Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/90ab3f01-a144-38ad-9fb5-55cbc9f53fd6.roa
File:                     90ab3f01-a144-38ad-9fb5-55cbc9f53fd6.roa (raw, json)
Hash identifier:          nFK+W2aO6QlsdxtzHmdF1X1y20REZOS/Q5P/CFChNjY=
Subject key identifier:   31:E0:FC:57:84:7F:80:28:7F:54:D2:3F:CD:CC:8A:A7:FB:DE:22:7B
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A629095E1D98949F5E17A2200
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/90ab3f01-a144-38ad-9fb5-55cbc9f53fd6.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.38.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:95:e1:d9:89:49:f5:e1:7a:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=27075743-6bd0-40f2-9daa-334d354027af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:5a:80:12:cb:7d:81:82:bf:5c:be:2b:00:
                    cf:17:d8:56:fc:f7:58:32:6a:ef:89:85:fc:5b:09:
                    3c:76:68:7d:fc:b6:cd:fc:d1:f1:09:62:36:e7:dd:
                    af:3c:46:a0:3b:6d:93:a6:55:c4:f9:58:e6:03:2b:
                    50:15:3e:52:7b:e7:85:62:9a:d5:22:3d:98:ef:d6:
                    f6:93:02:d7:cc:dc:a3:75:86:fc:04:db:a0:e0:e6:
                    d7:e9:a0:2f:e6:b1:aa:e8:51:2c:f0:d3:1a:39:90:
                    2b:68:58:78:dd:9f:e9:ab:07:c5:ac:e1:3d:3e:35:
                    38:dc:d0:ef:29:06:38:b4:a6:70:1f:ac:c5:30:5a:
                    6c:bc:85:31:f8:8b:63:3c:31:49:0b:3b:3f:44:f2:
                    14:2f:6d:fb:f5:eb:04:b6:88:a8:78:4b:d7:8a:09:
                    31:6b:55:66:10:c5:67:60:83:48:20:9d:e8:39:19:
                    5b:c1:a7:82:7b:23:ee:dd:6c:aa:55:08:6c:f9:97:
                    4c:2c:b2:a9:50:fc:82:39:09:10:8f:95:b5:56:2f:
                    12:0a:a5:65:40:ec:7c:16:0a:40:d8:79:06:d9:21:
                    f0:65:19:3a:f5:fa:3b:18:a1:bf:30:be:a1:90:7f:
                    e5:b7:c3:37:db:a3:d5:e0:5f:42:5f:67:cc:0f:34:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E0:FC:57:84:7F:80:28:7F:54:D2:3F:CD:CC:8A:A7:FB:DE:22:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/90ab3f01-a144-38ad-9fb5-55cbc9f53fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:f5:3a:93:b6:1d:57:11:46:a4:6d:05:00:6c:c8:8c:75:
         a7:a4:8f:38:f0:7b:69:82:48:91:42:3a:7e:48:fd:ea:93:e8:
         ef:20:02:75:91:50:b0:cc:88:fd:11:39:ca:12:b0:b9:37:f3:
         69:11:eb:bb:92:6a:31:e0:2a:05:0a:01:db:78:66:0d:85:5f:
         10:b9:89:6c:cd:8f:26:2d:1b:5a:61:94:6e:cf:ab:c8:69:0c:
         f6:c8:08:c4:80:fd:21:8f:75:29:1f:b9:4d:67:d5:df:cf:3d:
         b7:1e:06:aa:87:ec:68:3d:00:0d:46:4a:1f:3d:a6:32:d6:6f:
         1b:c2:ad:a9:34:cc:19:a4:b9:e9:1c:80:9e:7e:3a:2a:ed:a9:
         a0:12:f0:1c:92:c3:cb:6d:e7:41:03:cc:22:a7:3e:6f:17:0a:
         aa:a0:1a:a6:f0:cf:94:9a:bd:85:12:6f:92:d3:1b:04:72:52:
         5b:9f:32:44:4d:ea:eb:7c:47:1c:d8:1d:c5:f2:0a:40:b7:f8:
         34:40:41:ef:14:3f:f3:3e:e5:69:00:16:5b:a0:ff:9c:58:76:
         68:59:ca:52:7e:28:62:ee:3a:83:1c:07:e4:92:0b:9e:1f:d3:
         28:5d:cc:d1:37:e2:0a:91:64:3c:c5:23:3a:55:2e:0d:6e:91:
         46:23:46:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJXh2YlJ9eF6IgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
MjcwNzU3NDMtNmJkMC00MGYyLTlkYWEtMzM0ZDM1NDAyN2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvxagBLLfYGCv1y+KwDPF9hW/PdYMmrviYX8
Wwk8dmh9/LbN/NHxCWI2592vPEagO22TplXE+VjmAytQFT5Se+eFYprVIj2Y79b2
kwLXzNyjdYb8BNug4ObX6aAv5rGq6FEs8NMaOZAraFh43Z/pqwfFrOE9PjU43NDv
KQY4tKZwH6zFMFpsvIUx+ItjPDFJCzs/RPIUL2379esEtoioeEvXigkxa1VmEMVn
YINIIJ3oORlbwaeCeyPu3WyqVQhs+ZdMLLKpUPyCOQkQj5W1Vi8SCqVlQOx8FgpA
2HkG2SHwZRk69fo7GKG/ML6hkH/lt8M326PV4F9CX2fMDzRcnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHg/FeEf4Aof1TSP83Miqf73iJ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTBhYjNmMDEtYTE0NC0z
OGFkLTlmYjUtNTVjYmM5ZjUzZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyH9TqTth1XEUakbQUAbMiMdaekjzjwe2mCSJFCOn5I/eqT6O8gAnWR
ULDMiP0ROcoSsLk382kR67uSajHgKgUKAdt4Zg2FXxC5iWzNjyYtG1phlG7Pq8hp
DPbICMSA/SGPdSkfuU1n1d/PPbceBqqH7Gg9AA1GSh89pjLWbxvCrak0zBmkuekc
gJ5+OirtqaAS8BySw8tt50EDzCKnPm8XCqqgGqbwz5SavYUSb5LTGwRyUlufMkRN
6ut8RxzYHcXyCkC3+DRAQe8UP/M+5WkAFlug/5xYdmhZylJ+KGLuOoMcB+SSC54f
0yhdzNE34gqRZDzFIzpVLg1ukUYjRjE=
-----END CERTIFICATE-----
Generated at Thu Jul 10 01:47:25 2025 by rpki-client