Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73c9fe52-d315-36ad-84a9-0f9b50c9d56e.roa
File:                     73c9fe52-d315-36ad-84a9-0f9b50c9d56e.roa (raw, json)
Hash identifier:          XLX/xDyb0pHxDqMxRIyAqG39sWb2K5cvhYpV+OyCivY=
Subject key identifier:   92:89:E0:C4:BE:22:F0:C4:3B:2C:B1:B1:BB:A6:56:8E:77:42:D6:3C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62909A8F5E18E133AEB1C740
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73c9fe52-d315-36ad-84a9-0f9b50c9d56e.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.62.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9a:8f:5e:18:e1:33:ae:b1:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=28e60ca9-1bb8-4e84-8cda-e98d96ee42d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8b:52:8b:73:d1:6c:56:86:7f:fa:3e:a2:79:
                    0a:7a:5e:27:86:ef:1a:3c:60:63:69:13:c2:1b:30:
                    13:f5:9a:ab:7b:da:66:2d:48:c6:5c:45:1f:c4:db:
                    56:df:8e:8e:a4:50:95:55:8a:de:33:68:93:c8:db:
                    15:9b:3f:1d:b8:9b:ad:42:86:d6:cb:13:bb:4a:f4:
                    b8:a5:d3:f3:16:91:03:3f:a1:f7:6b:5f:cd:e5:44:
                    c1:c5:75:f0:b7:2c:aa:9d:41:bc:35:4e:37:6e:10:
                    d8:4b:be:b3:91:0f:c2:45:02:13:73:62:0a:91:ad:
                    cf:59:87:b0:3b:05:bd:ce:3b:02:32:f3:71:b5:ac:
                    7c:96:54:7f:14:7c:5d:4c:9b:83:43:f4:e3:cf:1e:
                    97:d4:81:de:b6:ee:ba:dd:14:3e:0f:6b:09:e3:1e:
                    ca:dc:c0:c4:8e:ec:1b:e0:ca:a8:06:d3:4f:03:93:
                    f8:f5:ed:be:33:c6:74:70:97:95:3c:17:31:04:c7:
                    80:e4:b2:4d:68:57:3d:57:9d:c4:d7:cf:eb:e4:82:
                    4f:63:91:89:40:6b:fb:57:5e:01:bb:a8:82:ca:e4:
                    c9:8c:80:dc:b8:5b:b4:48:39:e1:24:b0:7a:f5:b5:
                    d2:1a:a3:1b:3e:6d:1a:0c:a5:d9:92:f6:9e:74:47:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:89:E0:C4:BE:22:F0:C4:3B:2C:B1:B1:BB:A6:56:8E:77:42:D6:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73c9fe52-d315-36ad-84a9-0f9b50c9d56e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:7b:d8:26:e0:3d:04:8e:e7:58:52:9e:00:fb:89:b1:2a:
         e0:42:2f:59:b3:cd:cb:04:d9:04:3e:27:06:69:de:06:f1:33:
         42:0e:da:c4:2a:43:2d:82:21:c9:ef:b0:bf:dd:bf:a6:04:c9:
         04:47:18:be:94:1b:c7:59:a4:58:08:ff:72:02:28:2c:a9:76:
         44:b8:93:22:0e:35:c4:03:84:15:4c:19:37:60:77:cd:75:0b:
         3a:57:27:a4:bf:88:d8:60:8c:50:a5:9a:31:58:47:99:fe:5c:
         e3:64:24:1a:74:e2:b8:f4:7d:d7:08:96:4c:63:2b:97:aa:a3:
         0b:e8:af:04:6e:18:cc:5b:a6:0f:97:93:ff:d9:ce:6a:f6:ea:
         49:3d:19:e5:f9:06:e5:95:8d:7f:48:37:dd:b5:2c:b8:61:24:
         40:f1:3d:37:47:63:29:07:be:88:f6:08:9b:c9:fe:e0:fe:3e:
         04:fe:fa:32:09:fb:e6:d1:f5:d6:4d:4c:39:08:6e:6f:13:15:
         6a:a8:7b:33:ce:5d:1d:ee:c2:39:ec:8f:c5:d7:9e:a7:80:e5:
         c0:f0:1d:d2:a9:e6:6c:83:1f:c9:54:78:45:00:6a:de:d5:5e:
         0c:85:89:47:d8:2e:14:4b:9c:f4:1c:27:fd:e4:29:e9:65:55:
         80:a1:a1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:02:33 2025 by rpki-client