Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c1c393ae-3f2a-370c-86d7-837b70751534.roa
File:                     c1c393ae-3f2a-370c-86d7-837b70751534.roa (raw, json)
Hash identifier:          +uCJYMOSFOOIZWZb2G5UhSk6ci9PFnlpbzIUogs+eb0=
Subject key identifier:   3F:AB:B4:FD:84:A6:5E:C3:7E:B4:97:22:C3:50:A6:1B:BF:23:FF:25
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290874C65B3446314FC20E0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c1c393ae-3f2a-370c-86d7-837b70751534.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.62.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:87:4c:65:b3:44:63:14:fc:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=51958b5f-dfc8-40e9-97d6-ada3ffaaa4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:38:16:9d:c4:00:88:2f:f6:f5:50:5b:e1:aa:
                    83:9f:5e:a2:ec:e6:7f:e2:5a:01:d4:26:62:2a:d4:
                    26:d9:f4:d5:f4:ff:70:bf:60:09:33:b4:90:c9:c8:
                    f6:f1:8e:f7:4d:27:8c:3c:bc:d4:e2:05:fd:a4:e7:
                    07:13:b6:79:7f:b9:3d:37:20:2e:4a:4a:51:cf:aa:
                    eb:e9:b2:89:de:35:a8:64:f5:9c:13:99:5c:27:39:
                    9c:9f:a5:2c:c0:6f:9d:4b:d2:e3:04:b7:f4:2b:21:
                    cd:6f:f0:e2:89:e6:90:b8:c0:d5:59:c7:eb:91:39:
                    d1:08:a4:fd:4d:c3:55:76:54:47:2d:b9:d1:78:30:
                    9f:5c:92:8b:8e:3a:29:d5:ed:32:15:fb:b9:0c:46:
                    5f:ee:5c:31:37:e0:30:d1:02:38:dc:fb:f6:e4:ac:
                    70:f4:3d:b6:8a:3c:16:25:17:8a:5a:27:09:41:e8:
                    b5:2c:09:5a:26:a7:d5:1e:41:1c:ab:ae:92:8e:5c:
                    2b:6f:f6:07:39:14:89:a7:1c:53:c1:70:26:a2:70:
                    5f:94:a0:9f:7a:b4:8c:93:cb:71:e8:31:71:97:b5:
                    32:bb:7d:4a:fa:22:d4:8d:5d:33:37:1e:e4:19:f2:
                    19:22:29:f9:d0:5a:21:0f:2c:c5:10:b4:90:ff:e4:
                    fc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AB:B4:FD:84:A6:5E:C3:7E:B4:97:22:C3:50:A6:1B:BF:23:FF:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c1c393ae-3f2a-370c-86d7-837b70751534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:36:cf:76:a9:1d:4c:72:19:31:05:99:79:43:74:be:aa:bc:
         ae:67:21:7b:ef:46:95:dc:4b:8a:ea:51:11:7c:e2:3d:01:bb:
         06:b5:52:f4:e7:31:d2:b8:26:df:d6:ca:9b:5a:c4:8e:75:5b:
         69:cd:c7:70:46:19:ba:2b:ab:94:7d:cc:0e:d9:db:7c:47:a6:
         5e:3d:b7:65:a6:c5:fa:41:f4:14:90:7a:5b:62:e2:78:50:42:
         04:a0:5c:26:29:01:60:23:c0:e3:42:b5:10:aa:be:ed:df:0c:
         0e:52:f4:7a:17:17:71:17:77:d2:b5:5f:f5:68:bd:53:7f:8a:
         5a:b8:c4:bb:a4:07:12:e2:84:5c:82:b0:9c:f1:a9:bb:70:65:
         f5:c2:0d:9f:6e:89:9e:18:5e:32:5b:4c:84:a3:46:61:a8:f4:
         09:5f:21:67:01:87:c5:d5:da:a2:f0:91:f0:85:55:21:86:63:
         24:e7:86:16:a3:2b:0d:60:82:af:3c:af:25:a0:a7:ef:36:a5:
         50:3d:28:72:ef:66:25:a3:39:f0:40:48:06:32:25:01:b9:35:
         63:00:b8:95:58:a8:cd:86:51:51:1d:8c:a2:93:69:50:5a:87:
         b3:3e:ce:37:53:12:fe:a5:c7:a4:dd:f1:a1:04:58:61:36:b6:
         6c:35:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:26:41 2025 by rpki-client