Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa
File:                     acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa (raw, json)
Hash identifier:          BxDkaL0sZ10swqU2SxU1Lea4K+L/8DJZUL3ZiPL40HY=
Subject key identifier:   14:35:62:75:AD:00:2B:A8:6E:BD:71:E7:6B:0C:ED:CE:34:D9:E7:CB
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318B142A181B509F5A13F80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa
Signing time:             Thu 23 Jan 2025 06:13:24 +0000
ROA not before:           Thu 23 Jan 2025 06:13:24 +0000
ROA not after:            Wed 23 Apr 2025 05:13:24 +0000
asID:                     16591
IP address blocks:        136.35.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:b1:42:a1:81:b5:09:f5:a1:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:24 2025 GMT
            Not After : Apr 23 05:13:24 2025 GMT
        Subject: CN=144a3afc-0461-47c7-b027-340aadc70c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8e:51:d2:ad:48:a4:b5:cb:70:86:e8:0a:32:
                    1c:63:2f:46:80:70:e3:c1:03:95:39:61:db:ba:3b:
                    f8:e1:ca:11:46:5e:b9:94:0c:5c:e8:a0:84:44:1d:
                    c8:c6:b1:0c:e4:26:7b:33:b5:b9:d2:e0:17:c9:0b:
                    c9:a2:a3:46:3e:94:7c:15:f5:c4:75:e8:fa:3b:20:
                    95:bb:b1:ce:d1:d7:e0:06:24:a4:5e:77:4f:7a:cd:
                    80:4b:56:60:3a:47:29:f8:4d:6e:41:08:fb:e8:0d:
                    98:9b:ab:be:79:f4:94:41:2f:07:5c:7f:16:9d:90:
                    7d:ca:d6:bc:05:3e:83:b4:81:dc:32:5e:77:3d:2e:
                    19:bc:18:46:60:24:10:0e:6d:cb:48:c1:24:93:53:
                    98:e2:b6:35:3a:82:d6:41:fe:06:d7:f1:ec:d8:ca:
                    90:90:b7:b0:b7:d3:b6:6f:85:14:39:3a:34:48:cf:
                    4c:7f:d0:be:1b:49:e2:bb:32:7e:a6:07:9b:6e:eb:
                    1b:6c:e9:0b:1e:49:e8:4e:6e:56:ae:c0:c3:03:df:
                    fe:ff:31:40:a1:b6:d8:4f:2c:dc:89:1e:bf:e2:65:
                    ca:c6:10:c1:c2:a9:85:95:f1:44:dd:1e:d5:2d:79:
                    4a:02:e5:2f:2c:51:cc:1f:46:1f:18:53:4f:b5:ff:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:35:62:75:AD:00:2B:A8:6E:BD:71:E7:6B:0C:ED:CE:34:D9:E7:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/acbbe311-1699-3187-8ea8-fbcbd63c2ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8b:a3:70:95:4b:dd:33:5c:63:a0:9c:bf:a3:8f:a2:cc:6f:
         1c:b7:ee:0b:94:82:fb:a3:78:eb:c7:02:66:5c:64:c8:00:7a:
         61:b9:45:df:75:e6:4b:9c:bf:42:0c:b9:4d:1b:f0:ea:cf:ca:
         60:b5:95:eb:1a:82:43:90:9c:2a:61:e7:2f:5f:7f:66:d5:07:
         71:9c:d7:c7:50:7b:14:2d:90:dd:93:53:a4:2e:80:7d:b8:07:
         06:a9:dc:5d:17:85:5b:1c:c9:79:02:c0:24:0c:d5:ab:75:fa:
         6c:a3:65:76:ee:2d:95:a0:23:8f:ef:a5:83:0e:de:2d:e0:91:
         05:f3:ea:ea:02:59:49:bd:d8:7b:86:9a:7a:0a:49:b1:18:9b:
         72:2c:fb:1b:c3:5b:b7:01:f4:1b:fe:6d:71:56:70:eb:09:3f:
         eb:8d:14:25:f0:10:e5:e6:88:fb:35:1d:79:b0:de:c9:a0:52:
         fd:53:99:b0:8e:e0:15:1d:32:8b:38:1a:12:b7:a7:ad:f9:69:
         4e:71:f8:60:d6:45:47:f3:c7:b2:1a:f1:2b:ff:80:32:fc:8a:
         eb:12:37:35:1a:09:13:88:5d:9f:37:0b:f1:2a:70:78:f3:a4:
         8d:35:14:3c:df:fe:fa:0f:a4:56:60:75:29:05:87:e3:15:d6:
         09:b0:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:21 2025 by rpki-client