Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/48925f21-01cd-3c3a-aa32-ac8dd0c553c0.roa
File:                     48925f21-01cd-3c3a-aa32-ac8dd0c553c0.roa (raw, json)
Hash identifier:          jpK8OWUgqArJ+zM2nibGCZuJpcInQeobmTan2O7Qy98=
Subject key identifier:   E8:E7:69:16:B5:19:9E:C0:56:02:20:55:1C:4C:39:C1:0B:9E:43:27
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290D595DE0CE60807CA3B40
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/48925f21-01cd-3c3a-aa32-ac8dd0c553c0.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.56.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d5:95:de:0c:e6:08:07:ca:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=0e2f59ed-4ec6-4ced-8ae8-26fcb0af528b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:59:18:82:b7:e4:d7:b1:b2:59:2c:99:37:11:
                    a7:40:7e:ae:a9:90:e2:a8:af:ab:21:93:96:9f:15:
                    04:5f:77:cf:78:aa:ee:0d:0c:1f:16:2b:1d:a5:df:
                    cd:c9:7a:4f:9f:e5:0d:bb:1b:ec:a9:44:df:f7:7d:
                    2d:03:83:bc:5a:0e:80:9b:bd:2d:df:33:26:a8:b5:
                    eb:03:95:92:07:9d:a7:9e:20:db:26:7a:70:07:f3:
                    2f:71:b1:a1:97:d3:99:6c:ed:f2:db:ac:df:87:87:
                    ce:aa:fc:63:e9:4e:c0:a9:91:eb:1e:32:2b:4b:f5:
                    7c:64:bd:22:82:be:e0:44:e7:1f:9f:f3:64:e6:75:
                    55:b5:17:b6:b1:be:a7:18:97:a6:a4:fb:da:c4:e6:
                    20:ea:87:8b:00:e4:b5:3b:f2:b1:60:e3:aa:a6:09:
                    74:bf:0e:22:8a:3b:4d:f7:26:cb:29:42:98:6b:89:
                    de:a9:ea:03:5a:c0:30:ef:ed:8b:a6:2c:e2:b1:d6:
                    8c:10:db:7c:95:24:d6:5d:7c:f6:bb:05:a4:e8:f9:
                    64:7a:1d:66:65:68:97:7d:34:68:26:d4:50:42:86:
                    fe:2e:de:ee:d4:32:35:ac:b2:6c:ef:3d:fa:88:4b:
                    c4:a2:1b:87:72:30:26:eb:bf:8c:5c:34:ca:ed:d5:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E7:69:16:B5:19:9E:C0:56:02:20:55:1C:4C:39:C1:0B:9E:43:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/48925f21-01cd-3c3a-aa32-ac8dd0c553c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c8:a1:6a:b7:5f:f3:94:59:c8:e6:71:51:e5:ab:33:5b:21:
         94:77:97:59:22:08:8e:05:4e:e1:00:e2:fe:75:bc:b2:df:47:
         a9:65:e9:7b:75:44:45:9d:3f:66:8f:b5:23:0a:69:fe:13:2e:
         ae:ea:82:ca:26:c2:fc:1e:e3:3b:aa:64:98:ce:2f:d5:68:cd:
         e2:4d:08:e2:09:75:0b:90:dd:27:e9:77:6c:04:7d:b0:76:19:
         37:f1:2a:b7:f7:4e:0b:00:6b:da:28:39:d9:45:10:8e:be:b3:
         26:f6:0d:ad:47:d7:b6:6d:34:f0:dd:36:6f:6f:8f:e9:a4:c8:
         3b:2a:78:00:00:67:bc:09:13:02:29:cb:73:1d:c1:68:11:b4:
         a0:7f:38:0a:59:e8:c3:cf:ca:b5:20:42:f3:c8:5f:ab:bf:a0:
         1e:7f:98:cc:0b:f8:9a:70:ce:9a:a7:5d:e6:24:15:7a:b2:a8:
         08:2e:33:42:a0:a1:71:84:d8:e9:38:99:56:2a:11:86:60:79:
         4e:05:f1:30:89:28:e6:e6:58:67:db:79:2a:a5:41:b3:9c:fb:
         b7:9a:8c:29:a0:78:f1:5b:83:04:84:43:3d:86:f5:78:a3:03:
         c8:32:9b:8c:56:66:4a:56:c2:d9:39:9d:b0:1c:1a:b8:0c:06:
         32:46:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:19:23 2025 by rpki-client