Hash identifier:          LUqdY0GFs180ZU3lWf+Tj9KERv4CNNuOjVzbOcOvJs0=
Subject key identifier:   B2:28:38:20:44:20:B2:A5:CE:BA:3B:FB:E0:13:27:02:31:12:CB:93
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62909BA8B0C2118CE9E126B8
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/10d54c49-a46a-3efd-983d-b040d3861287.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.36.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9b:a8:b0:c2:11:8c:e9:e1:26:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=615369b3-9666-49cb-bc32-2d1224b39c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:23:a6:38:73:57:68:b2:e9:86:52:7b:ff:
                    0a:e4:6d:c0:de:4e:f0:7b:3d:27:b6:75:d8:9b:13:
                    39:e3:db:15:d5:d7:6a:4d:45:48:9e:7f:81:4c:c3:
                    47:cb:14:07:5b:3a:16:02:f5:c6:f0:4a:5a:ab:f3:
                    40:5c:aa:19:ca:23:d1:f9:a1:5e:4c:06:86:05:2f:
                    03:9d:23:66:d5:c8:0e:0d:af:25:7d:d1:bc:cd:e6:
                    30:46:6f:a4:a7:8c:75:63:16:85:4f:2b:d7:e2:13:
                    aa:83:1f:51:30:41:ca:a6:ce:b9:43:15:40:f0:21:
                    0e:9c:f7:db:a5:e7:7b:82:db:6c:50:0a:ca:5b:8b:
                    7d:b5:b3:d1:76:99:9f:8d:d2:05:57:3e:b7:94:36:
                    8d:7b:35:47:4c:6e:b5:20:80:cd:2f:ae:64:d3:0a:
                    06:ea:0b:19:69:aa:9e:db:2e:37:fb:fd:75:e7:9b:
                    21:ee:52:b0:85:7f:e9:0c:83:18:fe:24:34:0f:8b:
                    45:23:a9:76:b3:77:8c:1a:69:c9:9e:9d:83:99:7b:
                    92:eb:6e:87:e6:53:cf:58:19:17:28:24:11:c6:32:
                    c3:86:fa:78:ec:bc:a1:86:1c:33:fe:f9:a4:aa:e1:
                    da:6f:f9:92:8b:96:d9:db:eb:fb:10:e8:f9:05:30:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:28:38:20:44:20:B2:A5:CE:BA:3B:FB:E0:13:27:02:31:12:CB:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/10d54c49-a46a-3efd-983d-b040d3861287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:af:d2:c1:a4:87:3a:39:31:a9:3d:01:af:6e:ec:fe:17:4b:
         45:85:ef:d4:0f:cd:d3:57:87:8e:9b:98:cd:9e:61:fb:89:16:
         2e:3e:52:4c:94:9b:c4:e3:bb:55:40:00:46:5a:26:e8:ce:b0:
         d6:43:a4:5e:e9:8a:9c:7d:d5:3e:3e:5c:f2:6d:8f:17:07:9d:
         59:da:cb:02:0c:75:26:ef:29:1f:ac:fc:96:2f:38:b6:b7:a5:
         f7:98:b7:c4:27:b0:2e:b5:f1:3d:35:09:72:1e:15:55:0c:d0:
         5d:bf:11:02:c2:1b:4e:04:18:6c:d8:e2:35:78:13:78:2b:3d:
         0c:39:d4:ee:c9:43:de:b0:37:7d:56:2c:50:89:fe:7d:86:ab:
         d2:e6:fe:a2:a9:80:8d:e1:56:34:d5:d6:15:9f:37:1f:eb:6a:
         da:06:95:98:a1:46:db:f9:e4:ee:f3:61:96:96:18:26:a4:90:
         c7:32:60:8a:86:af:a0:33:d6:77:57:64:d0:10:7c:2d:8d:2b:
         a6:33:b7:57:5e:5e:28:10:c6:1c:a3:21:c7:2e:b1:7f:a4:44:
         59:60:95:6b:97:67:74:4d:94:08:78:52:d7:c0:a9:5f:6a:32:
         ca:02:94:51:c7:f9:c3:58:86:5c:55:9c:94:21:36:c9:21:8f:
         02:a2:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:04:37 2025 by rpki-client