Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa
File:                     8503825e-5495-3576-a211-aae2c1171607.roa (raw, json)
Hash identifier:          bn419n5wIjrsn36oX3dcsXTdHsfWSt9lcFlqlD8RYGM=
Subject key identifier:   D5:AF:DF:48:08:A3:FD:02:2E:21:EB:51:7F:90:A7:B7:2D:5B:29:A3
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318AB269DF0CB9B88DAF671
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa
Signing time:             Thu 23 Jan 2025 06:13:21 +0000
ROA not before:           Thu 23 Jan 2025 06:13:21 +0000
ROA not after:            Wed 23 Apr 2025 05:13:21 +0000
asID:                     16591
IP address blocks:        136.32.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ab:26:9d:f0:cb:9b:88:da:f6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:21 2025 GMT
            Not After : Apr 23 05:13:21 2025 GMT
        Subject: CN=072fd25e-590d-429a-a05b-806f17871b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:0f:5c:b0:bd:a5:f2:e4:4b:25:b8:ac:d7:
                    ae:16:79:f8:4c:64:dd:8a:8f:eb:cf:8f:00:99:81:
                    da:3d:35:0b:32:4f:90:25:3f:46:66:d9:5a:98:e1:
                    b5:73:26:05:ae:93:ed:24:97:0a:29:ca:e5:05:db:
                    5c:06:39:ae:8b:11:22:20:3d:c1:8e:66:ae:dc:61:
                    05:7d:6e:4f:8d:55:36:28:49:b2:4a:3c:ad:25:bf:
                    49:88:2d:32:56:28:34:95:02:51:8e:5a:11:de:02:
                    ca:b7:95:73:30:e6:3c:0b:4d:cf:ce:3e:f1:16:f4:
                    98:bb:3d:da:a5:db:c5:f8:85:f2:48:69:ca:08:8d:
                    93:0c:f3:76:66:35:43:7f:e0:19:22:71:d5:12:62:
                    5a:ea:bc:b1:7b:78:fb:2b:a8:cd:6e:0e:86:8f:54:
                    26:f7:09:b7:bf:bf:91:ea:9b:45:88:cc:7a:eb:8e:
                    dc:7f:8b:eb:e3:e7:71:4f:de:44:5f:67:07:28:1b:
                    4b:95:45:6b:91:03:b5:0a:8a:5c:47:37:dc:4d:a6:
                    c3:1b:20:02:97:28:2c:e8:1e:9f:7f:e7:b4:73:61:
                    91:41:b4:fa:c2:1b:73:83:b7:94:4f:66:31:f2:63:
                    95:34:c8:55:8b:0d:dc:a9:6f:63:73:3c:a1:54:dd:
                    33:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AF:DF:48:08:A3:FD:02:2E:21:EB:51:7F:90:A7:B7:2D:5B:29:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:91:b2:c3:3f:5a:cb:3e:80:15:7f:a2:6a:e6:54:28:c2:52:
         5f:f2:b2:91:9a:be:64:1e:99:7e:da:3d:f7:fb:e1:0b:9d:46:
         09:76:a4:a9:b2:9a:94:46:c4:da:54:ff:bb:00:0d:6d:b1:9e:
         7a:ac:ab:5d:41:04:f1:63:e3:5b:bd:bd:54:4c:71:04:fd:17:
         cb:aa:8c:a4:bb:f2:eb:45:65:ea:0d:f1:6e:ea:80:4b:2b:a4:
         83:79:67:be:a5:74:20:28:b2:ac:f8:4a:6c:a5:2a:14:6d:ce:
         c3:8b:e7:6f:ea:33:ab:bc:98:fa:af:5e:0c:04:98:3a:1b:7b:
         5a:cc:41:75:a8:8a:79:b2:27:5d:64:f5:74:8e:d7:ff:d5:6a:
         3b:f3:c3:c9:aa:b5:da:09:dc:2c:a8:19:71:fc:ee:69:0b:a6:
         5d:32:b1:b2:88:c5:7c:77:e2:50:d1:83:95:a7:a1:8b:0d:f1:
         ef:41:3e:51:7a:c4:f0:c8:17:22:13:2c:01:2c:4e:b3:9a:db:
         aa:28:a8:5e:97:fb:dc:04:09:94:5e:a7:ad:a4:55:6a:30:30:
         25:68:10:c5:27:db:c0:45:f0:2f:d2:7b:ee:79:91:7a:58:90:
         66:cc:56:63:e4:b0:29:78:4d:70:78:60:24:06:4c:69:62:2c:
         d8:cf:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:22 2025 by rpki-client