Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa
File:                     b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa (raw, json)
Hash identifier:          UCwgAbrqCmPHgKmGa3CwOXhzkU2IAAGhA3bkST5Hhao=
Subject key identifier:   A2:37:23:2D:54:A7:A6:5B:9C:D8:99:16:85:41:CA:A4:E6:BE:9F:99
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A629085AEC7E4F2016B3F58C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.52.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:85:ae:c7:e4:f2:01:6b:3f:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=19b43df7-48f7-4f36-ae97-372fec036ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e2:46:16:de:30:82:87:05:79:7a:84:2e:39:
                    98:d0:88:da:0e:62:99:7a:c2:f6:d3:96:36:06:52:
                    ff:c4:2b:ae:aa:87:f2:49:22:90:8d:a8:e6:f0:4b:
                    b5:72:34:12:c0:92:61:f3:f6:f5:97:3d:32:fe:16:
                    f8:15:9a:fb:89:1a:94:25:b6:bd:14:c1:51:ea:a7:
                    9a:92:02:36:5d:9c:5a:a3:71:cb:8b:89:e5:59:ac:
                    8b:96:4c:ab:36:76:81:2d:47:05:3a:ef:23:78:f0:
                    45:a9:2c:60:83:60:3c:7e:b4:23:5e:14:da:96:50:
                    98:03:88:89:e5:2a:11:cc:73:b8:49:2b:e9:cc:a6:
                    14:e9:d8:e5:16:e5:27:38:38:8b:e9:7c:42:af:98:
                    97:e7:d5:5e:d5:75:28:84:93:20:c4:51:26:08:f4:
                    cf:05:c7:84:d2:dd:e9:f5:92:0e:21:db:bd:f0:b1:
                    04:bd:a8:b3:da:a5:aa:ac:72:ae:fe:30:6c:6c:18:
                    72:02:cc:ba:af:c6:f9:c2:09:44:89:3d:d3:18:55:
                    34:78:48:e5:f2:d5:44:b9:f6:f3:eb:9a:57:74:8c:
                    db:62:ca:b6:22:70:33:4a:0a:52:45:df:ac:90:3a:
                    0f:a4:46:c1:51:af:83:66:2c:81:31:b6:3d:cf:2d:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:37:23:2D:54:A7:A6:5B:9C:D8:99:16:85:41:CA:A4:E6:BE:9F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:da:e1:91:8d:5d:c2:a0:9c:aa:87:81:06:a3:8f:b5:d9:
         9a:d9:66:ee:8c:3c:4d:49:64:1c:41:3e:3e:ef:c9:0a:de:6b:
         b8:57:83:8f:59:e0:61:b8:b3:55:9d:32:9b:fa:8a:75:77:47:
         46:db:86:0d:7b:3b:9f:fb:94:5f:8b:7d:29:53:e3:26:d0:c2:
         0e:0a:42:2d:56:71:cd:dc:a4:c8:c8:29:04:ec:cf:71:3e:b5:
         1c:e3:de:f9:55:67:34:08:8d:23:a5:ae:a9:ab:c7:e7:35:3f:
         3e:66:3b:de:05:a3:ff:65:5e:b8:88:ae:18:9d:17:2e:44:73:
         99:96:6e:a4:6f:25:e4:05:65:b3:a5:84:c4:14:d5:e2:b1:45:
         e0:7e:f5:e9:e1:83:ef:c2:64:5a:94:2b:c8:67:85:1a:93:0d:
         28:3b:d3:49:74:23:e6:af:ee:63:4f:0d:74:ac:5e:d5:83:bb:
         ca:0a:6b:f2:02:62:43:76:ff:14:a3:a6:47:4f:b9:ac:96:39:
         e9:82:38:be:af:11:58:08:ed:9d:c6:04:ff:66:98:2b:62:61:
         98:eb:7d:21:29:3d:b3:4d:95:75:fe:12:66:c2:ce:8d:bd:17:
         2a:9d:5e:ef:80:9b:5f:a4:f3:f3:07:4c:af:0d:25:2a:fb:af:
         f9:aa:36:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikIWux+TyAWs/WMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
MTliNDNkZjctNDhmNy00ZjM2LWFlOTctMzcyZmVjMDM2ZWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOJGFt4wgocFeXqELjmY0IjaDmKZesL205Y2
BlL/xCuuqofySSKQjajm8Eu1cjQSwJJh8/b1lz0y/hb4FZr7iRqUJba9FMFR6qea
kgI2XZxao3HLi4nlWayLlkyrNnaBLUcFOu8jePBFqSxgg2A8frQjXhTallCYA4iJ
5SoRzHO4SSvpzKYU6djlFuUnODiL6XxCr5iX59Ve1XUohJMgxFEmCPTPBceE0t3p
9ZIOIdu98LEEvaiz2qWqrHKu/jBsbBhyAsy6r8b5wglEiT3TGFU0eEjl8tVEufbz
65pXdIzbYsq2InAzSgpSRd+skDoPpEbBUa+DZiyBMbY9zy2uWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKI3Iy1Up6ZbnNiZFoVByqTmvp+ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjI4ZjVhNTctYzQyMS0z
Y2YwLTliMmUtODdlM2MwZWQ0NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2L2uGRjV3CoJyqh4EGo4+12ZrZZu6MPE1JZBxBPj7vyQrea7hXg49Z
4GG4s1WdMpv6inV3R0bbhg17O5/7lF+LfSlT4ybQwg4KQi1Wcc3cpMjIKQTsz3E+
tRzj3vlVZzQIjSOlrqmrx+c1Pz5mO94Fo/9lXriIrhidFy5Ec5mWbqRvJeQFZbOl
hMQU1eKxReB+9enhg+/CZFqUK8hnhRqTDSg700l0I+av7mNPDXSsXtWDu8oKa/IC
YkN2/xSjpkdPuayWOemCOL6vEVgI7Z3GBP9mmCtiYZjrfSEpPbNNlXX+EmbCzo29
FyqdXu+Am1+k8/MHTK8NJSr7r/mqNpI=
-----END CERTIFICATE-----
Generated at Thu Jul 10 01:28:22 2025 by rpki-client