Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dec63a8d-4b43-3b1a-83c9-84d1b0231410.roa
File:                     dec63a8d-4b43-3b1a-83c9-84d1b0231410.roa (raw, json)
Hash identifier:          FOXqlZJX0q5lLWm5sF8S/cj7D5kEeQ6AyZehJl4oUWY=
Subject key identifier:   9B:37:9E:69:F7:75:91:80:38:01:12:4C:17:16:64:D9:39:2E:68:46
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290CFF728955F472C2CA000
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dec63a8d-4b43-3b1a-83c9-84d1b0231410.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.59.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cf:f7:28:95:5f:47:2c:2c:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=5b110013-aa70-4a7e-85ef-189f3b79b78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:50:4b:d8:56:78:81:f2:69:8c:80:c9:df:
                    0c:36:8a:5c:3b:92:36:de:1e:dc:06:96:25:ab:2e:
                    1f:c8:1d:70:7b:f7:7e:0a:6a:fe:d1:df:0a:5a:f4:
                    e3:2d:0b:0f:74:c0:bd:2d:a0:73:39:3f:11:8a:b7:
                    d0:79:cb:66:7b:5f:bb:ec:0c:4a:c6:ab:8f:37:4e:
                    c1:ec:d4:28:99:cd:e5:98:bf:3f:02:ee:4c:14:ae:
                    92:f5:ba:5c:6f:84:f6:64:76:00:58:64:1b:6f:9b:
                    88:f5:d6:74:d8:ca:b0:41:e0:d8:1d:51:9a:87:ff:
                    5d:26:28:0d:cc:3c:96:19:cf:4e:ce:1a:ed:a4:2b:
                    f7:a5:29:24:6b:72:c7:d7:ff:db:4b:ee:c4:6c:2d:
                    14:6b:91:f8:a5:7a:20:44:14:73:96:96:aa:92:b8:
                    0a:dc:11:97:bd:43:6e:cf:93:95:0b:2f:a0:d1:10:
                    f9:38:db:d4:3f:0e:44:c3:b1:12:bc:9e:2e:1f:7d:
                    52:86:ce:da:4f:6d:da:4b:38:67:79:eb:f3:54:fc:
                    a1:a0:9f:80:d8:b9:d9:a1:a2:60:d9:0a:37:bb:cd:
                    ed:95:2b:f4:5b:4d:67:0c:4d:33:c6:16:95:c8:b8:
                    de:5e:90:47:cb:59:f4:5a:d3:74:32:bf:74:f1:68:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:37:9E:69:F7:75:91:80:38:01:12:4C:17:16:64:D9:39:2E:68:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dec63a8d-4b43-3b1a-83c9-84d1b0231410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.59.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:d1:91:19:c3:f6:29:d3:73:90:ac:88:bc:06:51:9a:a8:
         1d:44:4c:92:8d:dc:6b:5c:58:6e:6b:12:9e:ad:ec:ff:1f:ff:
         87:42:70:68:20:c5:92:6b:da:6b:c4:8c:f0:56:d5:68:d8:7c:
         df:95:27:d7:87:90:66:d4:59:bc:1b:3a:2a:64:e2:03:dc:ea:
         a1:6c:8f:36:25:75:22:59:0c:24:9b:21:a1:e2:81:7d:71:d7:
         d9:ec:99:ec:25:57:52:d9:08:61:a4:7b:f6:d2:4c:c3:21:42:
         f9:ff:af:50:8b:18:1b:dc:f6:3b:b0:a2:12:2c:cf:a9:c9:e0:
         ab:b1:64:6b:35:82:95:c6:e9:d2:56:ab:85:2a:2b:fb:e8:ea:
         26:7c:d1:76:ec:08:79:77:f5:dd:95:84:45:d0:b0:b6:68:4e:
         9b:ef:6d:21:8f:c6:32:8d:99:c8:d5:09:ee:63:fc:a4:8a:f0:
         65:33:32:b9:be:de:eb:48:b7:47:b9:5e:f6:4d:29:5b:0b:04:
         2b:db:71:52:1a:27:9b:a2:bc:3d:55:5b:0c:12:15:09:91:88:
         d2:c5:36:f8:b2:d7:b0:32:2b:df:27:3f:e4:3b:b9:7d:36:4c:
         a5:ca:96:81:36:8d:71:77:5a:f5:bc:95:6a:74:c3:d9:b6:3c:
         77:8a:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:31:24 2025 by rpki-client