Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa
File:                     1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa (raw, json)
Hash identifier:          Tl7mP310+SfytkU8J35OoHk1qdfUbMg8hutZKMJGI8w=
Subject key identifier:   FD:59:4E:F1:6C:85:47:B8:06:4B:76:9D:E0:CD:78:B3:41:F2:98:76
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290D21F0571C6F71C99C080
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.34.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d2:1f:05:71:c6:f7:1c:99:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=c9076138-6476-4b07-8a8f-550738395bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:96:52:4d:61:2c:a8:6b:6c:f8:73:6c:dc:61:
                    df:93:31:32:e8:d0:f5:60:ca:68:74:9e:f8:34:43:
                    54:cd:63:44:18:ce:f9:92:95:85:59:ff:80:de:05:
                    4b:6d:dd:2f:42:8f:b0:32:88:d1:88:ba:a7:53:e1:
                    78:57:0d:be:5c:9c:8d:74:2b:dc:25:9a:e8:40:50:
                    2e:d3:fe:eb:92:2b:46:93:bd:13:37:1e:e8:b7:5c:
                    59:c3:f4:01:e2:e9:0e:83:13:2f:d3:44:eb:75:00:
                    93:3d:45:5c:cd:4c:da:72:67:61:7a:b1:15:f8:b8:
                    80:41:e2:b8:17:ea:a7:88:10:53:67:c5:df:66:31:
                    ea:38:4e:0b:15:53:22:8d:7b:cc:fa:cb:95:4a:05:
                    5d:51:48:b1:bb:67:ee:97:34:6c:ce:f1:ab:da:3b:
                    61:64:38:58:42:f9:3b:b5:77:c5:67:06:c9:fd:c2:
                    ad:66:e8:3e:29:32:a0:27:af:51:d8:b4:1f:0f:65:
                    2a:50:9a:bd:da:e9:85:1c:c9:ff:f6:22:91:be:77:
                    25:d1:08:c8:7a:03:29:7b:55:db:38:1d:4c:49:70:
                    8f:4f:32:a4:8a:a0:4a:bf:e8:ef:d2:43:71:4f:83:
                    c6:e5:ba:ef:c9:bc:cf:3d:00:3f:f8:fe:fd:f3:39:
                    f0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:59:4E:F1:6C:85:47:B8:06:4B:76:9D:E0:CD:78:B3:41:F2:98:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:26:58:d2:eb:32:81:8c:1d:7b:28:c5:f4:bc:24:86:92:57:
         82:ac:fa:6c:4b:08:cb:f3:fe:9d:54:6e:ea:c8:c6:ef:1d:5a:
         95:fa:2b:2a:32:11:99:99:31:0c:dc:fb:a3:25:e9:0d:ff:77:
         2c:78:5e:cb:70:d8:1b:a5:98:3e:a3:49:9c:8d:7d:af:4d:7b:
         9a:96:d2:cb:85:fb:3e:2f:38:e7:33:46:81:5d:ca:a0:20:4e:
         58:c0:fc:34:18:db:f6:92:48:1f:5e:27:e8:36:de:3c:24:a8:
         1a:24:64:28:f2:b5:20:90:f1:fe:72:d1:07:93:f8:92:36:cd:
         0f:8f:23:ea:4d:3e:24:a8:39:9f:57:70:47:63:55:d4:08:84:
         a0:97:25:23:83:76:4b:66:03:68:f6:ab:da:3c:8e:15:16:94:
         0f:ab:ac:e6:fc:4f:b4:ef:7d:b4:a4:a5:5c:7d:2b:86:02:76:
         bb:ad:dd:00:ac:f9:ec:08:1e:98:b2:28:11:53:77:a5:fe:9f:
         81:de:a3:53:69:98:8d:23:dd:9b:f0:8e:d7:ab:86:e1:51:f9:
         42:ec:42:aa:4f:0a:2a:92:cd:25:ba:24:03:53:b2:b5:bb:e7:
         04:c8:6b:41:4d:67:43:b9:ab:64:f8:2c:1f:95:e5:97:37:5a:
         36:fa:24:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNIfBXHG9xyZwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
YzkwNzYxMzgtNjQ3Ni00YjA3LThhOGYtNTUwNzM4Mzk1YmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJZSTWEsqGts+HNs3GHfkzEy6ND1YMpodJ74
NENUzWNEGM75kpWFWf+A3gVLbd0vQo+wMojRiLqnU+F4Vw2+XJyNdCvcJZroQFAu
0/7rkitGk70TNx7ot1xZw/QB4ukOgxMv00TrdQCTPUVczUzacmdherEV+LiAQeK4
F+qniBBTZ8XfZjHqOE4LFVMijXvM+suVSgVdUUixu2fulzRszvGr2jthZDhYQvk7
tXfFZwbJ/cKtZug+KTKgJ69R2LQfD2UqUJq92umFHMn/9iKRvncl0QjIegMpe1Xb
OB1MSXCPTzKkiqBKv+jv0kNxT4PG5brvybzPPQA/+P798znwnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP1ZTvFshUe4Bkt2neDNeLNB8ph2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWM1NmVkNWUtMjJkNy0z
NDNmLTg4YzctMWQ2ZDZkZTBmNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcmWNLrMoGMHXsoxfS8JIaSV4Ks+mxLCMvz/p1UburIxu8dWpX6Kyoy
EZmZMQzc+6Ml6Q3/dyx4Xstw2BulmD6jSZyNfa9Ne5qW0suF+z4vOOczRoFdyqAg
TljA/DQY2/aSSB9eJ+g23jwkqBokZCjytSCQ8f5y0QeT+JI2zQ+PI+pNPiSoOZ9X
cEdjVdQIhKCXJSODdktmA2j2q9o8jhUWlA+rrOb8T7TvfbSkpVx9K4YCdrut3QCs
+ewIHpiyKBFTd6X+n4Heo1NpmI0j3ZvwjterhuFR+ULsQqpPCiqSzSW6JANTsrW7
5wTIa0FNZ0O5q2T4LB+V5Zc3Wjb6JGI=
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:12:16 2025 by rpki-client