Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa
File:                     4923fab5-423d-3396-8261-8c9f4af962e5.roa (raw, json)
Hash identifier:          CfI2rf4uw6TlfaUP04kqN51/E0WgVEimB+ZhGryHoXU=
Subject key identifier:   C4:1B:37:9C:35:73:CE:9E:34:7C:90:B0:91:72:FB:90:65:3F:A0:F0
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290950CD7517EECAEE9E900
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.35.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:95:0c:d7:51:7e:ec:ae:e9:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=2f858b00-9625-4a42-97ef-33ef33cdae50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:a7:7f:9b:e6:42:0d:af:1e:5e:9f:dd:df:
                    5c:0f:5b:bf:d2:6a:c2:af:7b:6b:5e:55:c1:6e:a7:
                    ce:5d:a1:19:19:d0:f5:cf:7e:d7:89:8c:f3:cf:8b:
                    31:9f:9e:d6:62:27:ec:87:a2:37:b5:7f:01:60:7d:
                    7d:9d:ca:37:d0:ec:cb:9a:a6:d8:73:d6:5c:2a:3a:
                    51:4c:c5:13:db:0e:a0:47:9c:f1:8e:85:9d:7d:23:
                    7d:61:51:8f:fe:8b:c7:7c:2a:83:66:82:a8:98:07:
                    a4:18:8f:a2:8e:34:23:44:d3:6a:b1:9c:dc:8c:f0:
                    5e:ce:6f:56:95:5d:a7:9e:a9:19:fa:80:ed:60:cd:
                    f6:a6:b6:85:4c:7b:50:b2:ac:30:49:51:5b:33:2c:
                    26:cd:93:c5:c5:8b:b7:ba:12:84:c6:9d:00:4c:f7:
                    91:1e:c6:43:64:a4:05:be:d8:df:e3:79:6c:23:dd:
                    cd:96:cc:d7:b1:9e:8f:60:dd:c1:21:3e:ad:82:1d:
                    11:25:a1:77:bb:e8:ba:99:84:c1:ce:65:7e:53:86:
                    2b:0a:e4:be:9f:7a:32:36:d2:c6:95:7d:4b:e6:72:
                    27:e3:1b:84:69:8f:b0:3a:5d:51:2c:6d:97:55:5e:
                    02:9e:e9:34:70:7e:b4:17:72:90:c3:9d:31:e2:f9:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1B:37:9C:35:73:CE:9E:34:7C:90:B0:91:72:FB:90:65:3F:A0:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:82:88:36:54:6f:5f:f3:60:e5:cf:66:06:7a:61:d9:83:eb:
         54:5e:42:1c:1e:8e:3a:95:74:84:d0:15:b3:c4:a6:fd:98:53:
         17:90:3d:80:c4:8d:6e:17:97:e1:5a:02:0b:b5:33:b7:53:b6:
         47:38:3a:6a:a4:f5:91:e0:5b:17:89:56:16:c0:ad:a6:fe:9c:
         d2:3a:29:02:d5:ea:d8:8a:e9:3c:17:cc:fb:67:3c:6e:68:eb:
         fb:22:46:32:87:a4:f6:d2:86:d3:68:e1:23:a3:2a:3f:3f:31:
         98:a3:20:5d:0e:c8:17:8f:98:ba:53:cb:3f:84:c3:42:d5:bb:
         d1:b0:c3:50:e3:e6:e5:93:20:6e:85:c5:e6:ee:9e:84:f8:46:
         cc:f1:b1:7c:df:06:03:81:7f:84:31:d1:5e:6d:cc:d6:b9:5a:
         11:fb:a2:9f:86:d5:1f:d1:c2:89:15:f9:72:90:64:1a:17:43:
         24:5f:8e:f7:5c:aa:d2:82:28:cf:8d:67:00:e7:b0:c5:dd:5f:
         6b:2c:0a:bc:4f:6a:6a:92:ba:4a:3b:7b:88:92:5b:94:97:11:
         0f:4c:69:f9:8c:57:18:1c:36:73:26:fc:f6:7f:e9:4c:20:17:
         f7:f8:da:53:6c:78:b2:1c:a1:07:73:4e:af:25:81:e5:88:02:
         26:b2:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:28:50 2025 by rpki-client