Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/364006d0-ea94-3a36-8462-73e689a224d9.roa
File:                     364006d0-ea94-3a36-8462-73e689a224d9.roa (raw, json)
Hash identifier:          lVNvaf7WeKa9dJJ0rV6z0yAVg0MBL1iL7aWPvl02+A4=
Subject key identifier:   5A:46:25:FC:39:AA:36:E0:F0:72:94:6D:A7:C6:41:26:6E:31:4D:C5
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62909C39782E46FF2825DF80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/364006d0-ea94-3a36-8462-73e689a224d9.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.36.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9c:39:78:2e:46:ff:28:25:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=ae1e85c4-eab6-4bd0-a580-10947de37465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:f4:c1:78:a9:12:b9:0a:a4:de:e3:f6:63:
                    35:b6:56:cb:8e:3d:7a:22:cf:d9:f2:7a:f3:9d:98:
                    d8:1e:db:e5:fd:5a:79:44:f4:f2:11:0c:4b:f2:97:
                    ae:1a:fe:3d:c1:8d:23:21:d5:df:95:c8:2b:5e:2d:
                    3b:9e:23:1d:1b:59:5b:96:0c:43:e3:95:63:bb:86:
                    d1:56:a4:9e:c8:a6:04:6e:ee:8a:72:e1:97:6f:ad:
                    c5:30:bc:50:ce:2f:3b:0a:60:f1:ce:2b:76:49:9b:
                    75:1b:ea:2f:18:66:a4:29:1e:47:8b:0c:56:34:9c:
                    38:63:f1:0f:26:0d:8c:cd:17:27:30:c4:32:8c:6a:
                    1c:14:26:16:47:b0:5c:dc:02:e4:06:71:2c:20:1f:
                    c7:96:75:61:79:91:05:fa:49:2d:5b:19:62:8b:98:
                    3a:3e:fe:ae:db:8d:31:5e:ca:0c:0a:6a:6c:ab:8a:
                    25:15:cb:94:58:8f:db:5b:3c:cc:5d:c4:57:96:0d:
                    16:f0:4a:45:09:c9:af:ad:0b:f7:ac:93:31:c6:9c:
                    0c:a6:3f:70:e5:62:6f:1e:4b:78:fd:c0:57:f3:d2:
                    1e:32:97:37:38:ae:31:39:88:23:8f:a9:ec:f6:7c:
                    ea:52:a1:46:ca:d8:81:a9:68:66:a9:17:77:13:a7:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:46:25:FC:39:AA:36:E0:F0:72:94:6D:A7:C6:41:26:6E:31:4D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/364006d0-ea94-3a36-8462-73e689a224d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:21:91:76:eb:58:3f:24:30:8b:88:05:26:99:53:44:4e:a7:
         de:dd:d3:e0:bd:e7:4e:cd:e1:3d:ad:1c:dc:f9:37:de:ba:07:
         a2:9e:8f:22:35:34:d3:b9:f3:fb:ef:8b:22:08:52:ff:91:3a:
         98:21:54:4b:8e:57:82:eb:ec:2b:17:6f:88:26:5a:83:94:ab:
         1b:96:be:f5:b6:13:e4:fe:37:4a:34:02:74:94:58:db:9e:b1:
         be:77:f0:0b:55:b8:27:36:12:46:02:f0:7d:f5:97:19:95:ae:
         97:3c:c2:d2:1f:0c:d5:0a:67:a2:da:59:c5:03:fe:f4:5a:41:
         6d:62:38:89:f0:38:4f:be:67:08:55:91:f6:69:b5:7f:0c:3e:
         b3:37:6c:d7:a7:11:ce:97:24:4d:01:6e:2d:a1:e2:cd:b5:11:
         83:13:11:e4:82:24:94:f2:b1:d9:a9:56:c4:10:7d:60:aa:52:
         91:79:e1:a5:bb:00:c2:26:16:ab:7a:41:c1:4b:c0:c8:f5:93:
         6e:1f:8a:5a:76:91:a9:23:33:fd:28:8f:46:11:9c:76:76:e5:
         6a:e6:a2:26:3a:81:cf:33:20:ec:9d:29:c9:ee:76:db:8c:04:
         90:60:37:b0:bf:fd:0b:7c:1a:29:40:51:8f:de:02:03:b5:3c:
         bf:5a:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:12:46 2025 by rpki-client