Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dd162963-40bb-3447-bf78-f7c3eb7992b7.roa
File:                     dd162963-40bb-3447-bf78-f7c3eb7992b7.roa (raw, json)
Hash identifier:          WMPuQLzpFibnT+u794zfVvBMix9Diht6XIS3ElbD0T4=
Subject key identifier:   31:A3:66:5E:7A:9C:A0:6E:62:8E:F2:36:7E:77:B5:54:82:A0:90:33
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62908E6FD0A25F84BA1F49D0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dd162963-40bb-3447-bf78-f7c3eb7992b7.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.52.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:8e:6f:d0:a2:5f:84:ba:1f:49:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=ac7efbab-28e1-41eb-8c94-c9637addf3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:0e:79:57:86:20:b2:ce:d2:bf:5e:42:b0:
                    91:21:67:7b:14:44:b8:ed:1a:fd:bf:89:f8:4f:b8:
                    5a:34:ba:dd:f3:66:52:46:1a:c3:8e:bb:27:6a:cb:
                    27:c9:7d:5c:41:eb:39:08:68:1e:7f:86:16:40:a5:
                    84:04:66:14:fa:cc:41:c1:03:84:63:22:2d:cc:90:
                    33:c2:33:9b:97:00:f8:a0:05:32:d2:d9:56:87:70:
                    97:7f:8e:b4:ff:86:38:55:37:b8:90:66:69:2e:ef:
                    6d:8b:7e:49:5c:75:c9:41:93:17:30:f0:0b:be:d9:
                    d6:e9:b2:ea:74:07:ca:48:b5:63:fa:6b:fa:59:02:
                    34:42:64:6e:11:3f:b1:19:f7:dc:cd:d5:2d:c2:34:
                    dc:9b:4e:f7:fd:da:a0:90:57:bf:11:ed:1e:98:96:
                    da:17:cf:f3:59:4f:e4:74:ea:42:28:57:00:39:ca:
                    33:9b:4a:31:5d:c2:04:f9:95:df:c7:a1:c6:8b:82:
                    a2:0e:74:ef:9d:cc:86:f8:46:37:fb:88:e3:01:fa:
                    4f:d7:40:27:a9:4a:cb:8f:43:e8:ea:b0:92:1e:dc:
                    af:ec:f8:8b:09:ee:05:cb:2d:64:3e:4b:5c:99:d6:
                    51:6a:da:f8:a7:63:79:d3:ab:4d:75:bd:cd:e8:3b:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A3:66:5E:7A:9C:A0:6E:62:8E:F2:36:7E:77:B5:54:82:A0:90:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dd162963-40bb-3447-bf78-f7c3eb7992b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:8d:37:b5:f2:13:d9:5d:96:ab:c2:76:da:44:5d:08:6e:
         ad:c7:7e:ab:41:53:20:3d:4f:07:1a:c1:4a:35:a7:0c:0f:8b:
         a6:47:e5:54:31:f8:64:37:09:bf:2a:e3:8b:94:91:bb:76:6b:
         ed:19:20:98:39:26:02:52:70:2d:42:00:08:e1:bb:ad:e7:69:
         6a:ef:60:bc:d2:54:36:f8:e5:1d:34:39:2e:f2:42:11:da:77:
         5d:32:ac:40:52:7b:6c:c5:f0:ad:22:20:e9:a6:dd:3d:68:04:
         b7:68:ac:52:c1:72:7e:46:20:95:9c:1f:d6:1b:75:bd:e9:f0:
         ad:11:7d:ad:b7:40:22:14:fa:25:6f:f2:3f:ac:e6:f4:0b:d7:
         21:69:ae:a2:85:57:48:e0:c9:ed:a8:58:36:41:55:f5:a9:e8:
         69:d1:d3:f9:0f:32:a0:f2:d6:31:aa:9a:05:26:e5:21:22:0b:
         9a:0e:48:f9:0c:4b:8e:65:b5:47:6e:0b:ad:6a:63:fe:54:a9:
         8c:93:43:db:59:03:07:fd:85:27:e4:66:90:58:a3:4d:3d:f7:
         59:22:af:20:cc:29:09:21:17:c7:56:a5:7b:48:b7:c1:7d:b5:
         f6:3b:cc:5c:26:ba:64:86:31:4d:c6:3e:cb:28:58:96:fa:89:
         b8:23:3b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:10:17 2025 by rpki-client