Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b3c7f732-3b19-3349-937a-018a8cd0d18c.roa
File:                     b3c7f732-3b19-3349-937a-018a8cd0d18c.roa (raw, json)
Hash identifier:          nCvgwWfGcTQ3gkyUvJ/254o2swMJq+FHd/hYrcMrUW4=
Subject key identifier:   3D:8D:49:7A:88:2E:52:A2:3B:56:B0:C2:C6:71:5E:49:14:6B:0C:30
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A629087C4BB942856D435D680
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b3c7f732-3b19-3349-937a-018a8cd0d18c.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.49.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:87:c4:bb:94:28:56:d4:35:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=ab350a64-18e1-4d1d-84b2-95ff65ef4ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:8e:75:e6:e8:0f:2d:6d:27:c6:0b:e3:de:
                    54:28:04:45:83:90:02:14:51:28:0c:4b:0d:62:3c:
                    09:f4:11:77:77:ff:a4:1c:dd:44:2e:1b:30:70:71:
                    52:d5:ed:e8:7c:39:6c:a7:13:1a:c5:7d:e0:ba:e8:
                    79:9c:30:d6:ac:37:ff:fb:be:20:47:5c:a4:53:39:
                    5d:3c:40:27:a2:5a:a1:99:24:18:c6:3b:e5:fd:58:
                    44:33:97:d3:71:29:78:d8:08:49:e6:63:c9:d8:79:
                    a7:ec:70:cd:8e:80:88:f7:25:44:29:69:64:79:b3:
                    0d:f8:d2:68:e6:b1:ae:5f:7f:47:a1:38:84:62:ac:
                    35:45:41:b8:4d:ab:8b:08:72:78:57:f9:09:98:6a:
                    48:e3:5d:a3:15:65:3e:a4:a9:38:db:e5:2f:32:3f:
                    ef:52:14:7b:5c:77:40:46:79:dc:ce:b2:4a:26:43:
                    13:ce:47:be:4b:b1:a2:05:72:7f:bb:a7:8e:8b:58:
                    d0:11:f1:38:d5:fd:f8:af:e2:ff:9d:b6:42:ac:93:
                    21:3c:51:59:85:c3:14:b0:bc:75:15:9b:32:d9:c7:
                    ff:ed:06:0b:df:50:47:4a:13:c3:38:4c:95:c7:90:
                    51:0c:5c:4c:38:30:af:0e:62:85:91:5a:7e:a1:85:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8D:49:7A:88:2E:52:A2:3B:56:B0:C2:C6:71:5E:49:14:6B:0C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b3c7f732-3b19-3349-937a-018a8cd0d18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:87:27:fd:a1:5c:44:f2:d3:9c:85:a3:2b:ce:3b:9e:e9:49:
         e8:b2:7f:1e:c4:e8:4e:9d:ff:d9:96:27:ff:2c:e3:3f:2c:b8:
         8f:71:fb:8b:e8:6d:35:15:33:74:8b:35:0b:96:25:0a:58:fc:
         1d:59:27:ee:99:0d:5b:30:cf:e8:3b:6b:df:56:80:47:0c:f5:
         12:1d:1f:8f:12:0a:07:9c:44:6e:48:53:fc:2f:40:02:5d:10:
         b0:ad:f2:b0:b9:d8:eb:2e:57:2d:f2:d8:4f:9d:a6:f8:cc:4f:
         f8:0f:33:47:f5:36:6e:61:7f:ff:ab:41:86:6e:5a:99:b5:fb:
         16:4c:e1:93:4c:25:dd:80:22:a9:61:35:05:a0:f2:56:55:af:
         2d:24:b6:45:c9:fb:1d:2c:a7:08:22:98:39:a1:40:d1:ba:51:
         b5:26:5a:02:40:b1:f0:0e:e0:ed:05:ec:93:ec:62:fb:4d:23:
         32:5f:84:0e:10:c5:60:e3:b3:74:ac:c0:89:f2:11:40:dc:d4:
         1f:df:b0:ad:83:47:ca:e6:3a:5d:5c:d0:94:cf:f5:cb:f8:04:
         46:01:6f:76:40:f0:06:4e:b5:4c:71:51:d4:dc:20:90:53:d0:
         82:ed:bd:c6:6c:2f:ea:b6:16:32:ac:ed:0e:57:4a:7b:be:bf:
         94:8f:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:09:00 2025 by rpki-client