Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83b4f307-9071-37b9-a911-f53330a67a49.roa
File:                     83b4f307-9071-37b9-a911-f53330a67a49.roa (raw, json)
Hash identifier:          hnXpKnKuNHeROun0zXcKK2M/T6+efzblOMkhvLwglCg=
Subject key identifier:   9B:3B:73:F3:06:66:31:D5:97:4A:70:53:F7:87:F3:81:30:8E:B5:15
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A629096A8CB36199A8D669820
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83b4f307-9071-37b9-a911-f53330a67a49.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.62.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:96:a8:cb:36:19:9a:8d:66:98:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=a529e848-f7a9-4494-8f05-99cd09b6ea15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:c9:15:7a:65:76:88:a2:76:54:64:0b:e1:
                    63:52:82:d4:4f:fb:81:b7:05:12:48:c5:77:b5:ad:
                    cd:76:99:e3:b0:5b:8d:58:40:bd:c0:89:eb:d6:4d:
                    84:38:a1:3f:b7:ba:25:88:5e:1f:e4:63:3c:07:5e:
                    b6:f5:fb:11:4b:76:b3:b2:2d:73:34:d5:d7:3b:db:
                    e3:07:ae:d0:6d:4f:96:48:66:31:a3:38:d8:dd:c1:
                    67:da:d9:df:78:0b:c9:ec:54:80:96:53:fc:80:bc:
                    b7:86:6e:9f:44:de:7c:2c:58:60:91:2b:62:d8:fd:
                    ac:bf:1c:90:8a:23:76:ea:86:65:d8:fa:39:e6:f3:
                    c4:6c:e0:db:3b:87:a6:a0:43:08:1d:3c:a9:5e:84:
                    3f:99:e9:84:0b:89:11:db:ee:02:e7:48:1e:52:52:
                    06:10:24:db:22:11:e3:30:e2:c1:bd:a5:a8:6c:fc:
                    63:b2:07:c1:91:ba:d9:ef:f2:91:f7:1d:52:1e:bc:
                    25:1b:80:7d:4e:d8:73:2e:97:86:87:8b:e0:a9:1c:
                    6d:39:e6:de:b1:b3:8b:93:1b:13:5d:96:05:51:00:
                    08:0c:6c:a6:50:07:ab:df:b1:47:b5:4f:7d:84:d4:
                    ba:12:91:6f:b3:45:fd:b0:14:47:4e:de:86:cc:ae:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3B:73:F3:06:66:31:D5:97:4A:70:53:F7:87:F3:81:30:8E:B5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83b4f307-9071-37b9-a911-f53330a67a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bf:b7:4f:f4:f8:e4:e0:3b:ff:2c:2f:49:b2:e6:c8:ca:df:
         36:db:1b:d6:41:6f:87:c0:f2:15:0d:33:62:de:0d:11:c7:e5:
         ab:e1:58:01:89:5e:47:8e:3f:a8:df:69:03:10:99:c9:42:9f:
         2d:6d:f5:8a:83:bf:da:e0:ab:1f:dc:8e:43:d0:27:63:e4:26:
         81:eb:a6:6f:99:62:0b:41:68:b7:2b:df:36:31:57:3b:61:39:
         6e:42:a0:3a:ee:bb:17:2a:2a:19:ae:7e:f9:09:4e:16:4f:f8:
         ac:46:e7:e6:b4:06:1e:e1:17:7e:3b:95:c4:f7:96:49:bf:0a:
         58:3d:30:c0:31:f2:fd:9f:59:a7:d9:c9:9b:c2:ac:f9:66:0b:
         e5:de:a1:05:de:7f:0e:bb:5d:f3:41:66:00:5d:ad:6b:81:9a:
         10:04:87:27:fb:ea:4a:03:7e:88:86:d7:e6:0c:b5:5f:f5:07:
         9a:53:a6:55:fa:17:9a:c7:c6:4c:cc:ea:e1:58:a6:53:12:42:
         b7:67:58:2e:10:cc:53:31:9d:3f:c1:88:75:4e:c3:d3:06:a6:
         2c:b3:a1:0b:b8:fd:8c:e2:6d:26:2a:63:a7:23:ee:57:ad:37:
         fd:30:0f:1d:09:88:92:2d:35:b3:f1:3b:4c:23:97:31:64:1b:
         f3:58:10:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:20:04 2025 by rpki-client