Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa
File:                     3b17455d-ed9b-356b-93a3-021986d9b8c9.roa (raw, json)
Hash identifier:          xGgirz/TE6D79hn8eSLUEr/QAFSbEG/LQ02YrNmksCQ=
Subject key identifier:   CF:AD:C7:FB:29:C0:75:04:04:95:69:CB:9D:32:FE:2B:05:31:6A:D3
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318B02947D9704E61046900
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa
Signing time:             Thu 23 Jan 2025 06:13:23 +0000
ROA not before:           Thu 23 Jan 2025 06:13:23 +0000
ROA not after:            Wed 23 Apr 2025 05:13:23 +0000
asID:                     16591
IP address blocks:        136.32.0.0/11 maxlen: 11
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:b0:29:47:d9:70:4e:61:04:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:23 2025 GMT
            Not After : Apr 23 05:13:23 2025 GMT
        Subject: CN=e13d4198-a93d-4ff7-a57d-ebfe053e47a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:bc:3c:b8:b7:f2:0c:fd:bf:68:f7:b8:41:
                    ad:78:94:c2:aa:a6:6d:8d:9e:68:e6:b1:02:ff:15:
                    7c:ac:ff:2b:b3:ae:30:3a:68:07:b3:90:52:26:e3:
                    39:b3:01:45:7f:18:73:3b:cb:36:2a:d4:8f:06:32:
                    45:5f:15:cb:03:17:6f:3f:4b:28:bf:d1:04:7a:2a:
                    49:61:2c:b1:a0:0c:31:71:d2:e1:30:3c:cc:51:ef:
                    54:6c:61:45:18:8c:7b:82:ca:b9:4f:65:a0:e0:d6:
                    1f:2b:b1:4b:d9:9b:c2:bd:17:1a:6d:6d:a0:26:08:
                    35:d8:fa:7d:05:d0:d1:ac:09:96:b0:cc:96:e4:0b:
                    19:97:9a:bc:25:b3:7f:77:62:41:06:9c:ce:91:bf:
                    97:b4:8d:f4:0f:b8:bc:5e:d4:4e:9a:53:8d:5a:38:
                    31:95:ae:35:ed:67:e9:ac:a5:d9:75:89:54:d1:8a:
                    ea:87:38:17:c3:38:19:30:1a:a8:3f:7c:45:f3:08:
                    d1:b9:4c:03:1f:a3:e7:c5:b3:89:cf:37:a4:fd:3d:
                    c8:0f:03:92:34:a6:cd:d3:45:c4:20:d8:91:f8:28:
                    65:48:0d:9b:07:86:e7:8e:bf:fc:e9:67:f9:b8:87:
                    77:b1:28:ff:2a:c2:6f:0e:b0:05:27:3b:33:5d:aa:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AD:C7:FB:29:C0:75:04:04:95:69:CB:9D:32:FE:2B:05:31:6A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:df:02:2f:62:99:d9:19:11:cd:1e:78:8e:cc:42:f2:87:7b:
         45:dd:8e:53:24:6e:e9:f5:1d:64:c8:25:cd:e1:22:c0:f1:46:
         e3:a1:45:88:25:59:9c:88:15:48:b2:60:e5:ed:55:4c:3f:5b:
         bf:5e:96:29:db:b5:58:f3:96:c8:42:99:1d:e3:df:8c:be:28:
         81:1b:85:b1:d6:55:0b:72:4e:81:13:7f:64:f2:f5:cf:d6:2c:
         e2:58:40:2b:5c:0b:52:a9:ba:81:d6:bf:27:b4:72:16:92:bd:
         b9:a2:1f:80:56:9c:e5:d5:c6:60:d4:a6:7c:af:bd:af:ba:7c:
         50:2c:d5:90:b6:b6:2b:1a:1f:5b:82:b6:54:5c:48:4b:68:ea:
         1d:bd:1c:82:ce:6f:ea:f8:2c:b4:79:c6:ea:2e:85:c2:fa:85:
         4c:a7:3d:db:51:af:a7:ee:86:a1:90:9b:07:35:2c:4f:71:47:
         35:45:01:2c:94:7d:99:c2:d4:eb:fd:63:a4:fc:c7:6d:f4:a4:
         32:db:12:dd:ac:03:18:ca:02:b5:50:99:a6:dd:36:50:27:bf:
         0b:aa:83:c8:a5:75:9e:74:bb:92:47:61:02:64:5d:90:34:bc:
         79:0e:55:4d:ef:b2:3d:c4:8d:05:eb:e8:3c:24:5b:b4:da:c9:
         fe:e1:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:29 2025 by rpki-client