Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/adc55fd8-7259-36fa-a484-fc579aa90c8d.roa
File:                     adc55fd8-7259-36fa-a484-fc579aa90c8d.roa (raw, json)
Hash identifier:          9hBUpNguqW7EwzJbUk3UqG7ewFFHmZZUAYolum2xIH0=
Subject key identifier:   9C:AE:65:9C:C5:E0:07:E8:CC:F9:72:38:34:F2:0E:76:A6:C6:A4:89
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62909DF56E894D4595474680
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/adc55fd8-7259-36fa-a484-fc579aa90c8d.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.58.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9d:f5:6e:89:4d:45:95:47:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=120f348f-b8cc-41d3-9933-624a41393618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:65:bf:4a:76:4c:39:6f:97:76:7b:e0:87:
                    72:79:d2:d5:6f:25:8d:c5:63:ed:c8:b3:b1:60:d3:
                    5d:38:a9:f1:d8:a3:cb:44:3b:ca:b7:47:7d:0d:74:
                    9e:2c:1e:30:42:9d:15:eb:05:5f:a9:5f:9a:d3:10:
                    e1:92:d3:96:1d:5e:f5:54:a5:ed:05:0b:b8:d6:3b:
                    63:02:0f:d7:f9:eb:41:a4:92:f6:99:b1:34:a9:e3:
                    da:5d:34:15:01:62:92:ce:9d:57:a9:05:8d:4f:76:
                    43:d0:92:29:50:da:be:6d:97:2a:bd:03:fb:04:4f:
                    a2:2e:08:57:4d:d0:34:57:14:0c:1a:66:da:c6:20:
                    f2:11:93:2e:22:54:e5:05:2a:ff:00:12:a2:d0:9d:
                    9f:e2:63:b6:4f:60:bd:86:f8:8c:d2:0a:81:04:49:
                    ee:f9:d8:f8:26:cb:44:12:99:a9:f4:65:8c:19:01:
                    ca:1a:8b:2e:91:31:87:01:fe:da:41:c3:17:f7:7d:
                    35:b4:1c:3b:4f:34:96:06:5c:38:9c:90:f4:51:c6:
                    b8:90:58:eb:61:19:67:93:d5:3e:c9:70:b1:f9:c7:
                    68:d0:2e:11:90:ed:00:d1:66:2b:3d:36:cd:34:1b:
                    53:53:50:54:d6:5c:21:a7:79:ce:fa:3e:99:c8:98:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AE:65:9C:C5:E0:07:E8:CC:F9:72:38:34:F2:0E:76:A6:C6:A4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/adc55fd8-7259-36fa-a484-fc579aa90c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.58.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:47:92:a9:ba:9b:0d:8e:f1:df:54:3a:9a:e8:ad:5f:72:37:
         33:f8:38:63:11:a8:c1:cd:50:07:57:1b:49:c6:3b:8f:99:fa:
         56:9a:26:56:94:d4:b2:09:45:e5:af:4f:87:9a:fe:d8:f7:1e:
         d3:15:8e:e2:15:7f:68:b5:c5:8c:9c:28:b1:6a:14:aa:56:db:
         ee:f8:0c:58:1f:57:c0:ae:ee:c0:1d:b5:aa:6a:52:0c:8b:96:
         f8:75:32:4c:32:29:9e:a9:c6:9c:82:8c:3d:69:dc:24:0c:03:
         d8:8a:01:c0:18:c4:f4:1d:1e:d9:be:73:d6:e0:51:5f:dc:16:
         de:1c:d5:03:29:25:a2:b0:6e:c4:c7:5e:f3:40:21:3d:69:97:
         55:83:cd:f7:af:54:f9:c2:2e:1b:ac:b3:64:b5:01:74:0a:9b:
         c7:21:11:d4:9a:b2:d4:70:28:ce:98:f2:cf:fd:af:52:90:70:
         a2:e0:ec:17:af:0b:91:3f:81:f1:7d:81:c7:16:a1:c9:a9:01:
         c4:50:80:9e:80:05:d7:e9:d9:2a:20:6d:9c:95:e1:2a:ef:9c:
         b3:85:ee:7f:23:45:ef:e9:1c:b2:0d:4f:57:fd:ac:9c:b5:ea:
         2e:cf:b6:5c:2c:7c:16:44:8e:6c:9e:ac:ac:c2:b2:fb:39:91:
         39:7e:54:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:20:11 2025 by rpki-client