Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17535935-7967-35a4-a1a8-331ed65046f3.roa
File:                     17535935-7967-35a4-a1a8-331ed65046f3.roa (raw, json)
Hash identifier:          Drm6cw+CVuQzarzsG6H1vQLJIls2rRNlfZXEBmYHaKE=
Subject key identifier:   87:C5:1B:57:A2:D3:5D:2E:0C:86:51:C8:0C:71:CB:D2:9E:1B:3D:D8
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290D16E45B396BF7D9510A0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17535935-7967-35a4-a1a8-331ed65046f3.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.50.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d1:6e:45:b3:96:bf:7d:95:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=e3bcb146-73f1-44d0-979e-601ce576a1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:15:e6:c0:19:3c:e3:21:c5:c6:ee:9f:41:
                    65:73:3f:bc:8d:37:3b:f1:70:2d:a0:e3:6d:2d:8c:
                    43:4b:42:fd:62:a1:de:78:57:20:78:b1:6a:3c:50:
                    2c:a8:b9:85:af:b7:97:e7:ad:01:60:7e:93:5b:6c:
                    a3:b8:3b:ca:ed:47:be:59:d1:c5:10:10:fb:e6:2e:
                    d5:8e:70:c5:14:60:fe:4d:2c:46:74:f3:48:0b:61:
                    9b:d0:06:3a:28:d4:85:86:c0:d3:48:d8:a0:e8:fb:
                    b3:c4:f9:71:7b:dc:76:bc:3c:7c:1f:c9:c4:44:a5:
                    5d:41:da:9d:19:71:e6:79:fd:4a:0d:73:41:77:4a:
                    d1:98:15:60:a6:c4:de:b7:a2:6f:14:6c:95:62:ed:
                    18:7c:98:f1:b5:46:f7:44:2a:3b:ab:a5:43:b4:df:
                    7f:84:58:99:58:f7:32:21:54:b3:9a:c2:7c:cc:c4:
                    dc:21:2e:ca:87:d6:8d:4e:6d:f9:90:3e:da:56:f7:
                    52:6f:90:22:86:2d:99:5e:dd:5c:1c:14:8a:10:7f:
                    64:7e:f7:e9:e4:d6:75:4c:74:9e:f4:e6:a4:27:6c:
                    e2:72:b6:21:c1:72:ed:ca:cc:7b:ea:41:8a:1b:c6:
                    03:73:dd:b9:e7:87:a9:c5:63:36:9c:ba:ad:d9:eb:
                    60:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C5:1B:57:A2:D3:5D:2E:0C:86:51:C8:0C:71:CB:D2:9E:1B:3D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17535935-7967-35a4-a1a8-331ed65046f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e0:26:61:9d:06:a1:39:a3:46:63:fa:8e:63:27:61:7f:61:
         e0:95:10:23:dd:ce:e8:19:a7:6f:e2:cd:96:45:2d:cf:c0:84:
         88:57:13:74:41:1e:08:8a:17:92:5f:fb:81:54:68:cd:cb:1b:
         b7:06:77:2b:06:28:8d:72:8f:98:3c:d6:86:52:ef:22:9d:f9:
         88:16:7c:78:4f:10:e5:65:f4:39:96:86:70:fa:6f:fb:14:e9:
         3c:5b:b2:b7:89:65:f7:69:83:e5:fd:28:08:d5:b3:59:fe:05:
         77:8a:5c:75:83:f8:58:b6:86:37:3f:bb:3d:f4:cb:25:46:a2:
         d6:f4:78:ea:e3:03:98:1c:39:1e:08:29:a0:97:b6:ff:4c:5b:
         82:b4:c7:cb:38:22:53:58:4f:c3:ad:e4:00:18:c0:77:04:b3:
         fd:57:92:0e:0a:47:bb:73:7b:68:38:f9:a8:16:58:a2:f3:2d:
         f7:51:98:74:bb:37:f2:31:18:f0:5d:57:0c:67:03:6b:fc:b0:
         2b:24:16:4c:fe:a3:3b:b8:51:43:7a:5c:48:b2:38:10:dc:dc:
         c7:21:11:20:98:d3:30:21:d6:8e:7b:9e:84:88:f1:c8:64:f9:
         94:c0:e7:d8:52:8c:13:80:35:88:57:83:77:bf:45:27:79:51:
         2f:a0:a7:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNFuRbOWv32VEKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZTNiY2IxNDYtNzNmMS00NGQwLTk3OWUtNjAxY2U1NzZhMWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkYV5sAZPOMhxcbun0Flcz+8jTc78XAtoONt
LYxDS0L9YqHeeFcgeLFqPFAsqLmFr7eX560BYH6TW2yjuDvK7Ue+WdHFEBD75i7V
jnDFFGD+TSxGdPNIC2Gb0AY6KNSFhsDTSNig6PuzxPlxe9x2vDx8H8nERKVdQdqd
GXHmef1KDXNBd0rRmBVgpsTet6JvFGyVYu0YfJjxtUb3RCo7q6VDtN9/hFiZWPcy
IVSzmsJ8zMTcIS7Kh9aNTm35kD7aVvdSb5Aihi2ZXt1cHBSKEH9kfvfp5NZ1THSe
9OakJ2zicrYhwXLtysx76kGKG8YDc92554epxWM2nLqt2etgIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfFG1ei010uDIZRyAxxy9KeGz3YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTc1MzU5MzUtNzk2Ny0z
NWE0LWExYTgtMzMxZWQ2NTA0NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjgJmGdBqE5o0Zj+o5jJ2F/YeCVECPdzugZp2/izZZFLc/AhIhXE3RB
HgiKF5Jf+4FUaM3LG7cGdysGKI1yj5g81oZS7yKd+YgWfHhPEOVl9DmWhnD6b/sU
6TxbsreJZfdpg+X9KAjVs1n+BXeKXHWD+Fi2hjc/uz30yyVGotb0eOrjA5gcOR4I
KaCXtv9MW4K0x8s4IlNYT8Ot5AAYwHcEs/1Xkg4KR7tze2g4+agWWKLzLfdRmHS7
N/IxGPBdVwxnA2v8sCskFkz+ozu4UUN6XEiyOBDc3MchESCY0zAh1o57noSI8chk
+ZTA59hSjBOANYhXg3e/RSd5US+gp0c=
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:22:14 2025 by rpki-client