Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa
File:                     9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa (raw, json)
Hash identifier:          o1gB37B1VCEC5vP3/zT1TUgrbHzfTvHe4JzUGlr5zME=
Subject key identifier:   18:DB:6B:5C:0C:A2:87:FB:61:87:FA:49:96:89:C3:52:F5:71:17:24
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318ADDD9F39373258611C00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa
Signing time:             Thu 23 Jan 2025 06:13:22 +0000
ROA not before:           Thu 23 Jan 2025 06:13:22 +0000
ROA not after:            Wed 23 Apr 2025 05:13:22 +0000
asID:                     16591
IP address blocks:        136.37.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ad:dd:9f:39:37:32:58:61:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:22 2025 GMT
            Not After : Apr 23 05:13:22 2025 GMT
        Subject: CN=edb2dd22-16d1-4031-8d8c-5dbdbd2df004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:05:2e:01:88:c2:29:a1:8c:26:ea:f1:fe:
                    eb:ce:70:42:be:f5:b3:2a:14:3e:c2:5b:23:e7:b1:
                    9b:f6:0c:bd:ab:98:2b:b9:30:6b:cb:23:5d:cc:4a:
                    ad:6d:94:10:55:ca:13:9a:83:98:d3:fa:b6:98:db:
                    21:c4:23:98:ca:56:3b:f4:55:bd:27:18:cf:01:a3:
                    ff:92:3b:6f:06:fc:9b:36:fa:a3:36:2a:bc:3d:53:
                    93:5b:34:5b:34:ce:83:d5:43:0b:08:3f:38:ad:08:
                    c4:f2:16:28:15:11:5f:cc:d5:7a:41:5d:3c:57:e7:
                    6f:a4:6f:d5:3f:ec:f1:51:5e:30:db:78:96:02:dd:
                    2a:ef:43:a2:8b:95:0e:0f:da:f5:0d:4c:4d:8c:cd:
                    d7:11:d8:25:0a:23:d6:cc:53:64:c3:5f:fa:2e:93:
                    59:af:8f:ad:7e:ce:44:c1:39:b3:c1:8b:1f:f4:7b:
                    91:fb:df:89:44:2d:2d:e2:98:12:5e:e8:1d:c4:9b:
                    56:30:98:e8:c8:57:19:a9:a8:e0:d7:19:db:ab:c0:
                    6d:4f:b3:7d:f1:bc:5d:d0:e3:a6:31:68:98:ed:a3:
                    5e:21:13:50:b9:21:69:22:0e:7a:3a:c0:92:29:58:
                    59:a4:59:fc:71:6d:1d:f4:87:0a:f6:b5:8c:e3:33:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DB:6B:5C:0C:A2:87:FB:61:87:FA:49:96:89:C3:52:F5:71:17:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8f:12:1f:7e:96:8d:1e:78:c8:4d:50:ad:e0:93:d0:ad:9d:
         40:44:2e:84:c8:c0:33:94:3a:59:9a:cc:07:98:0c:98:fe:cb:
         2e:db:57:54:bd:bf:86:8c:79:68:a6:e7:d5:c7:b4:e1:5c:4e:
         74:e3:2c:f2:19:81:11:63:3c:e5:85:d2:45:52:8b:ce:d2:71:
         86:64:15:6d:ad:90:20:64:44:7a:b6:28:46:4b:9e:1f:85:b9:
         3b:f3:8a:9c:3c:5a:a8:b1:c3:49:ea:db:d0:ac:3e:ff:22:6a:
         f5:06:ad:bd:d1:f6:06:8f:4b:44:2c:62:41:13:4d:e9:e6:84:
         fc:df:ea:8c:31:70:c0:7e:9d:69:fe:81:11:1b:02:fe:bd:5a:
         c7:77:3e:1f:c3:bd:f2:55:60:f7:0f:e3:39:5a:63:bf:20:18:
         82:f6:31:f3:85:21:b6:d4:89:48:0c:b0:39:cf:24:ea:64:f0:
         d3:6a:05:31:c7:f7:59:73:70:7e:82:1f:33:bf:d5:dc:0a:7a:
         1b:75:ef:a1:dd:89:cb:e5:49:0d:6c:67:fc:7c:87:ac:53:18:
         22:3c:9e:6f:7f:c8:b7:c0:23:02:fb:6f:ab:07:ab:69:22:bf:
         fe:16:0a:72:68:04:d3:54:c9:7c:ea:38:69:fd:f0:00:7d:b3:
         2b:a0:75:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:54 2025 by rpki-client