Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5e58f758-d76b-3754-ab74-1dbca142d253.roa
File:                     5e58f758-d76b-3754-ab74-1dbca142d253.roa (raw, json)
Hash identifier:          U9Z2py/P4gjFCdcoGXUxMCHYM0cUkJt5NtYPuZmx7ZA=
Subject key identifier:   C8:12:4F:76:C3:12:5A:86:80:B0:24:A1:8E:21:BC:7E:6C:EC:6B:8A
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A8FB8D278BB354247100
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5e58f758-d76b-3754-ab74-1dbca142d253.roa
Signing time:             Thu 23 Jan 2025 06:13:20 +0000
ROA not before:           Thu 23 Jan 2025 06:13:20 +0000
ROA not after:            Wed 23 Apr 2025 05:13:20 +0000
asID:                     16591
IP address blocks:        136.49.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a8:fb:8d:27:8b:b3:54:24:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:20 2025 GMT
            Not After : Apr 23 05:13:20 2025 GMT
        Subject: CN=12a2f5e6-7c61-48fa-9d48-cace603ca533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:e0:c5:56:6e:6e:39:7d:5a:af:62:92:36:
                    a4:13:d7:3d:07:86:01:c6:84:49:e5:54:c4:ea:b7:
                    48:0c:e6:ac:11:61:b7:fe:60:5e:a6:6e:ca:39:9b:
                    83:34:75:fe:64:d6:44:fe:21:96:97:ec:f0:8b:fb:
                    1c:db:6b:6c:6f:15:60:92:03:db:f0:40:f6:8e:1a:
                    bc:e4:f2:e1:d3:55:ae:36:c8:ea:9d:8e:41:47:ee:
                    11:8f:ad:79:ce:e8:53:d5:aa:d7:db:93:ac:34:28:
                    c6:d5:b4:91:64:00:f9:f4:a9:1f:99:91:7c:a7:e8:
                    70:81:8d:e2:b6:9c:fe:ba:c2:1e:ac:c9:e1:53:5c:
                    79:fd:13:05:43:0a:30:25:9c:be:c1:86:ee:f8:c1:
                    14:f6:06:fa:7c:ea:08:fb:5f:e3:a0:c9:42:b0:71:
                    07:cf:d5:aa:47:eb:3a:3a:32:3c:fc:35:1d:62:1a:
                    09:a8:cc:37:38:9b:55:53:eb:6d:b6:ed:09:df:87:
                    9c:d1:f5:1a:9f:91:91:dc:a6:8f:eb:68:de:85:97:
                    c1:58:e3:a9:eb:25:d2:65:72:cb:26:1c:bc:fb:13:
                    46:c5:29:87:db:c4:5b:7f:dd:f6:e9:6e:b9:78:d5:
                    cf:20:4c:e8:08:8f:9a:c1:df:6b:1d:d6:d3:0e:87:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:12:4F:76:C3:12:5A:86:80:B0:24:A1:8E:21:BC:7E:6C:EC:6B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5e58f758-d76b-3754-ab74-1dbca142d253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:50:7c:02:65:de:59:e9:3e:f9:38:1f:cb:90:15:d3:a1:d5:
         ad:f0:7f:9c:73:5f:7b:19:92:d4:b6:0e:ae:6a:73:b4:bc:65:
         bd:ea:62:1f:8d:78:77:c4:9e:48:e6:98:eb:4c:ac:c3:05:60:
         d0:97:01:91:4a:9a:2f:82:c4:5e:c3:fa:73:ae:53:61:41:c3:
         27:05:c1:71:67:cb:e1:24:47:3d:5a:51:a5:95:99:d7:34:71:
         10:74:14:09:b0:ec:b5:49:eb:c7:73:75:6c:2b:4b:e1:fc:58:
         7d:dd:4c:1d:8b:24:89:08:bf:23:d2:67:82:f4:e7:2f:e8:c0:
         23:d9:57:7c:da:05:25:a7:db:f0:66:55:c1:17:23:43:69:af:
         75:60:72:70:80:76:99:35:7d:f6:d1:02:8e:6b:07:a8:bf:3e:
         40:02:66:bd:3e:0d:c0:e0:a7:71:c2:b5:89:64:42:01:40:b5:
         74:e0:27:29:f9:ac:80:f3:34:a6:53:58:da:34:15:15:7a:4f:
         45:af:50:d7:f3:85:4f:a8:fc:eb:67:8b:de:e9:46:2b:e1:ce:
         2c:68:7b:c5:b1:a7:03:5b:4f:d1:0d:8e:12:83:f5:f3:3a:ab:
         11:b5:12:f9:a9:d0:a2:6b:6b:27:17:0a:a1:c1:9c:20:76:93:
         29:6e:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:01 2025 by rpki-client