Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa
File:                     d5af2629-6142-348d-a1e2-7787336c8706.roa (raw, json)
Hash identifier:          UHureNZjSOhOm5KI5jA4Ap7p1LnwziRInHyUQF3DlH8=
Subject key identifier:   8B:9C:FA:F2:EF:FF:BA:CE:CC:AD:CC:C0:BC:DE:17:A7:FB:D8:B5:A8
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62909A049C80DC16D2530D80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.35.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9a:04:9c:80:dc:16:d2:53:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=d5755c26-148c-44e3-9f95-d6e82732b32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:98:52:9b:8c:cc:23:5c:ab:59:62:fe:ad:
                    98:36:af:77:94:05:7e:95:9f:8a:69:f5:e8:78:67:
                    52:bc:db:42:43:a7:ed:2a:ba:0a:2e:63:f9:23:6e:
                    e7:cc:a6:93:a6:e8:a2:4b:77:d7:05:1b:2a:bf:e8:
                    ff:77:01:82:2e:e4:82:e1:d2:ed:10:ab:5b:05:96:
                    2c:f2:3a:93:26:35:69:a0:93:dd:d1:40:f8:c2:5d:
                    53:93:ab:3b:8b:4b:f3:47:01:6b:f0:d1:2a:4e:65:
                    ea:3f:30:9a:b4:c4:cf:4b:3b:4f:8e:db:c7:a5:eb:
                    f3:21:89:6b:1a:1a:75:71:1d:1d:a1:c6:1f:33:b6:
                    53:4f:73:e1:1d:77:52:06:92:c8:29:21:92:c1:4c:
                    cf:95:86:63:62:d3:1c:c4:97:43:2f:0c:d3:72:c2:
                    f8:8c:99:a7:3e:58:c6:74:ad:73:da:b1:9f:eb:47:
                    36:c7:db:fa:46:82:5a:02:f2:dd:84:89:fc:94:b2:
                    ed:e8:ec:08:0d:84:95:cf:36:c4:7c:d2:ec:ae:a9:
                    19:d6:32:46:88:d8:7e:6e:34:7d:38:1a:66:03:40:
                    0a:31:d6:99:1f:c9:8a:f7:cb:d6:75:67:e0:b0:2d:
                    25:a8:49:d3:c0:c0:e9:6d:21:51:73:a4:5f:31:5d:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:FA:F2:EF:FF:BA:CE:CC:AD:CC:C0:BC:DE:17:A7:FB:D8:B5:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:93:32:71:04:3d:10:ac:4a:80:cb:cb:08:f4:91:d1:a0:
         34:39:81:a7:c5:80:0f:46:e3:2b:65:e1:19:85:a8:e9:8b:9b:
         15:e6:d4:a4:db:d1:67:7d:70:ca:01:4e:2c:5f:f0:c0:e9:dc:
         d4:f3:41:8d:8e:cc:aa:20:ba:e1:ef:7f:1c:29:68:37:1b:f8:
         b9:b9:f5:d4:f1:34:d7:68:0f:f1:2b:a6:6e:46:67:57:0d:c9:
         31:a7:fb:1f:01:3c:f3:2e:85:10:47:c9:f5:8e:32:d0:52:68:
         e6:7a:40:01:e7:18:d1:3d:f9:00:ec:cf:fd:ac:4e:4f:aa:64:
         80:41:5e:ca:54:b7:92:11:44:5f:7b:a2:c6:b2:e6:6e:3e:c8:
         85:e7:56:46:18:19:e4:66:7a:46:1a:bd:a8:66:8e:01:b9:c8:
         ba:8d:b2:6a:7e:df:d3:58:94:0e:a1:19:6a:df:b6:2c:cd:4a:
         17:0a:0f:91:93:bc:18:58:98:92:bc:90:8d:c4:9d:ab:b0:1a:
         a0:2e:38:6a:44:e5:1e:65:04:a6:27:61:6a:73:a6:6e:d2:83:
         71:b6:f8:7e:bf:82:55:a1:67:4d:52:40:23:e1:9f:3a:cd:ba:
         16:25:75:93:93:33:4c:a5:a0:17:a7:b0:a8:d0:ce:01:08:69:
         0c:41:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:17:09 2025 by rpki-client