Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/45c67344-a34c-3a96-9005-3279204a6aae.roa
File:                     45c67344-a34c-3a96-9005-3279204a6aae.roa (raw, json)
Hash identifier:          hpdhairpv6VR7/jJVqVIYjhREb4le8cxtHl/A4RDmGM=
Subject key identifier:   AD:57:00:37:3B:44:7F:BB:C2:D1:53:1C:72:EA:DE:AF:61:D5:61:72
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62909B5760AA72C452090860
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/45c67344-a34c-3a96-9005-3279204a6aae.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.34.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9b:57:60:aa:72:c4:52:09:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=277c6184-8061-4d16-8879-882dacf52163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:0f:4f:30:6c:c6:c6:b8:5d:14:b9:3a:06:
                    57:96:01:b0:e9:be:a6:d4:47:d5:25:85:35:d6:12:
                    36:f9:66:b9:6d:70:65:d4:33:5e:21:2a:2c:d1:1c:
                    61:54:74:b9:bd:7b:47:f6:81:22:07:a4:a7:2a:cb:
                    40:e3:42:3a:51:89:94:66:3c:89:63:d7:96:21:8e:
                    a2:01:a5:f3:71:9e:7d:52:03:bd:2e:c2:7c:34:4b:
                    d6:e1:ed:a4:1e:74:fd:94:41:b2:bf:9f:c7:45:1e:
                    f1:fa:12:0d:a7:1d:cf:48:20:6f:d2:9c:3b:f4:91:
                    c1:7e:bd:c5:c4:12:e0:c9:07:23:3b:30:05:d2:8d:
                    a8:5e:95:44:88:97:1b:c4:de:a8:2d:65:f5:2a:2d:
                    cd:a4:82:78:08:6a:98:88:66:aa:b8:38:cd:bd:38:
                    ae:f7:d4:dd:e6:0a:06:af:89:52:c6:7a:fd:de:2a:
                    13:dd:24:9a:fa:0d:2b:1c:b1:87:5f:15:14:37:b0:
                    e7:94:f6:f4:79:28:c0:a8:c4:d2:3a:b7:49:09:75:
                    19:d7:6d:62:4e:9a:47:32:0c:14:87:70:3d:a3:15:
                    90:86:47:cc:0e:f0:22:17:5f:8e:21:07:0c:65:72:
                    6d:9e:95:9b:fa:23:67:54:45:3d:db:0e:38:19:d1:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:57:00:37:3B:44:7F:BB:C2:D1:53:1C:72:EA:DE:AF:61:D5:61:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/45c67344-a34c-3a96-9005-3279204a6aae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:c7:51:2d:c2:66:e1:2f:7c:42:e3:c0:a1:0b:e8:a5:15:
         72:37:de:bc:96:2a:9b:22:f0:17:3e:d9:5b:8d:93:83:4d:77:
         ef:0c:b4:ec:25:08:51:70:19:0d:c6:27:d3:62:e7:b7:51:91:
         78:b4:62:48:03:f9:38:2a:7e:87:87:7b:db:9c:21:a6:21:a1:
         42:86:0f:ef:31:97:8a:7f:b8:65:59:ba:05:c8:97:04:9c:3c:
         63:b5:1a:0e:f9:3d:8f:fa:6d:66:86:4f:9f:8f:1b:c2:f1:13:
         76:86:69:98:4a:54:ba:1f:ae:5a:49:62:15:ef:f0:42:a9:0b:
         aa:10:73:d4:2b:9e:a4:94:ee:07:fc:50:94:f2:65:f7:41:b9:
         1e:24:d6:c4:41:3f:5c:a1:fc:b1:2a:00:ca:2c:1f:3d:61:73:
         f6:b9:b8:52:b4:29:03:24:3f:ee:fd:54:22:57:0d:10:b0:49:
         34:80:02:55:68:a8:0c:f4:9f:bc:30:c9:7f:88:32:99:dc:6a:
         40:84:00:ed:e6:46:4e:3d:a5:92:2b:93:13:97:7a:47:91:ae:
         48:b4:9a:8f:17:29:9f:bc:c0:d6:f3:49:45:d5:50:c8:5b:54:
         ac:4b:b1:b9:2e:17:09:3b:25:ea:40:f0:79:fe:6f:ca:66:11:
         05:18:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:15:36 2025 by rpki-client