Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8e884613-0648-3b68-9e50-523274653a85.roa
File:                     8e884613-0648-3b68-9e50-523274653a85.roa (raw, json)
Hash identifier:          4805cve235D3Yh30bOnl6XqF4EGMs5lfUDnmZHDOVTE=
Subject key identifier:   33:38:B9:52:64:25:D2:FB:80:F3:4A:59:A2:3A:88:A5:90:C7:8A:BA
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62908BB3F8EAC9418221E4C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8e884613-0648-3b68-9e50-523274653a85.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.34.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:8b:b3:f8:ea:c9:41:82:21:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=44e748d8-4f93-41e7-a7ce-ea94cd878b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:e3:95:74:c6:71:4f:17:01:dc:c3:4e:35:
                    6b:71:60:48:4e:d3:a2:3a:05:51:25:b9:38:36:02:
                    d6:03:21:ed:e3:c8:d0:d4:fb:6b:30:b2:43:83:a4:
                    96:ae:38:b9:ad:3d:91:20:a3:35:61:43:b1:10:bb:
                    69:11:56:3e:57:6f:e6:0f:f2:67:56:8d:98:48:d2:
                    9e:27:43:5b:61:77:cd:d8:97:b8:8f:56:30:07:09:
                    12:dd:c2:2f:9f:0a:7e:cd:d8:8c:2b:35:44:4d:31:
                    3a:0f:bd:fd:3e:24:01:ac:69:58:15:9f:e6:84:ed:
                    10:46:0a:54:31:7a:22:7e:6b:c3:26:cc:b2:fa:ab:
                    ac:80:d9:f6:b2:29:3f:37:19:44:6d:b5:65:1a:b6:
                    2e:f1:46:dc:f2:62:b0:07:b5:2d:94:1d:3a:c9:4f:
                    55:36:35:bf:d4:7d:22:e9:b1:92:e5:09:7e:b3:73:
                    d2:9e:f0:46:3f:54:bd:1d:c6:5f:89:5e:c0:4c:74:
                    17:26:8c:18:d6:b8:c1:82:cd:49:9c:dd:da:dd:52:
                    48:58:e6:bb:5a:f9:e8:da:27:88:fc:ac:af:af:32:
                    55:c6:77:e2:b5:ec:75:5a:1f:a3:60:81:d7:15:44:
                    9d:9d:6d:11:f2:c1:08:40:97:28:fc:1c:48:a0:53:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:38:B9:52:64:25:D2:FB:80:F3:4A:59:A2:3A:88:A5:90:C7:8A:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8e884613-0648-3b68-9e50-523274653a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c8:36:57:b7:fc:ff:8b:2a:21:63:d6:aa:17:c3:b5:83:fd:
         ab:44:9b:d5:93:dc:7c:0b:e4:bb:be:b6:ec:62:7d:3f:a8:f6:
         6d:89:82:31:0d:d6:e6:9b:d9:de:d8:6d:83:41:f8:85:ba:37:
         29:81:3d:c1:4f:fc:79:19:69:9f:e7:cd:60:99:64:59:0c:82:
         da:48:8f:92:24:8b:ad:33:c7:f5:b0:51:7f:89:60:48:6b:ac:
         47:db:a2:30:69:67:e8:96:34:b0:c1:fa:a3:92:72:40:81:66:
         31:32:a4:31:f6:9a:8f:75:58:09:2e:fe:07:5f:77:9e:62:57:
         8f:a0:d6:aa:5f:30:1f:b3:61:7c:6e:2c:6d:f8:27:3b:58:a9:
         c7:57:80:7a:1d:9b:ab:c5:a1:b1:84:e2:9c:b1:b3:62:d5:96:
         b3:05:2c:08:7c:1d:db:89:f3:aa:bc:d7:33:6a:30:c5:91:01:
         97:e8:a9:b8:8a:4a:14:1b:70:f1:77:02:b2:24:b3:c2:60:c3:
         9d:11:df:fc:b5:c8:c1:4a:d1:d6:4a:88:f7:86:32:a1:c6:33:
         1f:5d:43:4a:8d:8b:3c:59:14:53:6a:78:f0:ff:cc:65:9c:67:
         43:f4:57:d5:fb:a2:5f:d2:18:42:12:8c:95:d9:d0:4f:5f:69:
         47:aa:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:16:12 2025 by rpki-client