Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa
File:                     96274b94-74ed-3d67-9ac2-ce24f87a9057.roa (raw, json)
Hash identifier:          GL2hiYHBcmziHFpxDxv5h+/R0/GAa0iENGJLutz9K40=
Subject key identifier:   5E:B5:55:17:7E:74:54:2E:F9:36:2E:68:36:D7:7B:E2:67:D1:9A:E2
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290CA3868612CBBED44B388
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.56.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ca:38:68:61:2c:bb:ed:44:b3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=dc96802f-95ad-4fee-ad45-845a9d4c5210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:59:8f:68:8d:66:cf:6f:93:be:89:a4:e8:
                    06:47:e8:16:96:75:60:ab:ca:ef:71:02:3f:49:6c:
                    39:c7:2b:fd:64:ac:13:e3:eb:91:55:87:df:0f:d6:
                    5f:33:bd:fa:2e:f7:80:5c:97:3b:1b:85:87:91:94:
                    9d:ed:68:df:2f:b5:b8:c3:f0:26:dc:80:8d:39:d5:
                    cd:e9:ab:53:ec:97:bf:39:31:ca:a8:55:db:f2:6b:
                    75:3b:36:f3:2d:ae:27:15:bc:82:ca:b9:90:d9:51:
                    99:b1:e3:87:e0:1d:66:4a:5f:3b:62:87:10:5b:2f:
                    5e:b0:bd:78:8f:71:84:e3:0b:2d:5c:3e:e5:f1:36:
                    85:ef:f8:32:a5:39:8a:39:65:2a:f7:72:05:fa:7e:
                    98:0d:c4:79:d1:d0:84:94:80:eb:1a:3a:08:dd:69:
                    6d:84:57:94:6e:66:62:dd:05:c1:da:e5:bd:9c:62:
                    7b:95:c3:57:a1:c8:05:89:f3:bb:54:89:b4:bd:84:
                    e6:1e:d8:6f:ef:1a:32:f4:e6:de:32:00:81:f1:0f:
                    e7:91:91:f6:c4:eb:5d:86:0f:c5:45:15:ab:bc:f9:
                    da:1c:e7:61:ac:64:c7:bc:35:6f:56:04:d8:0e:5c:
                    84:29:7a:5a:be:63:0e:df:3b:b7:6f:f8:39:92:f6:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B5:55:17:7E:74:54:2E:F9:36:2E:68:36:D7:7B:E2:67:D1:9A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96274b94-74ed-3d67-9ac2-ce24f87a9057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:97:97:b3:c2:64:04:8f:e0:a4:8a:03:dc:58:a3:9c:22:bc:
         9f:8a:30:6f:b6:6e:f5:82:9e:b6:a6:c3:47:60:1b:50:48:c2:
         8a:c4:43:49:e1:4a:20:61:d6:93:45:b5:10:f4:ab:59:9f:18:
         a2:df:ab:41:5c:b3:8d:6e:5d:f5:4d:2e:76:e1:f3:9a:24:ce:
         86:51:1a:7e:6c:12:c4:69:19:19:6a:18:8b:d5:5e:55:61:5a:
         0f:85:ee:84:ea:6a:48:4f:4d:eb:65:48:e2:bf:f0:6e:c1:fa:
         3d:5e:8f:c6:fb:4e:5d:5a:8b:32:0e:12:85:0f:83:bf:35:ca:
         55:c6:ae:11:e5:c0:fa:90:5c:c6:ed:00:10:17:f7:db:62:71:
         40:ed:40:c0:ea:5b:be:4a:0a:4e:82:bb:74:f0:ad:da:ed:e7:
         52:34:30:a5:aa:93:ea:63:74:22:4b:88:fd:8f:10:2a:24:26:
         2e:da:91:df:25:13:a8:1d:76:07:7b:2b:e6:ff:c6:1c:06:61:
         16:43:59:8b:1f:e9:d6:81:f9:4f:e8:56:ea:44:8b:4e:35:ce:
         bb:a9:69:71:a1:b3:b6:d8:9e:66:0a:9a:5b:2f:f6:4d:29:e5:
         86:31:35:d7:35:7f:3e:5f:5f:b3:21:c6:99:77:e2:f3:0e:55:
         bf:84:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:14:30 2025 by rpki-client