Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5657d890-d69b-3941-a691-028f30555b49.roa
File:                     5657d890-d69b-3941-a691-028f30555b49.roa (raw, json)
Hash identifier:          eTwfk03drLW7/G9ggi9kRSgvY7fRSJ/HnNeP3qPjsTE=
Subject key identifier:   A0:F3:A9:F8:C7:66:81:16:71:64:D3:EF:EE:2A:82:16:75:B7:95:70
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A57690DD9718211A3F00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5657d890-d69b-3941-a691-028f30555b49.roa
Signing time:             Thu 23 Jan 2025 06:13:18 +0000
ROA not before:           Thu 23 Jan 2025 06:13:18 +0000
ROA not after:            Wed 23 Apr 2025 05:13:18 +0000
asID:                     16591
IP address blocks:        136.56.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a5:76:90:dd:97:18:21:1a:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:18 2025 GMT
            Not After : Apr 23 05:13:18 2025 GMT
        Subject: CN=9686c19b-42f0-4689-82a5-76cd0ef095f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:60:ff:a9:a8:2f:2f:5e:58:99:71:ac:bc:66:
                    d0:35:14:a7:78:6b:18:d6:4d:27:e7:45:a1:4a:46:
                    b3:b5:da:3b:54:b0:2b:c4:51:70:f9:96:8b:c3:5d:
                    4d:c9:38:f7:1a:00:2d:f9:e9:64:40:73:4c:d3:81:
                    2a:0a:f9:c7:4d:2c:0e:d7:6a:5b:a9:37:b8:17:b6:
                    e0:40:10:c9:ca:3c:38:52:7b:fb:fc:20:1d:2b:03:
                    7a:e1:2a:ab:9e:c7:2a:4b:94:63:31:1d:9b:2e:71:
                    3c:12:0b:ab:ec:77:2c:c9:b2:6c:31:0c:a0:0f:ec:
                    fd:71:7e:de:82:64:9f:5c:24:16:10:98:5a:43:f4:
                    44:85:63:5b:63:66:f3:c7:a8:55:25:ae:47:60:fe:
                    e1:9a:21:0e:fa:ba:f9:a0:88:31:df:91:31:46:ab:
                    8a:6c:14:68:4b:d7:6c:37:e7:dd:91:98:ad:b4:c2:
                    e3:cd:50:1c:fd:94:57:f6:72:b0:9f:a5:dd:96:5d:
                    49:25:e0:a8:52:79:49:68:3d:44:88:0f:17:a3:d1:
                    e8:b7:f4:3d:a5:8e:cf:65:39:cc:d5:84:f5:30:1d:
                    6f:58:63:52:ae:6a:8c:49:8c:2f:52:48:47:d2:5f:
                    88:c1:66:0b:36:f7:46:07:2c:2f:43:3e:35:33:87:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F3:A9:F8:C7:66:81:16:71:64:D3:EF:EE:2A:82:16:75:B7:95:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5657d890-d69b-3941-a691-028f30555b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:ce:b0:8f:8d:0d:44:76:d4:82:6b:e4:44:03:9f:24:ad:
         d0:da:a6:2f:d5:07:13:ce:41:6c:dc:5e:5e:47:26:ce:2a:54:
         12:29:dd:50:26:62:c0:6a:ce:bc:c3:03:57:25:91:9b:38:2f:
         97:e1:13:fd:d9:2b:8e:89:53:dd:fd:5f:a6:01:7f:cc:ff:f4:
         8f:8d:6a:1e:ac:f5:9d:81:68:e7:fd:b5:89:0f:a9:83:86:40:
         a1:27:d3:d4:b2:2f:14:a2:43:73:1b:d3:99:de:aa:f6:25:77:
         e0:db:3d:94:71:cf:35:9f:3d:b3:f6:8c:97:f8:3d:70:ca:98:
         9e:3a:12:bc:cd:3a:d0:48:8c:e4:68:bc:36:ce:22:61:e0:42:
         72:c6:94:fd:fb:36:f7:fd:78:6f:e6:29:bf:f7:ca:d7:50:fd:
         8e:9d:12:71:d0:14:98:48:f1:8b:09:07:ad:67:74:21:7c:c6:
         e5:26:ef:31:39:1a:78:8c:78:94:29:1e:78:1d:cd:23:2f:6e:
         1f:61:4a:d5:e3:0b:5e:bc:ca:4b:f0:6b:3a:29:85:e9:5d:00:
         d1:8d:37:b1:16:11:aa:65:c0:78:f6:f4:5d:48:77:f8:94:8d:
         b5:ae:83:8f:09:5d:1c:ee:5e:11:1f:ad:c1:18:0e:64:31:81:
         7a:bc:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:11 2025 by rpki-client