Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6c732c3a-665d-398d-af70-e63073c12f42.roa
File:                     6c732c3a-665d-398d-af70-e63073c12f42.roa (raw, json)
Hash identifier:          YrWbcplgGSxtooEr1J0g7Xr/LKdWO1NjSRogs679bLc=
Subject key identifier:   28:0E:D2:FD:52:D6:63:63:29:65:BE:21:AD:A2:5C:01:31:4F:CF:81
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290C854E6367D08773F2C80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6c732c3a-665d-398d-af70-e63073c12f42.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.51.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c8:54:e6:36:7d:08:77:3f:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=d7befd0d-7426-4e59-8f1a-d53d349a3a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:4c:d7:34:25:24:00:55:2d:f1:a9:f1:15:
                    a5:8c:7e:99:4c:24:b7:e9:84:41:d7:a6:9b:a9:38:
                    cb:75:9d:d1:28:e9:83:91:2b:5b:85:05:bb:ec:01:
                    f6:3f:74:b6:d0:9d:16:45:8e:3b:98:3b:9d:73:fb:
                    ba:d9:c2:ae:e7:01:5b:05:b5:01:1c:28:ab:d2:28:
                    c1:76:ce:ef:ab:50:5e:c2:8c:ad:32:b9:57:86:bd:
                    28:a1:64:5e:75:d5:0f:7f:52:31:7f:f4:71:cf:76:
                    28:f0:65:30:38:d3:3d:d3:17:45:d4:26:0e:d8:79:
                    b8:4c:0d:7a:f0:cf:a9:99:0f:79:53:67:22:5e:c0:
                    e3:4a:d5:58:f9:6c:5a:8e:c4:a1:fa:58:96:c6:4d:
                    ae:77:02:b0:d3:26:05:ce:6f:de:1a:ad:87:10:3c:
                    33:67:f7:08:a2:62:6a:22:09:0e:48:bf:6a:55:45:
                    a8:fd:48:65:7f:a7:5b:10:d4:18:21:dd:c9:4a:9e:
                    82:26:0b:dd:14:c2:ff:c5:84:76:d7:0c:ba:a7:93:
                    68:3e:75:a4:ee:5c:06:bf:be:21:ce:f6:d0:1f:be:
                    5b:52:3f:8c:ef:3a:44:1c:6b:8d:e7:5c:73:42:cc:
                    1f:70:6d:bc:c0:e2:50:87:22:a5:96:e9:d9:c6:be:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0E:D2:FD:52:D6:63:63:29:65:BE:21:AD:A2:5C:01:31:4F:CF:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6c732c3a-665d-398d-af70-e63073c12f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.51.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:c0:1c:ec:9a:4c:97:df:d3:b8:2b:90:95:8b:74:3c:bc:
         d4:41:38:c4:41:8f:8d:3e:ff:07:12:63:ce:63:69:84:fc:44:
         90:a8:9b:92:e7:8a:ab:5b:32:5c:bc:91:cc:66:d5:0c:9f:3d:
         d4:4a:1f:77:7f:41:ba:b7:dd:b1:3c:32:8b:1e:21:84:94:ee:
         e4:1f:e5:5a:29:14:51:52:01:3c:5b:27:45:eb:88:b5:4e:68:
         90:95:d1:99:c7:7b:aa:59:44:28:7d:32:3f:11:a7:6c:05:d6:
         ce:74:f0:81:0d:8d:8a:62:96:b3:24:e9:93:04:32:50:15:5c:
         c9:d6:1e:28:e7:c6:03:77:7f:a8:4f:e4:65:3b:c3:4a:df:f0:
         f5:a0:01:c6:ac:51:85:ec:fa:6b:b6:38:2f:d1:31:d0:22:9a:
         07:37:08:6b:b6:46:8d:6c:a2:f1:66:2c:a2:c6:ab:03:c7:ae:
         39:cc:f4:73:52:67:da:32:9a:75:d7:4e:48:44:fe:37:ed:45:
         05:d6:eb:5a:9b:6d:90:04:ac:3b:ee:18:2f:c4:8a:1d:1f:8e:
         17:20:03:22:74:b7:a2:15:44:34:ae:1e:8f:d5:d9:f2:36:36:
         a3:de:c0:2b:9e:39:13:f2:b6:05:4b:11:6d:47:a9:b0:5f:71:
         c8:34:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:14:25 2025 by rpki-client