Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8b6ddc99-e949-35b9-8135-79c5f30c17ef.roa
File:                     8b6ddc99-e949-35b9-8135-79c5f30c17ef.roa (raw, json)
Hash identifier:          oNBIHz4qoYZVWcw04zd8/hNHeLGRolMDJ9RSylgVaH8=
Subject key identifier:   A6:38:6C:9D:E0:EE:54:B8:65:88:45:37:2C:4D:D3:61:2A:6A:E1:B1
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62908E036B13B10E3FADC300
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8b6ddc99-e949-35b9-8135-79c5f30c17ef.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.56.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:8e:03:6b:13:b1:0e:3f:ad:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=71949399-f4ae-4858-856d-f07ae32dfc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:a1:e1:56:94:38:31:b1:9f:99:6a:94:b4:
                    9b:31:b9:b2:30:a8:82:8a:52:a0:2c:33:70:1c:68:
                    aa:82:2d:20:69:65:27:73:87:0c:d4:97:94:ad:76:
                    74:ca:28:89:80:88:d2:5c:ed:5c:f1:70:75:31:98:
                    fd:a1:c3:de:74:72:cf:bc:03:88:0a:f7:02:9f:59:
                    ae:d0:95:56:3f:ac:2b:13:ab:fe:7f:d8:48:c1:14:
                    9c:ee:c8:a9:80:b3:a0:69:d0:b9:cf:85:0d:a8:b7:
                    f5:60:3c:b2:61:df:dc:2f:5e:79:c5:f3:73:8d:41:
                    11:eb:2d:15:a9:49:d3:45:43:18:ad:45:d6:6d:76:
                    88:a8:91:48:6b:7a:f8:24:5a:77:9c:08:3e:32:01:
                    f2:58:dc:8e:bd:33:9b:dd:38:44:cc:73:1c:e0:f4:
                    dc:75:ca:d3:5b:6f:d4:c6:b5:63:58:18:94:47:de:
                    15:94:8e:55:f9:ab:5e:6d:0d:c6:45:fc:59:c2:96:
                    24:4b:da:45:ba:1a:d8:d9:66:43:f4:a4:98:52:21:
                    f4:cf:a7:ca:85:8a:62:51:ae:21:ac:7e:40:96:4a:
                    6c:6b:8f:10:bc:eb:5a:e3:f5:34:04:3b:7b:fd:2a:
                    f3:3b:d2:14:1b:69:5e:dd:12:61:d4:57:a8:b6:fa:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:38:6C:9D:E0:EE:54:B8:65:88:45:37:2C:4D:D3:61:2A:6A:E1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8b6ddc99-e949-35b9-8135-79c5f30c17ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5a:0e:57:0d:9a:81:22:e1:79:33:2f:ec:2d:72:3c:79:40:
         37:1f:9a:83:a0:e8:bc:89:f7:55:05:b6:93:03:e0:45:94:c6:
         de:7a:d3:a2:49:df:af:1f:e6:2e:c4:fc:00:06:1c:a8:ac:93:
         2f:97:17:36:48:85:7d:01:3c:90:d6:8d:c1:a0:c4:38:4b:91:
         bc:e0:42:a5:8b:3b:81:e7:30:d1:92:c7:77:40:e2:6c:54:7f:
         0b:e8:26:a3:22:c7:70:40:f6:24:bf:62:3c:ac:ac:08:7f:35:
         ec:79:a5:24:cf:11:29:a0:d5:1a:71:b5:9d:4b:30:f7:f7:f8:
         a9:a9:10:16:12:21:bf:1d:d2:ed:b1:d3:a7:84:ee:28:1e:56:
         78:a5:9b:93:f2:5d:41:75:df:34:f3:15:42:01:d7:3e:5d:6d:
         e5:b7:d1:76:c1:bb:f2:b7:ae:94:28:9e:24:ca:a3:56:ea:9a:
         c8:8b:d5:30:ac:73:ac:42:36:b6:9d:43:5f:86:e4:02:2b:87:
         df:d1:e3:5c:85:64:7c:37:de:41:d1:17:75:0f:80:b9:d4:d9:
         c5:22:31:13:e5:aa:2b:67:8b:ff:93:69:95:70:76:ba:4a:58:
         57:dc:b0:0d:0b:1e:0d:43:3e:12:b7:b0:55:71:e4:73:3e:9c:
         bb:c3:aa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:32:33 2025 by rpki-client