Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8016833-1a9f-3123-af81-bdd2ececb2bb.roa
File:                     d8016833-1a9f-3123-af81-bdd2ececb2bb.roa (raw, json)
Hash identifier:          xbpkDZq4C5asaAqBkxIiK8PyJb3n8kBB6J4dxp/spbc=
Subject key identifier:   B4:72:F1:34:5D:15:20:6E:17:43:18:86:5F:45:71:DD:12:E5:63:50
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62908E2CA40583EB62475080
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8016833-1a9f-3123-af81-bdd2ececb2bb.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.61.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:8e:2c:a4:05:83:eb:62:47:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=9c8c3716-a03d-4862-863f-f7939e022124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:31:27:de:b2:bc:a3:3b:73:c6:20:74:e8:
                    b1:3f:b9:c1:0d:1d:37:5a:cd:58:ef:31:5c:18:30:
                    65:53:9b:60:fe:28:eb:c8:e7:d5:e2:b2:17:70:d5:
                    79:ea:73:b0:c1:b7:60:11:1b:02:92:46:36:3c:47:
                    e1:4e:19:5b:f3:7f:a8:47:e2:4b:ab:76:2f:a8:5e:
                    13:d7:cf:9e:71:e9:a1:50:c1:c0:31:f0:c9:5e:98:
                    fc:b2:a0:e0:3e:1c:72:78:7a:ee:e4:f4:4c:c7:53:
                    d2:8e:da:9d:aa:74:a1:63:3d:96:22:48:cf:9e:4a:
                    20:aa:79:28:c8:3b:eb:b3:ea:f6:71:2f:ad:0c:f9:
                    dd:9a:d6:9a:41:0d:a8:7a:d4:5d:9f:d9:9d:1e:5c:
                    d1:62:e8:0d:48:07:53:c9:a1:75:dc:ea:b0:66:65:
                    e9:7a:cd:15:ca:c7:4e:50:13:3d:70:09:b0:3d:6e:
                    ef:7b:a7:99:47:25:0a:7f:42:ee:a8:e5:9f:bb:20:
                    08:b6:e3:b2:cc:d2:31:ff:11:a1:f3:50:cc:a5:f1:
                    5e:4d:73:90:73:24:70:ea:a4:96:5c:58:5a:5e:a8:
                    f9:14:46:42:31:48:b4:39:7f:04:d5:bb:64:c6:da:
                    b4:5c:5f:a7:4b:2e:1b:9e:f8:7a:7b:6a:8b:78:9f:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:72:F1:34:5D:15:20:6E:17:43:18:86:5F:45:71:DD:12:E5:63:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8016833-1a9f-3123-af81-bdd2ececb2bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:26:5b:6c:53:c0:2f:1a:cb:52:c9:49:dd:7d:69:ad:8c:
         39:2b:e2:84:dd:ce:6e:ac:00:19:fe:1e:97:ec:c9:c6:60:3d:
         9c:45:6f:ff:3c:94:a1:65:a1:ce:0c:d5:01:cd:0a:b6:a1:81:
         70:a7:35:c8:5a:90:99:29:e5:aa:26:08:7f:14:92:70:97:5e:
         91:2f:fb:78:92:b4:a1:db:85:19:2a:b6:89:1a:3b:18:b5:4e:
         e1:c3:36:29:3c:52:93:4d:5c:7b:fe:c6:b3:c8:c1:c4:96:b7:
         2d:ac:67:cd:ff:50:22:db:42:9e:15:d8:bf:14:bf:aa:52:62:
         ba:ee:12:66:5b:64:13:69:26:73:73:90:d3:93:e0:6e:1b:ec:
         72:08:cf:03:ed:c7:c9:7e:a8:bc:25:07:28:bb:08:f3:16:ca:
         32:2b:41:5b:eb:4f:25:0d:55:e8:16:5e:56:19:54:a5:cc:4b:
         3d:b2:12:16:b0:00:36:fd:1e:78:4b:75:2b:23:55:82:29:c2:
         1f:d2:0f:86:ba:ed:79:88:7d:26:f5:1b:2a:07:4e:cf:cb:4d:
         e2:f9:67:b3:8a:e5:2e:b5:ff:25:5c:c4:a8:58:2d:84:f6:bf:
         c8:d2:8a:54:36:ce:a2:45:c0:58:c7:cb:c1:19:41:c5:a4:94:
         db:e1:6a:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikI4spAWD62JHUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
OWM4YzM3MTYtYTAzZC00ODYyLTg2M2YtZjc5MzllMDIyMTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxkxJ96yvKM7c8YgdOixP7nBDR03Ws1Y7zFc
GDBlU5tg/ijryOfV4rIXcNV56nOwwbdgERsCkkY2PEfhThlb83+oR+JLq3YvqF4T
18+ecemhUMHAMfDJXpj8sqDgPhxyeHru5PRMx1PSjtqdqnShYz2WIkjPnkogqnko
yDvrs+r2cS+tDPndmtaaQQ2oetRdn9mdHlzRYugNSAdTyaF13OqwZmXpes0VysdO
UBM9cAmwPW7ve6eZRyUKf0LuqOWfuyAItuOyzNIx/xGh81DMpfFeTXOQcyRw6qSW
XFhaXqj5FEZCMUi0OX8E1btkxtq0XF+nSy4bnvh6e2qLeJ8EawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRy8TRdFSBuF0MYhl9Fcd0S5WNQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDgwMTY4MzMtMWE5Zi0z
MTIzLWFmODEtYmRkMmVjZWNiMmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADL1JltsU8AvGstSyUndfWmtjDkr4oTdzm6sABn+HpfsycZgPZxFb/88
lKFloc4M1QHNCrahgXCnNchakJkp5aomCH8UknCXXpEv+3iStKHbhRkqtokaOxi1
TuHDNik8UpNNXHv+xrPIwcSWty2sZ83/UCLbQp4V2L8Uv6pSYrruEmZbZBNpJnNz
kNOT4G4b7HIIzwPtx8l+qLwlByi7CPMWyjIrQVvrTyUNVegWXlYZVKXMSz2yEhaw
ADb9HnhLdSsjVYIpwh/SD4a67XmIfSb1GyoHTs/LTeL5Z7OK5S61/yVcxKhYLYT2
v8jSilQ2zqJFwFjHy8EZQcWklNvhanw=
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:28:27 2025 by rpki-client