Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/667fc059-a257-31d8-83bc-d0070578d874.roa
File:                     667fc059-a257-31d8-83bc-d0070578d874.roa (raw, json)
Hash identifier:          1Fpq2iq6h/MZqZ0X3OaqzbP6SUN8J9xHXQSxmKksrtQ=
Subject key identifier:   46:A0:08:27:FF:BA:3B:AD:F6:1A:63:AE:8C:22:3A:92:07:22:2B:7F
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290D200A9DBD3F62FD96480
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/667fc059-a257-31d8-83bc-d0070578d874.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.53.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d2:00:a9:db:d3:f6:2f:d9:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=3df89b1e-7301-443a-8823-1bdb267b9c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:a0:c9:ea:16:5c:56:bd:e1:6a:69:3c:4f:
                    0d:26:eb:72:fd:11:34:cf:72:ea:ef:4a:4f:73:d0:
                    b0:e0:f0:f9:b5:73:8a:b6:ce:51:c4:22:15:66:94:
                    ec:b3:a0:85:87:09:f4:ce:9c:2a:e5:19:b7:a7:4c:
                    c7:fe:d9:36:31:ab:0b:0e:7b:9f:20:66:71:48:b8:
                    61:3f:0f:d7:0f:6b:94:27:f5:62:d1:fb:c9:0d:06:
                    3c:6c:4e:ad:11:51:76:87:5f:da:50:30:29:f0:85:
                    44:5f:0c:f4:62:52:42:a4:26:fe:71:37:48:ea:4d:
                    c5:77:b1:63:a7:ae:3a:a4:65:76:90:ff:1d:1c:c7:
                    ae:3f:0d:68:f9:5b:d5:ac:77:2b:86:81:86:b2:0b:
                    b3:53:a2:db:3e:d9:e7:e5:d7:f6:f4:98:e8:17:12:
                    80:a0:15:e8:48:2f:2e:42:b0:14:71:58:5e:91:d1:
                    01:55:7b:d7:c7:ea:26:a0:46:9d:cc:3f:53:2e:bc:
                    0b:30:e9:2e:04:48:12:f2:de:b7:ef:74:24:79:5b:
                    06:74:4c:9a:e8:68:31:12:54:b6:95:0a:6f:28:b0:
                    15:47:c2:3c:cb:a3:0e:28:69:dc:44:e2:47:62:77:
                    66:51:63:3d:78:08:64:b1:f5:a6:8b:02:ef:07:f2:
                    05:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:08:27:FF:BA:3B:AD:F6:1A:63:AE:8C:22:3A:92:07:22:2B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/667fc059-a257-31d8-83bc-d0070578d874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:53:6d:77:bc:e2:93:3a:c0:3a:e7:22:a6:73:77:8c:08:
         06:f7:ef:51:7d:01:94:fc:6e:01:69:bf:ae:54:79:57:c7:ea:
         e5:24:c4:3f:d2:aa:9c:1b:56:ca:19:ec:74:67:a8:61:e9:54:
         52:24:b1:1a:aa:66:7e:12:4d:88:70:3a:b6:4c:6f:4c:f1:29:
         2a:60:0f:9a:56:3f:63:11:f6:ad:b4:fd:3c:b3:d6:02:c9:2d:
         ae:af:ce:44:4a:c3:28:e8:91:72:9a:68:3d:67:3e:33:bf:b1:
         3f:a9:e4:2c:cf:0b:19:30:78:22:59:c4:24:f3:91:23:35:58:
         fe:3d:4e:66:1d:40:29:87:4d:24:4a:15:5d:05:3b:28:3f:62:
         c8:59:cc:a9:f4:f9:9a:38:43:61:87:de:97:0d:4b:0c:23:82:
         df:34:ef:8b:d9:9d:74:e5:0f:a2:ce:dc:9c:00:89:f6:38:39:
         0c:41:a5:e9:59:a3:ba:5f:a7:be:63:6d:3f:c1:ac:ca:c8:18:
         7d:4b:ea:07:87:16:10:bd:22:5f:86:46:cf:5d:03:f3:70:d1:
         e5:7e:c6:85:f6:10:1b:a2:62:69:bc:ce:4e:c2:9d:16:4f:60:
         30:7c:e0:cc:da:68:a5:62:8a:4c:a9:00:76:39:97:f4:c1:1b:
         ab:bb:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:36:18 2025 by rpki-client