Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/16068b36-8d2d-3fae-92fd-76135f39e5a7.roa
File:                     16068b36-8d2d-3fae-92fd-76135f39e5a7.roa (raw, json)
Hash identifier:          mJR9wWDHk3ozoTcUS36UK7qSNlcwYollwBYZEECY7Y0=
Subject key identifier:   BE:5E:DE:FE:B2:36:95:3B:2F:08:1D:BD:9B:0B:1A:32:AE:98:B3:A0
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290CEF48D9EC4238D580740
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/16068b36-8d2d-3fae-92fd-76135f39e5a7.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.33.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ce:f4:8d:9e:c4:23:8d:58:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=f591a2c8-f096-40b7-921e-2da29c68fb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:b6:eb:c7:d0:24:ec:90:f3:95:74:2c:0a:
                    be:cb:24:65:ed:bc:0e:db:d8:99:e4:df:d6:f2:74:
                    cd:a8:9b:68:cf:14:d7:d3:44:73:aa:c4:5a:d9:e7:
                    a1:a7:11:b8:4f:f1:96:fb:ff:23:69:48:f8:96:18:
                    4f:88:af:26:ca:6d:20:79:fc:87:03:ab:a4:3f:8d:
                    83:a3:0a:69:14:ca:7d:47:24:21:ea:eb:c9:b5:c4:
                    e4:7a:f2:f6:97:40:06:28:70:80:e0:24:4b:32:88:
                    19:30:5d:95:1a:11:f9:ba:fd:87:a1:a5:42:8f:28:
                    6b:6d:22:4f:d9:ad:2b:6f:3c:21:cc:64:20:86:f3:
                    c8:f4:84:ae:ab:c4:b5:fb:7c:8b:c3:2b:f2:dd:00:
                    cc:40:6a:a9:7f:78:d1:58:fc:a7:c5:fa:a1:64:72:
                    99:1c:56:2f:ad:a2:e0:f6:a2:92:10:12:7d:19:d3:
                    96:f2:b5:8c:3b:38:d0:9d:43:5f:57:f2:dc:1b:19:
                    3b:9f:90:fc:43:08:2e:89:75:90:1d:d3:9f:54:d1:
                    b0:a4:d9:2d:84:d7:ad:cb:da:50:43:81:39:9f:86:
                    46:00:23:0c:b0:f6:51:85:1e:21:bc:97:57:4b:b8:
                    45:ce:9c:fe:6b:6d:8f:bb:e8:7e:75:2f:8b:50:a8:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5E:DE:FE:B2:36:95:3B:2F:08:1D:BD:9B:0B:1A:32:AE:98:B3:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/16068b36-8d2d-3fae-92fd-76135f39e5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:2a:ba:59:64:1d:13:cb:ce:e0:c0:5f:2d:ae:eb:a4:f4:
         e0:03:7f:f0:97:b0:f4:3f:33:c6:3a:44:12:8c:35:7d:8a:a1:
         d0:15:96:2f:8e:52:c3:7b:bd:47:13:24:75:0e:e9:57:96:73:
         8c:a0:f2:b2:a7:c5:dd:6c:94:fd:45:a0:98:6f:be:99:01:61:
         b8:fb:4a:03:56:50:e1:9a:af:ce:2c:52:cd:2d:6a:0a:13:81:
         21:52:73:b2:1b:41:1a:75:e6:54:96:4d:e2:87:f6:f4:fc:8b:
         30:f0:3c:1e:c0:a5:92:f9:49:db:29:72:5e:36:23:f8:99:bc:
         5f:ef:b9:75:91:3a:46:69:a4:3d:90:c8:73:03:79:35:63:f2:
         1a:9d:2b:3f:78:ce:ef:01:f0:c5:72:fa:7c:fb:69:bd:a7:7b:
         48:6b:de:11:d0:bb:d6:ee:61:52:f0:45:bb:51:29:d4:d9:ae:
         68:6b:0d:fe:28:b5:ff:ac:37:a5:db:80:42:de:83:68:c5:ac:
         90:ce:8b:e9:05:46:c3:e2:4f:b2:9a:fb:26:ed:e7:04:b3:04:
         48:33:f7:fb:cc:63:5b:45:09:ce:1c:ca:47:64:38:5e:3c:a8:
         05:89:61:d1:d6:5e:1a:64:5b:e4:b1:a5:2e:38:c5:32:37:f4:
         91:f3:00:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:49:37 2025 by rpki-client