Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa
File:                     6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa (raw, json)
Hash identifier:          +Fhlu2q+ITzybbv/Z1PnqKVvN1108VK73xWzRV42dW8=
Subject key identifier:   12:58:EC:49:54:83:64:70:EA:53:A2:C4:00:DE:11:2C:D4:FD:1A:8E
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290991AF5130FFB7A0F8200
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.47.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:99:1a:f5:13:0f:fb:7a:0f:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=6d406e5a-adac-4d0b-a195-a2d3721d6ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e0:07:53:15:d5:b7:80:0d:da:d8:9f:2e:5c:
                    a3:fe:a9:69:46:16:5b:70:51:9f:c3:38:7e:93:fc:
                    ea:e3:c5:8c:53:8f:aa:7c:25:32:66:17:9e:80:82:
                    7a:08:79:ba:28:59:f1:7d:33:74:75:eb:98:96:3a:
                    8e:31:8d:46:28:5b:44:90:39:1f:89:21:1d:bf:43:
                    12:b7:ae:04:96:c0:17:e0:c2:01:f6:c8:2a:22:5f:
                    63:6e:95:1d:cf:0f:64:e8:d3:02:e0:25:3e:e7:ff:
                    73:d2:9a:de:94:2b:7e:87:94:94:b5:0c:f6:65:ef:
                    ab:1a:11:a9:af:fa:cc:02:04:2f:30:bd:15:d6:be:
                    53:cf:e4:6e:65:11:15:64:cc:fe:bd:7f:df:2c:59:
                    54:c3:d0:79:59:d8:d4:ec:5f:df:ec:e4:d4:fb:a9:
                    ad:eb:21:9c:d6:35:62:15:39:1b:d9:0f:ae:f2:59:
                    0d:f3:78:ba:5d:e7:68:fc:19:f2:95:9d:25:e5:dc:
                    b4:00:48:5a:5a:3a:f4:8d:65:cb:72:4f:b5:96:d0:
                    7f:63:6f:8f:90:dd:ab:d3:63:9a:71:92:78:05:b3:
                    27:33:cf:af:c7:55:7e:e5:7a:a0:ca:b2:fb:a5:4b:
                    3e:3e:25:e0:72:69:1e:02:4e:0d:79:14:a8:c6:93:
                    57:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:58:EC:49:54:83:64:70:EA:53:A2:C4:00:DE:11:2C:D4:FD:1A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6cf7128d-e69a-3f3e-8ab7-26aa9f740bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.47.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:06:e8:e5:4a:fa:da:fe:df:22:ef:cf:a0:90:c5:48:71:
         89:f4:fe:77:de:f0:2b:82:96:c7:a0:a5:62:50:ea:a8:20:4a:
         fd:02:d5:13:c6:94:81:db:c2:6b:42:f0:39:cf:05:de:b7:26:
         b4:ec:41:f5:3e:db:99:f4:8c:b2:ea:fa:25:f9:97:34:80:18:
         be:e1:9c:a8:ec:72:e2:67:c8:56:a1:3d:02:3c:9f:fd:fc:67:
         ab:cf:c0:73:8a:66:ea:08:9d:e2:f0:d4:d0:35:b2:42:05:24:
         00:b4:c8:44:31:4b:ac:8e:d7:0a:ff:4d:d5:1d:9d:55:5a:34:
         a3:e6:fc:8e:fc:69:ba:de:3b:7a:19:4b:b7:a3:b5:1d:13:54:
         24:e8:df:52:e2:52:c3:84:a1:1b:8d:4d:40:ab:35:07:63:71:
         23:c6:6c:db:40:15:8f:1f:a6:8a:e5:ae:f3:41:f1:2d:50:85:
         c8:7e:22:f2:53:7f:fe:3e:99:87:d4:4f:83:43:24:34:2d:97:
         ef:f5:40:c5:3f:4b:11:69:99:8c:18:9a:35:f7:91:df:4f:5e:
         44:d8:8e:65:6e:d8:da:eb:f5:ff:f4:58:8b:47:88:2a:b5:9a:
         6a:bb:0a:6e:7f:48:7d:8d:3c:b3:ab:b4:4b:1d:bf:47:d8:22:
         72:b3:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:25:33 2025 by rpki-client