Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa
File:                     c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa (raw, json)
Hash identifier:          87KIbMr74KIjx+49SNXFhQIDPmx5QVghD1Hy5EoNAWQ=
Subject key identifier:   43:05:31:8D:E5:C7:DB:BC:70:A8:DB:D0:F2:F3:29:C6:A7:1E:48:97
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290C86408573BD535DE0618
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.34.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c8:64:08:57:3b:d5:35:de:06:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=d5a80473-82c9-4964-95e8-8e1588010d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:fa:53:eb:94:05:c7:76:cf:8f:70:af:64:
                    bf:f7:dc:a3:5a:65:60:9d:e4:8f:4d:d7:ba:d9:da:
                    f9:2d:17:fd:d9:9e:ff:c4:36:4c:de:06:f7:df:92:
                    80:98:82:33:2d:95:4b:79:0c:4e:3b:f1:86:1e:b8:
                    9b:7f:f5:c3:3a:d8:a8:89:d8:59:bc:ff:49:2e:5a:
                    18:fd:63:32:ef:c3:33:e9:45:d3:e4:5e:23:1a:51:
                    e2:6a:58:f2:f8:4a:84:f6:a3:92:71:f8:5b:d8:0f:
                    1e:22:6c:f0:a0:79:1f:c8:e6:8b:08:99:5e:95:aa:
                    09:cc:04:f9:69:b6:59:8b:05:a1:e6:c2:b3:e2:e3:
                    a3:12:e3:04:39:12:4b:df:1a:3d:cf:58:f0:f7:e4:
                    9d:ee:70:ea:0c:ee:2c:b0:eb:42:25:9d:25:04:75:
                    4a:bc:06:71:8e:8e:1c:ac:06:ca:b1:72:d5:60:80:
                    71:37:a1:5c:a5:0d:95:91:16:cd:90:00:e3:36:d0:
                    50:44:a0:ff:1c:3b:e7:31:4a:a2:84:62:1b:b0:55:
                    bd:e6:4b:71:f4:ba:a4:f7:36:8d:b3:5e:57:ba:9a:
                    cb:5e:9f:f3:da:02:d5:69:fd:f1:15:32:3f:f6:23:
                    75:59:c6:33:c7:c4:21:5a:05:9d:f1:b6:27:ff:5e:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:05:31:8D:E5:C7:DB:BC:70:A8:DB:D0:F2:F3:29:C6:A7:1E:48:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c715a458-b42a-3dbf-b8d9-ddab2cf90a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:b8:ba:dc:d5:30:b4:8b:fd:ae:48:c9:32:18:90:34:07:
         14:b2:d1:44:e1:24:1b:22:05:28:1c:70:44:df:1e:8f:c2:0e:
         c3:72:8b:a2:f9:83:f8:f2:56:9c:37:20:da:65:13:8a:b8:6a:
         d3:df:55:c8:a9:8a:89:b3:2e:fc:1b:81:d7:d0:bb:c1:5d:66:
         0a:2e:9b:76:ec:13:01:0c:f1:10:b4:f4:a0:34:06:32:eb:5c:
         78:b2:27:66:97:9d:3b:f5:df:5c:f1:aa:bc:15:0d:c2:69:57:
         72:ac:63:3e:7c:75:15:2c:8d:88:04:b6:a6:db:db:44:d7:f7:
         d6:11:da:5a:36:9b:bc:7c:73:6d:ff:a8:59:ab:2e:b0:c8:bf:
         c6:8b:46:84:bf:c0:30:04:b1:aa:89:9f:ff:60:28:85:dc:89:
         c3:e3:3d:0e:4f:e7:6d:62:e6:d8:b6:e9:46:b3:ce:77:63:b5:
         4b:a3:e2:9a:cc:5a:2a:ce:c4:dc:b8:ed:dd:bb:b0:fe:a7:43:
         c0:90:5a:d9:73:a1:43:95:99:89:ef:48:2a:78:f6:37:1a:a3:
         d3:f2:d3:9f:0f:66:b8:e7:33:d6:18:91:4d:13:59:a9:0a:4e:
         f6:7e:09:89:09:bf:01:38:0d:46:cf:6c:6a:b5:db:36:10:f2:
         8f:bb:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:16:48 2025 by rpki-client