Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa
File:                     9cd416fb-8786-3914-9147-fb72fa08441a.roa (raw, json)
Hash identifier:          AQ/MW2t828gtwHdJVKCLuOJF4xxJ5qYU7oUf6sgrnkQ=
Subject key identifier:   26:70:46:8E:B7:F7:DE:93:B1:C2:16:2C:97:66:4D:23:AC:54:99:B7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62909C8C5FAD22BF9F2848E0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.33.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9c:8c:5f:ad:22:bf:9f:28:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=b9c71135-11a2-4c16-92ff-9701335a377b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:4d:36:35:9c:27:a9:45:e9:a6:20:62:a5:
                    59:77:fb:ea:68:82:9c:9d:f1:f2:59:55:c1:30:41:
                    c3:c6:9f:a7:3c:f2:a9:6a:84:58:f7:a3:10:98:45:
                    13:f1:13:08:5a:cf:00:84:1f:18:04:d5:32:80:c6:
                    13:0d:91:2d:f8:b6:01:60:b5:12:b8:a5:49:53:2a:
                    db:84:ef:bf:6e:f9:ac:3a:d5:55:de:bd:48:28:61:
                    46:88:62:97:74:82:46:df:fd:18:d9:1c:25:65:f7:
                    69:96:ab:83:08:ef:08:f7:3c:43:01:52:d3:9c:16:
                    98:8b:d0:be:f2:55:f0:9e:0f:fd:97:c7:fe:06:94:
                    23:21:e9:c8:60:7d:f7:04:a2:1a:de:06:ff:8d:e1:
                    8c:f9:45:74:b4:c5:78:f8:46:ed:08:0b:e1:f5:48:
                    6b:09:9b:0d:6d:9f:9e:36:5c:20:ef:fb:9e:8a:8f:
                    32:6c:f8:a7:f0:d4:50:4f:aa:51:67:2f:de:2b:20:
                    50:73:04:23:78:ea:0f:64:65:01:59:12:d7:85:50:
                    77:b7:1a:3b:86:81:c9:cb:fd:de:fd:30:aa:39:b0:
                    7a:9b:4c:ef:24:79:91:3a:e1:5f:6e:44:ae:5b:59:
                    f6:bc:72:64:6a:01:3a:89:d9:a7:76:59:b9:d2:eb:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:70:46:8E:B7:F7:DE:93:B1:C2:16:2C:97:66:4D:23:AC:54:99:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:65:dc:6a:9b:36:49:af:3e:9b:dd:73:52:c3:19:8e:0d:
         e8:be:4d:9c:6d:ef:55:83:df:79:5e:24:7e:d3:d2:53:06:f0:
         89:5c:6c:7b:20:e4:6b:6a:50:94:d6:6e:13:d7:7a:7a:25:b5:
         eb:63:c7:b3:1b:7f:c3:ca:ac:c9:65:45:a3:62:ce:eb:14:73:
         c8:d8:2b:20:1d:97:91:df:6e:43:c8:3f:fa:31:0a:3c:ff:ca:
         21:10:01:1c:00:63:fa:83:17:2c:85:96:cd:75:ae:20:cd:44:
         65:05:e5:7c:5b:f8:2a:51:f0:ee:eb:5c:13:4c:2d:87:e4:dd:
         5f:e4:f6:2b:61:dc:0d:f9:fa:bf:4a:eb:ed:c9:ee:cf:aa:dd:
         ce:5e:30:88:f5:01:e7:f6:65:86:42:13:dc:7b:c0:80:85:ab:
         63:82:ad:94:36:3a:8b:bc:88:5b:ee:f0:f5:f1:ed:aa:57:4b:
         3f:06:01:60:f4:93:d7:ba:37:0c:07:f5:d9:a5:40:17:95:fd:
         98:b2:c0:f9:58:2b:f8:9a:c6:b6:b9:39:67:ca:44:0e:41:4c:
         50:f2:5e:b5:59:ef:e0:9b:a9:73:6e:b1:60:3b:01:5f:b7:6d:
         41:ad:75:4d:4b:0b:64:00:ae:d9:6d:62:46:1a:78:53:39:e2:
         2d:18:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:29:10 2025 by rpki-client