Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/700f2905-7d1e-32d0-b5ea-3f478b44d476.roa
File:                     700f2905-7d1e-32d0-b5ea-3f478b44d476.roa (raw, json)
Hash identifier:          g8JQnJvKnEZQoU+fG2U7Y887H5DJf5jdPwsZ8ta7bhY=
Subject key identifier:   9D:E4:3F:FE:83:1E:8D:86:E0:23:9D:8F:31:73:F0:BF:6D:2F:B5:D6
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A4B9E209F8265075A71A
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/700f2905-7d1e-32d0-b5ea-3f478b44d476.roa
Signing time:             Thu 23 Jan 2025 06:13:18 +0000
ROA not before:           Thu 23 Jan 2025 06:13:18 +0000
ROA not after:            Wed 23 Apr 2025 05:13:18 +0000
asID:                     16591
IP address blocks:        136.60.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a4:b9:e2:09:f8:26:50:75:a7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:18 2025 GMT
            Not After : Apr 23 05:13:18 2025 GMT
        Subject: CN=590dfed1-54a0-448f-bbcb-8d10dd6eed2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:36:fa:00:8c:9a:0b:25:47:a8:a0:09:a2:
                    a6:c3:e3:39:22:ee:77:14:50:b1:a9:14:4f:c9:b4:
                    46:66:a0:cb:76:8f:32:30:99:a4:54:7b:cc:e9:ad:
                    f8:5a:eb:5c:c1:3f:f5:83:59:39:5f:f5:7e:a8:a7:
                    d6:16:13:de:10:d7:a4:27:b6:d1:a7:88:7a:fa:ef:
                    3a:d8:51:8f:01:dd:b0:a0:4c:14:e0:fc:1d:0a:0c:
                    e4:c7:b9:eb:95:44:a9:7d:9f:5d:e6:b2:7a:6c:f2:
                    6b:1c:f0:d6:77:9e:ce:d7:22:4f:d0:06:81:67:07:
                    7e:05:b6:54:44:07:aa:52:e1:74:14:8d:db:7c:7b:
                    28:f3:ea:81:17:14:82:9c:af:c1:dd:16:64:d1:8e:
                    77:4b:b3:50:b9:cc:f5:77:8c:9a:cb:73:b9:bf:85:
                    ea:1b:ee:61:c0:25:d4:f6:3d:31:60:11:c9:71:0b:
                    d4:0b:a5:66:f2:b5:ec:56:f8:f0:ff:c1:53:56:8b:
                    50:05:fc:5b:94:4d:74:fd:6d:d0:b1:28:92:43:23:
                    d4:dd:44:19:6d:cc:cd:f8:76:13:0d:f8:2c:b3:5b:
                    43:21:47:ae:aa:46:c5:39:83:e1:20:9f:e9:d5:84:
                    0a:ea:80:69:8c:e1:7c:dc:dd:b7:b5:1c:f0:06:93:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E4:3F:FE:83:1E:8D:86:E0:23:9D:8F:31:73:F0:BF:6D:2F:B5:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/700f2905-7d1e-32d0-b5ea-3f478b44d476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.60.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:a6:59:9f:4b:cb:ae:cc:2a:4f:54:5b:b3:53:5f:48:90:
         33:95:7c:10:f8:b6:86:62:c7:99:4c:39:2a:dd:51:a6:c0:fd:
         c1:f8:ee:c0:08:58:4e:3d:65:40:c9:d3:8d:67:ca:52:97:44:
         d4:c4:1d:8d:e1:e4:f5:eb:54:5b:53:b6:2a:07:5e:ab:4f:3b:
         d2:d7:f3:ad:30:fc:b7:c8:d8:f6:85:c0:44:2f:33:2b:ca:04:
         79:eb:c1:24:5b:d9:07:5c:33:92:c6:1f:c7:45:1d:47:95:03:
         94:ed:e1:d6:33:f7:b9:67:d8:08:eb:22:12:59:8b:a1:b2:e2:
         11:34:ad:e7:4a:21:62:85:32:2e:e7:df:e0:79:ed:ce:79:a1:
         fe:70:bf:81:3a:7c:0d:bc:92:82:04:49:80:2f:92:84:3a:11:
         2d:68:a1:69:86:32:3c:c4:50:ba:89:dd:e6:48:22:5d:15:72:
         54:d0:28:7d:15:ef:9f:1a:75:ac:8a:f0:ff:dc:30:29:0a:a6:
         64:3b:87:2b:aa:95:a1:7d:7a:8c:29:55:85:84:e9:dc:a8:56:
         ea:d8:93:06:90:c4:6e:87:6f:c1:f5:45:73:ca:cb:d8:24:10:
         df:f6:fc:f5:c9:b3:a9:5b:74:91:65:e9:63:a4:79:22:50:05:
         10:8c:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:35 2025 by rpki-client