Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa
File:                     2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa (raw, json)
Hash identifier:          NMonrxM3mnXAYqRpWZFdBfkIOlyWwhpAlS+/lcemfx8=
Subject key identifier:   FC:53:AB:53:0F:5C:42:0D:43:41:D8:0F:DD:32:BA:13:25:49:2F:C1
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318ABC012221D0196767100
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa
Signing time:             Thu 23 Jan 2025 06:13:21 +0000
ROA not before:           Thu 23 Jan 2025 06:13:21 +0000
ROA not after:            Wed 23 Apr 2025 05:13:21 +0000
asID:                     16591
IP address blocks:        136.61.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ab:c0:12:22:1d:01:96:76:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:21 2025 GMT
            Not After : Apr 23 05:13:21 2025 GMT
        Subject: CN=131a4c39-813d-4934-a029-ad8fd1493014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:83:db:74:57:c3:c1:18:63:5c:9f:dc:77:
                    a5:f8:42:e1:7e:84:c2:63:0d:20:f8:9d:ba:ff:04:
                    76:36:2f:61:ff:4c:ed:cc:dc:6e:69:1a:28:9c:bb:
                    54:97:b0:ef:a4:28:d1:19:44:06:ad:45:a2:62:d4:
                    be:28:b3:c5:d0:c1:e9:e9:84:2c:e2:e3:2a:de:27:
                    f8:1f:38:be:9b:64:da:ef:97:44:08:58:da:09:c6:
                    7b:ee:87:b2:0f:1c:80:0b:92:6f:a4:e7:c8:a0:1a:
                    59:79:c2:c3:4e:ac:22:4b:9a:12:8e:9a:ee:e3:82:
                    cf:c6:36:7c:7a:75:3a:2a:65:30:50:12:60:3a:2a:
                    ab:38:80:5c:ba:65:a7:bf:3d:65:56:42:c2:cf:ad:
                    6c:1f:68:6d:cc:53:ef:57:1b:57:68:11:0e:dd:1f:
                    9e:19:e7:6f:b9:8a:b1:9f:d4:c2:43:c1:f0:56:4d:
                    1e:5e:49:28:e2:03:3a:9e:bd:b2:1a:97:39:81:f1:
                    27:6a:20:c0:84:6c:4a:e7:04:8c:fe:2b:47:40:9e:
                    06:ec:0a:27:bf:e4:1b:78:d2:b0:2a:47:14:6b:cd:
                    e6:c8:47:51:0e:2f:3a:d5:fd:c5:dc:94:66:df:ed:
                    d6:1c:24:81:0a:da:19:5a:9c:1e:c9:c6:c6:e5:d8:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:53:AB:53:0F:5C:42:0D:43:41:D8:0F:DD:32:BA:13:25:49:2F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c8:1c:84:50:c3:2c:fe:5c:ab:56:e3:b0:db:21:bb:45:a6:
         23:6f:31:9f:f0:a8:37:90:e4:0a:62:7b:05:cd:78:6c:74:dd:
         30:9e:cd:c8:8a:0a:29:e6:3a:23:7d:2c:d6:8a:09:14:01:49:
         78:84:92:65:72:1c:e6:c6:02:28:76:44:f5:e7:be:70:05:b0:
         85:d6:1c:7b:d5:0b:df:1f:95:67:47:fb:6e:4e:75:9e:41:ce:
         30:5a:ab:6d:d1:ba:6c:18:df:91:ee:41:2b:b8:03:0b:db:44:
         f5:d5:45:ef:91:e1:47:ac:81:ef:fa:a4:f5:a5:68:a7:0f:ec:
         e2:ac:9e:05:c5:d8:3c:7e:d9:54:59:29:06:e5:1d:46:4a:2b:
         d9:d4:51:fe:5a:e3:e0:a8:7d:0d:ea:24:58:a6:21:9c:23:07:
         61:b7:d7:8f:76:35:f1:c4:8f:c4:7e:dc:50:0e:e2:4c:48:c2:
         f1:f1:de:26:83:13:46:38:b3:9d:95:20:9a:69:76:f6:44:d1:
         06:34:52:f7:23:ac:e0:02:7c:36:4c:45:61:e4:40:df:97:d1:
         92:40:db:f2:6b:5a:67:97:38:d8:bc:03:24:d6:85:59:03:7b:
         86:66:eb:c3:3e:2f:94:3c:63:81:90:16:e5:28:5c:63:3e:e6:
         bb:54:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:06 2025 by rpki-client