Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa
File:                     a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa (raw, json)
Hash identifier:          FuQHZWf7lv6q9MjFaYedUZLsbrIu+wQ1R1BOKatCbWs=
Subject key identifier:   47:85:02:63:83:76:7D:B8:BB:CF:7F:20:8E:63:74:D8:6F:7D:AE:49
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290CD83F0552404B5F7E9C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.57.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cd:83:f0:55:24:04:b5:f7:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=d971db50-02f5-4556-9ecf-9ac4ef4f558e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:03:0a:3e:ab:2c:df:eb:ca:79:6f:39:64:
                    11:b5:f3:16:44:93:8a:25:a4:a8:de:c2:ba:76:08:
                    84:1d:78:51:98:8e:c2:40:eb:58:25:59:e2:5e:0c:
                    16:c7:ae:18:86:72:ec:da:80:ff:e8:2f:09:93:a6:
                    35:e8:c0:65:2e:70:11:18:6e:09:b9:c2:03:26:ce:
                    26:e1:87:8e:de:a6:8f:7f:ba:d6:e7:f0:07:0e:36:
                    d5:31:71:ab:c8:06:8d:01:17:c0:7c:44:aa:86:e4:
                    3d:96:9c:31:ab:a7:97:87:d4:28:eb:dc:1c:1b:12:
                    d0:8c:31:cc:2c:8e:3b:9d:4c:e7:d1:2a:b3:b6:15:
                    68:d2:21:de:35:5e:dd:a7:54:c1:24:d6:de:90:c2:
                    25:77:dd:97:51:bd:9e:e0:59:47:e7:08:12:bf:4f:
                    e9:15:31:82:86:19:b0:da:9a:80:0c:6d:ca:0a:f2:
                    4e:58:5e:7c:07:b1:91:95:f9:d9:b8:64:44:a3:74:
                    e0:11:84:07:16:0c:f4:d8:e5:a9:db:45:e0:53:0d:
                    ea:df:cf:9a:3a:1b:ca:9e:94:fe:ed:50:03:31:25:
                    82:22:70:73:8e:3f:40:60:80:89:67:03:7e:3f:d0:
                    16:0d:89:4a:0d:bf:e4:3a:a1:23:19:2b:b2:5c:c0:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:85:02:63:83:76:7D:B8:BB:CF:7F:20:8E:63:74:D8:6F:7D:AE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:59:e0:93:a7:1f:54:e7:9f:e7:22:a2:bf:3b:d1:e0:b0:6f:
         50:24:f0:60:6e:3f:bd:f5:44:a9:97:dd:71:7c:00:97:cf:11:
         64:4b:16:a0:32:da:f9:4b:5b:fb:47:fe:ed:e9:b9:38:2f:14:
         66:f2:0e:20:bf:61:30:ab:b7:0f:29:3f:c3:26:65:89:81:13:
         b3:ad:6f:6c:30:70:21:e9:cd:f3:d2:c1:e9:92:5c:f7:48:63:
         44:a8:96:ef:92:e2:2a:94:c3:ba:9f:9f:34:75:ea:b6:15:af:
         2e:b4:23:1e:9f:2a:3c:33:a1:c2:d3:fd:02:56:38:3e:e2:e0:
         8b:62:b1:2c:e8:55:11:3e:87:c7:b8:d3:28:f3:e0:23:4c:08:
         a6:df:a0:96:ca:1a:e4:70:6c:48:65:ab:3e:a4:12:0a:d0:d0:
         f7:0b:af:8d:47:ff:1a:60:bf:d8:2f:cd:b3:2d:b8:06:bf:43:
         0a:df:79:57:e3:71:e3:85:2f:6b:46:49:a8:77:3e:13:5f:e2:
         8b:bd:50:cb:0d:b4:c3:07:e4:80:c9:07:04:e1:4f:f9:f4:20:
         4d:ba:14:ad:a4:f8:29:22:0f:10:4c:40:02:4a:d7:e0:58:d4:
         b2:8d:a0:c7:8f:3e:b2:7a:f7:2b:73:04:bd:32:fd:c1:16:50:
         ce:f0:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:03:09 2025 by rpki-client