Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/69139122-8fe4-310c-9fd9-e581b953ea9c.roa
File:                     69139122-8fe4-310c-9fd9-e581b953ea9c.roa (raw, json)
Hash identifier:          cnECWp4a8wfZwqCaUtzRo6Gi68y3W+bTWViUleNLO3A=
Subject key identifier:   3B:B3:7F:B7:68:25:E4:56:5D:6C:6D:FA:A7:98:9C:BF:DE:50:8E:AC
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290D1B6EEA02651ABAFE780
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/69139122-8fe4-310c-9fd9-e581b953ea9c.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.36.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d1:b6:ee:a0:26:51:ab:af:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=4844ef8c-986b-4c96-8182-2595cce1da2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:43:fb:e7:11:3d:ce:3f:d9:41:3a:7d:e1:
                    6c:fb:9b:44:68:ce:13:99:3a:9f:3b:a6:39:b6:14:
                    f3:7f:fe:e9:6e:cb:6a:e0:2c:79:f6:4e:32:9e:b5:
                    39:11:ac:cf:ec:7e:6f:e2:00:a5:39:57:9d:64:46:
                    d4:3b:42:b7:4b:3f:ed:35:22:fc:2e:83:27:83:ee:
                    86:59:8d:50:4b:4d:47:d0:e2:3c:9f:04:9f:fa:1c:
                    b7:11:ea:e8:70:1e:66:ac:6a:5e:98:ad:46:ec:4c:
                    6f:3d:d7:c6:c6:d6:14:81:1a:c4:fc:a2:68:e7:93:
                    9e:78:12:c2:d4:8b:05:3d:bb:68:cd:9a:0e:e8:1b:
                    b4:8a:3b:98:b0:1c:55:c6:c0:e7:ec:c2:27:d5:e5:
                    58:44:14:d4:56:a8:47:23:24:6e:58:55:28:6b:37:
                    c6:c2:16:07:f3:01:91:ae:87:cf:43:05:33:d8:10:
                    2d:7b:c7:31:be:e7:2c:df:46:bf:2a:2f:f2:c7:b5:
                    b9:ca:5f:62:07:48:88:20:23:8e:ab:39:62:8a:03:
                    7c:92:e1:03:72:49:f1:29:af:32:d0:2d:f4:91:eb:
                    13:74:a6:a1:c8:0e:f3:22:db:cf:74:40:0f:2c:96:
                    8a:a8:38:f9:5b:de:d9:12:b6:aa:21:ae:5b:f8:52:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B3:7F:B7:68:25:E4:56:5D:6C:6D:FA:A7:98:9C:BF:DE:50:8E:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/69139122-8fe4-310c-9fd9-e581b953ea9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:2e:88:a5:30:c8:ac:a2:ca:42:51:30:c7:8a:54:7f:0d:
         99:6d:f2:32:77:12:9a:0f:e3:03:60:87:57:f7:be:56:8f:11:
         04:ec:48:18:d0:c6:75:a6:b8:6e:7c:bd:54:bb:15:ed:6d:d8:
         88:19:4a:b6:1b:97:13:f2:1f:15:9d:6b:45:6a:89:86:ee:03:
         72:f2:61:57:21:bc:01:01:ee:ca:41:39:73:c4:87:a6:b7:d4:
         6c:16:c6:d9:21:54:6c:8f:39:37:21:32:83:d3:a7:a8:12:ee:
         cc:32:c4:48:61:d2:d6:e5:68:fe:5c:47:41:83:1f:12:50:de:
         64:e8:59:9e:f2:b6:fc:7e:3f:7f:7e:2b:46:d2:f1:38:ac:b9:
         09:7b:41:f4:3f:fd:13:47:72:6a:b4:fd:94:fe:95:d6:46:c5:
         f3:fa:e0:57:cc:2f:f6:8a:f9:13:6d:d0:f1:f2:d7:7d:80:a7:
         b4:66:64:a2:b7:ce:88:0c:54:cf:7e:b4:a9:33:12:a9:e5:62:
         6c:41:2b:4e:49:bc:84:80:06:cb:40:2a:69:67:fb:f7:9b:19:
         3f:cb:1b:33:b8:5f:e9:cc:f2:3d:ff:87:fb:37:d4:bc:33:7d:
         cf:80:02:06:9d:01:3f:21:9d:cd:9a:a2:80:8b:0d:7f:8e:6b:
         ca:7c:cf:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNG27qAmUauv54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
NDg0NGVmOGMtOTg2Yi00Yzk2LTgxODItMjU5NWNjZTFkYTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+dD++cRPc4/2UE6feFs+5tEaM4TmTqfO6Y5
thTzf/7pbstq4Cx59k4ynrU5EazP7H5v4gClOVedZEbUO0K3Sz/tNSL8LoMng+6G
WY1QS01H0OI8nwSf+hy3EerocB5mrGpemK1G7ExvPdfGxtYUgRrE/KJo55OeeBLC
1IsFPbtozZoO6Bu0ijuYsBxVxsDn7MIn1eVYRBTUVqhHIyRuWFUoazfGwhYH8wGR
rofPQwUz2BAte8cxvucs30a/Ki/yx7W5yl9iB0iIICOOqzliigN8kuEDcknxKa8y
0C30kesTdKahyA7zItvPdEAPLJaKqDj5W97ZEraqIa5b+FInvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDuzf7doJeRWXWxt+qeYnL/eUI6sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjkxMzkxMjItOGZlNC0z
MTBjLTlmZDktZTU4MWI5NTNlYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiCQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI83LoilMMisospCUTDHilR/DZlt8jJ3EpoP4wNgh1f3vlaPEQTsSBjQ
xnWmuG58vVS7Fe1t2IgZSrYblxPyHxWda0VqiYbuA3LyYVchvAEB7spBOXPEh6a3
1GwWxtkhVGyPOTchMoPTp6gS7swyxEhh0tblaP5cR0GDHxJQ3mToWZ7ytvx+P39+
K0bS8TisuQl7QfQ//RNHcmq0/ZT+ldZGxfP64FfML/aK+RNt0PHy132Ap7RmZKK3
zogMVM9+tKkzEqnlYmxBK05JvISABstAKmln+/ebGT/LGzO4X+nM8j3/h/s31Lwz
fc+AAgadAT8hnc2aooCLDX+Oa8p8zyY=
-----END CERTIFICATE-----
Generated at Thu Jul 10 01:58:52 2025 by rpki-client