Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ce138e01-2b7c-39f2-907f-588cf985c3d9.roa
File:                     ce138e01-2b7c-39f2-907f-588cf985c3d9.roa (raw, json)
Hash identifier:          5wWpECZcVrzdCnWoTDSJIX+yvNwiTxn1VQM7VDWE5Hs=
Subject key identifier:   C2:28:9C:F8:59:A9:67:D8:A3:9E:BF:22:44:27:1B:85:E5:19:B0:F2
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62909C2BE0A9E86278450F48
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ce138e01-2b7c-39f2-907f-588cf985c3d9.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.37.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9c:2b:e0:a9:e8:62:78:45:0f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=e430f7cd-0139-4aa9-ac35-1be74c18f94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9a:af:5c:6d:39:fc:69:64:a2:f6:d6:d0:b0:
                    44:5d:89:4e:21:4d:40:9d:35:54:46:47:ef:6d:c3:
                    15:4d:98:34:fa:95:5d:6b:38:db:81:d4:db:5a:de:
                    40:24:4e:e3:d0:9c:25:32:f9:1e:15:9f:c6:7f:cc:
                    4e:98:a9:07:4d:2f:2c:dc:d7:a5:ed:59:14:34:0e:
                    4b:7f:c5:08:a2:e4:99:1a:0e:c6:46:81:33:c5:2a:
                    b8:97:78:e7:8d:8d:2c:61:27:5f:9c:c1:4e:ee:73:
                    91:03:6e:2b:39:30:23:9a:82:23:0b:c7:51:f7:b5:
                    18:28:fd:b7:41:ac:e0:ca:bd:76:ff:82:11:86:3a:
                    2c:5d:8b:25:91:2d:46:e4:31:d5:2d:a8:9f:37:79:
                    24:e9:61:00:a4:ef:1d:ca:3b:de:cb:24:b7:22:ec:
                    9a:b3:fc:9d:d6:97:4e:89:82:48:a2:75:a5:bd:5d:
                    5a:3a:9c:51:8e:0c:39:41:0f:77:ab:dc:96:77:7b:
                    ae:f0:4c:17:08:38:79:b0:81:f2:b4:9f:aa:ca:57:
                    09:a4:ae:1b:a4:16:5f:88:54:ef:7c:8e:c2:c6:86:
                    ab:97:e3:de:c7:f7:fb:df:3c:f3:00:7a:f3:da:ad:
                    e2:17:d6:37:ce:c1:9f:08:3b:69:6c:75:ad:5e:ef:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:28:9C:F8:59:A9:67:D8:A3:9E:BF:22:44:27:1B:85:E5:19:B0:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ce138e01-2b7c-39f2-907f-588cf985c3d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:80:0e:18:eb:2e:50:b0:18:1e:ff:8e:5b:11:2d:da:00:62:
         af:8e:95:22:a3:6f:1f:72:1d:bf:bd:d7:9a:7a:d3:50:ea:e9:
         38:8c:41:31:6b:9b:ea:06:67:c0:ce:fe:f9:d7:49:2f:7e:69:
         c2:c8:35:45:29:44:bd:0d:07:ab:4b:70:31:7a:ba:f9:90:41:
         55:7f:ea:61:6c:4f:21:ee:ae:fb:43:6b:a5:89:85:2e:32:41:
         00:22:25:79:6f:1f:65:96:48:f9:fa:a2:0d:8f:6e:4b:84:01:
         79:81:fe:d7:0e:4f:ad:74:86:5b:b9:83:d4:41:82:0d:b9:d6:
         11:b6:8d:6b:d5:84:ca:2b:e3:31:a2:17:7d:ad:da:5b:c6:d2:
         b6:bc:15:3b:3c:b4:2d:d1:4d:fd:f9:fe:e6:45:61:1e:6b:93:
         e5:28:53:3c:78:7b:8b:b7:96:ab:33:88:85:d9:ed:f0:59:1d:
         63:af:c1:e4:5f:70:fa:f6:b1:dc:14:aa:31:b1:c8:1e:f2:07:
         bb:b9:ff:fe:d4:54:e5:9b:2e:4f:7d:b2:7e:cc:c1:ce:50:84:
         8e:f4:df:1c:af:5c:a4:95:4f:f9:9d:ac:ed:02:6d:53:b9:73:
         fc:86:ef:a7:5f:5c:2d:1a:a5:fb:80:be:1c:6f:e6:f0:f7:59:
         7b:95:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:23:50 2025 by rpki-client