Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/94008665-cb83-33cf-8eed-284ba0f22497.roa
File:                     94008665-cb83-33cf-8eed-284ba0f22497.roa (raw, json)
Hash identifier:          1G9bVFWNbgH/x5sGtqAtAUbXeDYXtHrICiF7MXsh158=
Subject key identifier:   3D:C4:E1:63:70:76:17:22:13:FD:8E:A5:8F:EB:AB:B7:A0:F8:65:4B
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290850E4F756C71FC61ADC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/94008665-cb83-33cf-8eed-284ba0f22497.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.60.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:85:0e:4f:75:6c:71:fc:61:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=500a2eb9-1c54-44af-8320-84c432ffd355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:f7:8e:d8:50:fb:1d:d6:3d:34:69:4e:3a:
                    ad:66:64:7a:36:7e:53:3d:0f:9b:56:5c:15:af:c9:
                    d2:e4:e5:28:ff:78:9b:fe:6c:a8:b6:2f:60:00:70:
                    84:8a:c9:81:b4:35:cf:ba:a9:d3:c6:12:21:dd:d5:
                    21:ea:f9:65:84:af:5b:11:8c:57:83:c3:94:80:c4:
                    c3:ac:9b:f0:5e:df:5d:de:35:42:d2:02:6b:2e:47:
                    97:af:cf:fa:e3:d3:40:d6:d9:8a:bc:17:9f:c5:04:
                    d1:b3:5d:11:19:dc:af:18:ac:12:fe:00:45:32:ce:
                    05:61:d0:7d:9c:3b:58:28:9f:fb:61:64:4b:32:3a:
                    0e:c8:e3:98:65:8f:1b:ef:15:78:4d:7c:a3:76:31:
                    a4:85:cc:da:99:66:fe:10:c3:5a:c5:a5:19:e9:6c:
                    30:db:12:b8:42:d6:93:4f:be:a8:7d:73:ae:6f:0c:
                    20:a7:20:c5:7d:2c:07:a1:71:8b:ef:e1:2b:11:ae:
                    ad:a9:28:72:be:c0:d2:c7:a2:3d:3c:79:e6:16:9f:
                    e0:c9:0b:a4:e6:b9:13:38:fe:bf:ca:46:7b:c9:4c:
                    58:70:96:ad:1f:57:c2:ee:3c:d0:7d:0d:6b:6e:7f:
                    49:99:80:2b:59:89:15:70:51:18:d6:0f:3f:da:64:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C4:E1:63:70:76:17:22:13:FD:8E:A5:8F:EB:AB:B7:A0:F8:65:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/94008665-cb83-33cf-8eed-284ba0f22497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.60.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e2:8e:14:eb:f5:91:7d:80:a9:66:ae:64:aa:40:3c:0f:82:
         5d:9a:f7:81:4a:61:6e:98:7b:b1:25:d7:70:35:d0:0d:f8:b5:
         ea:96:3b:6f:a1:83:86:40:c7:11:f7:53:9e:f4:d1:3b:92:26:
         0b:ba:40:18:f6:7b:54:80:d0:58:22:02:77:15:68:05:48:6e:
         b2:03:3e:e0:58:36:20:58:b4:c0:cf:8b:f8:54:3f:59:d4:86:
         95:cd:e8:bc:f3:99:f9:30:81:cc:68:94:53:26:3e:b8:05:99:
         1b:25:ad:64:ff:f0:9d:43:30:93:ea:f9:46:b8:35:bd:8f:0e:
         f4:28:6f:5a:0c:91:b1:35:6c:4d:ed:a6:17:82:41:0b:1d:74:
         3d:74:a7:5d:43:f2:98:3b:38:b1:11:51:94:eb:3b:44:61:d1:
         d1:a4:a4:56:ac:8b:8f:fb:45:23:24:94:bc:da:a0:7e:55:29:
         14:5a:b6:44:54:23:3c:7d:fa:4d:c1:d2:de:f1:aa:5e:ee:6a:
         60:c9:47:d7:70:a7:93:7f:6d:70:07:80:e9:05:ca:f8:27:01:
         94:8f:d9:f7:75:76:b7:b2:cf:72:fb:00:59:e4:a8:62:64:c7:
         dc:76:69:9c:b5:1b:88:be:3e:c5:f9:ed:a6:0d:03:05:c4:0b:
         45:8c:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 12:51:37 2025 by rpki-client