Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa
File:                     bc01ea38-f371-3faa-acac-14ea10689699.roa (raw, json)
Hash identifier:          LoOod2Ee9keTyT2EmLIOMc/FYEl2q+UNyfIfB13B/Vg=
Subject key identifier:   9C:89:B1:4A:BA:B1:41:F8:AC:89:C8:C7:44:78:A7:29:CA:29:98:90
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290D4EC31E120FAE4B40EC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.57.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d4:ec:31:e1:20:fa:e4:b4:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=68c54898-053e-496c-85a7-c3ca163dd534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:4a:eb:67:63:4c:37:26:62:ab:d1:68:fa:
                    3c:3d:9b:99:85:0c:84:99:05:95:f5:2e:87:5d:97:
                    33:8b:58:65:30:8e:1a:00:ef:ad:f1:a7:71:d2:ec:
                    2d:64:59:d9:f9:77:30:dd:52:20:d6:31:05:92:c4:
                    31:48:16:03:a8:b4:f2:21:aa:51:83:67:07:77:1a:
                    8b:47:d6:16:8d:2f:2a:9e:9d:f9:45:00:17:d1:2c:
                    ee:00:c9:fa:ed:c4:10:53:7d:9c:b0:7b:2c:fa:cf:
                    80:93:e5:d3:1d:20:1a:99:d8:1a:ba:e7:20:66:05:
                    8a:c5:ba:b0:09:56:d2:16:b0:41:3b:23:d8:47:38:
                    d0:b9:bf:62:1f:68:3c:32:17:65:ca:17:01:38:25:
                    46:d7:16:02:f7:e1:c8:2e:76:03:e9:7b:52:4e:2d:
                    6f:66:88:bf:5e:93:39:a7:a5:90:e2:83:8a:8f:32:
                    6d:ea:9d:a0:b2:a8:2d:2c:21:e4:37:b6:07:56:15:
                    88:2e:15:02:e2:7b:a7:d2:ff:f0:8c:57:9a:d8:fb:
                    0a:c0:04:69:99:48:da:f2:53:ef:9c:5b:5b:b6:47:
                    fb:c9:c0:9f:38:25:32:39:c8:a5:df:92:66:2a:8f:
                    a1:07:75:83:5f:28:ec:67:a4:b4:85:6a:ef:d3:64:
                    35:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:89:B1:4A:BA:B1:41:F8:AC:89:C8:C7:44:78:A7:29:CA:29:98:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:a7:be:bc:f1:2a:4e:b4:7f:bb:f0:b4:f6:63:09:4b:fa:
         7e:ac:47:69:bc:fa:e4:fd:7a:3e:b6:bd:30:fa:e3:4b:37:36:
         5e:0d:e1:ca:f6:58:2c:dd:e6:d7:76:8b:e3:38:99:17:7b:60:
         f4:35:a5:13:df:2a:2f:92:32:88:39:fd:b9:df:c8:8c:52:a5:
         c2:53:72:27:98:8b:e0:47:02:7a:06:0d:ac:30:94:a9:7d:aa:
         8c:da:d0:50:ed:d6:27:75:ae:61:1a:37:ea:d7:e3:01:c3:4a:
         54:c9:ef:98:ff:9d:50:c5:e3:5a:62:6b:e2:d1:93:c7:fa:42:
         35:b9:4d:32:0f:f6:bb:b7:89:4d:41:5f:51:f2:f5:1a:1e:4b:
         c5:90:b0:ca:22:84:3f:82:61:53:f7:fa:36:fc:e6:16:74:45:
         a6:71:1c:d3:5e:d7:bb:12:36:87:12:30:d4:d1:eb:ae:9c:af:
         d9:6a:4b:1b:a6:71:2c:56:35:6e:63:7b:a4:07:3c:b5:84:f1:
         66:57:7d:46:43:76:cc:43:63:71:48:c3:53:16:12:ec:f4:50:
         de:96:d3:cd:a5:33:e8:ec:8a:a0:b1:de:2d:e3:78:21:1a:a5:
         60:ba:a8:c0:6a:11:d1:ff:5a:13:5c:d8:b5:29:9e:be:c5:6f:
         e5:50:1c:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNTsMeEg+uS0DsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
NjhjNTQ4OTgtMDUzZS00OTZjLTg1YTctYzNjYTE2M2RkNTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmFK62djTDcmYqvRaPo8PZuZhQyEmQWV9S6H
XZczi1hlMI4aAO+t8adx0uwtZFnZ+Xcw3VIg1jEFksQxSBYDqLTyIapRg2cHdxqL
R9YWjS8qnp35RQAX0SzuAMn67cQQU32csHss+s+Ak+XTHSAamdgauucgZgWKxbqw
CVbSFrBBOyPYRzjQub9iH2g8MhdlyhcBOCVG1xYC9+HILnYD6XtSTi1vZoi/XpM5
p6WQ4oOKjzJt6p2gsqgtLCHkN7YHVhWILhUC4nun0v/wjFea2PsKwARpmUja8lPv
nFtbtkf7ycCfOCUyOcil35JmKo+hB3WDXyjsZ6S0hWrv02Q1/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJyJsUq6sUH4rInIx0R4pynKKZiQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmMwMWVhMzgtZjM3MS0z
ZmFhLWFjYWMtMTRlYTEwNjg5Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnWp7688SpOtH+78LT2YwlL+n6sR2m8+uT9ej62vTD640s3Nl4N4cr2
WCzd5td2i+M4mRd7YPQ1pRPfKi+SMog5/bnfyIxSpcJTcieYi+BHAnoGDawwlKl9
qoza0FDt1id1rmEaN+rX4wHDSlTJ75j/nVDF41pia+LRk8f6QjW5TTIP9ru3iU1B
X1Hy9RoeS8WQsMoihD+CYVP3+jb85hZ0RaZxHNNe17sSNocSMNTR666cr9lqSxum
cSxWNW5je6QHPLWE8WZXfUZDdsxDY3FIw1MWEuz0UN6W082lM+jsiqCx3i3jeCEa
pWC6qMBqEdH/WhNc2LUpnr7Fb+VQHEc=
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:52:05 2025 by rpki-client