Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/533c6d85-1f2f-38e3-aa85-88dfb10cc1e0.roa
File:                     533c6d85-1f2f-38e3-aa85-88dfb10cc1e0.roa (raw, json)
Hash identifier:          e/ydO1eZRu+es2CUd5HIuLX/k0xQKCkOaMts7Gsqs+0=
Subject key identifier:   36:94:4B:30:01:2A:FD:E4:7C:8A:F3:42:E1:BB:44:C0:EF:4D:14:6F
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290CDD9957BB33ED5E8FFC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/533c6d85-1f2f-38e3-aa85-88dfb10cc1e0.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.32.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cd:d9:95:7b:b3:3e:d5:e8:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=70eec3d2-75a6-4147-adbf-70d5d6b2092f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c0:57:ea:de:21:63:0f:dd:0e:c2:7e:51:2d:
                    ff:fd:44:94:0f:f5:37:25:31:2e:de:9d:e4:93:24:
                    b5:78:db:3a:62:2f:3e:a8:65:3f:0c:96:5d:d7:06:
                    08:6d:4b:24:cc:3f:41:99:e2:71:5b:13:18:38:98:
                    b0:ea:f9:59:b5:f5:44:0b:f2:a3:90:36:e3:98:ab:
                    0c:77:74:7f:40:dc:65:cd:0d:3b:02:65:7a:9e:14:
                    d4:5f:25:82:30:54:b1:b0:b5:b0:d8:4d:7c:9f:f6:
                    a7:d6:00:42:f6:9c:d2:80:b6:b9:49:81:71:7a:c8:
                    06:f0:77:60:61:19:90:1a:a5:42:e6:8c:be:ef:f0:
                    72:dd:c5:4f:17:56:88:1b:fa:a8:d8:c8:27:7f:10:
                    9c:49:b1:c2:36:db:c3:5c:96:aa:1e:13:7c:51:af:
                    d0:ed:97:a9:36:ad:b6:b5:9c:1f:02:ea:40:ef:8f:
                    82:1a:c1:9e:1c:51:84:22:21:13:5a:49:bd:12:84:
                    b6:8c:12:35:aa:5a:9e:6b:55:13:ab:92:87:65:8e:
                    fe:80:ac:f6:54:ce:02:3f:e0:bc:35:0d:62:29:c6:
                    11:13:7a:13:e5:ab:7f:e9:f2:e6:07:42:b6:97:96:
                    e9:4f:35:f8:be:29:68:60:90:68:e4:f6:d2:e8:4e:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:94:4B:30:01:2A:FD:E4:7C:8A:F3:42:E1:BB:44:C0:EF:4D:14:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/533c6d85-1f2f-38e3-aa85-88dfb10cc1e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:96:48:bf:76:d1:bf:d0:ec:c9:17:57:a9:25:11:79:30:ee:
         45:b8:9d:e5:78:5d:97:ff:52:2a:3d:3f:78:cd:e9:97:9a:20:
         c1:d6:81:3d:52:27:d1:18:55:eb:51:08:fc:50:f8:cd:89:6e:
         68:ee:08:3d:e7:ad:85:d2:70:5f:d5:44:2f:5f:cc:50:28:40:
         8f:93:b1:7e:86:d3:84:d7:49:b9:7f:7b:a5:9e:55:cf:2d:87:
         18:7a:84:41:53:de:db:4e:db:20:62:68:7a:b9:36:92:d6:86:
         d2:71:61:81:18:bb:0d:ae:f5:39:df:5e:c3:f4:10:8e:b8:9e:
         4e:9c:fa:70:9f:ee:71:b3:be:fa:8b:a6:9f:85:cf:ac:94:64:
         7a:54:d1:cd:80:ee:15:cf:7c:52:e1:78:c1:68:59:93:85:26:
         79:17:23:2b:10:f9:e1:3a:ae:0f:a4:5b:fc:5e:33:fa:d1:e6:
         7c:fe:44:49:a2:07:34:c7:84:01:74:4c:93:5a:ed:aa:b9:24:
         c9:83:50:a5:27:da:c3:72:4a:3e:23:e4:61:71:b3:0d:c1:01:
         33:25:b8:58:8e:10:0e:13:68:0b:68:86:6a:6d:85:04:cc:f6:
         56:ad:d9:49:3e:5f:fc:2b:f1:25:23:a6:58:0f:51:42:cd:66:
         92:15:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:20:16 2025 by rpki-client