Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa
File:                     38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa (raw, json)
Hash identifier:          QjzWQmVo3nQjEpyDTnZpjnwH9vfdM3cAEHOfwfdP/dQ=
Subject key identifier:   30:B6:1A:C8:2A:6F:58:C0:EF:3A:04:61:68:8C:3C:8A:BF:86:92:CB
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62908B11E312A29B25E00140
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.60.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:8b:11:e3:12:a2:9b:25:e0:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=009444b3-bb9b-40b7-8ad6-1cf4d0708dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:a8:15:be:a3:ce:03:83:bd:bb:35:9f:4c:
                    77:7e:ad:eb:7c:67:70:ed:b1:2d:25:7b:33:d2:d6:
                    8f:29:ef:04:7e:01:e6:50:d9:0b:c8:fe:a2:57:43:
                    1d:96:9f:e8:b6:d2:ed:ef:87:3b:e9:03:8c:c8:3c:
                    3e:26:f3:ef:14:2e:de:57:cf:3d:de:9e:27:ff:b9:
                    63:71:af:63:21:0f:ac:3b:ac:9b:82:16:3b:d0:eb:
                    3a:e9:da:19:90:dc:9e:83:62:c7:f8:ce:f6:07:3c:
                    d3:36:0f:c1:01:4f:1b:31:83:ea:d2:89:f7:ba:96:
                    f1:ba:37:34:d4:63:ad:71:f5:7d:6a:52:16:68:f3:
                    a9:1e:b0:dd:bf:bb:16:ed:1c:3f:6c:57:9a:cd:8d:
                    b8:a8:43:9d:2e:3d:00:03:ca:fe:2a:47:dc:52:bf:
                    da:4f:21:bf:79:1a:6a:e2:30:72:95:8f:39:db:25:
                    8a:56:75:2e:19:47:81:f4:92:ee:58:7e:f0:0a:07:
                    8b:aa:d6:a3:b7:3c:c0:8b:57:e8:38:8f:ac:42:59:
                    50:9d:4a:f3:0f:b5:d5:7a:ba:1a:57:ac:9e:5a:54:
                    1b:b6:16:54:a0:cd:d5:d9:c9:04:62:91:3c:c9:d4:
                    c1:6c:b2:d7:c0:cc:61:f0:d5:8f:33:a0:bd:4a:3b:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B6:1A:C8:2A:6F:58:C0:EF:3A:04:61:68:8C:3C:8A:BF:86:92:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.60.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4b:92:a8:b8:7a:fe:79:a2:72:62:1c:43:74:a3:d7:09:c7:
         77:80:98:d4:de:90:ad:e9:32:32:a6:0f:80:08:2e:d6:dc:41:
         77:c4:ce:0c:93:56:e6:8f:1f:d1:e2:51:64:f3:23:4b:de:5f:
         ba:58:c6:7e:76:ed:cd:44:9b:08:55:ce:9c:4e:53:c3:10:bd:
         74:86:a9:25:76:71:29:eb:c9:65:9e:b9:04:49:b7:b1:ba:ed:
         ea:69:72:e5:a7:55:70:be:8d:96:70:d8:71:66:9c:19:51:c2:
         9a:23:67:b0:9f:77:c7:17:fc:f8:b1:1d:86:15:34:cd:df:ae:
         fe:ab:f9:cc:fb:38:62:62:15:2a:d4:5d:a3:91:80:71:ef:47:
         78:e4:30:0b:ce:0b:0d:9a:7b:4e:da:0b:8a:32:1d:fc:e0:41:
         71:c2:12:01:e3:dd:06:4a:9a:9e:fe:06:18:65:50:93:cd:87:
         1c:e2:8d:da:9c:c9:0e:17:16:af:9a:a5:2f:03:fc:e8:e0:ed:
         26:6b:d8:28:8d:58:7a:8e:90:61:12:ea:98:a7:3a:78:c4:72:
         78:22:06:f8:70:bf:c7:d7:54:a1:f0:8d:74:98:95:fb:42:13:
         5f:5d:5e:cc:7e:81:fe:ae:4a:8c:55:68:00:87:73:97:fa:25:
         fe:d9:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:28:31 2025 by rpki-client