Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/df5747e3-08bc-31a5-b2e0-b086a894bfe7.roa
File:                     df5747e3-08bc-31a5-b2e0-b086a894bfe7.roa (raw, json)
Hash identifier:          pG5qVTniB816V08vz4b7kRzzO55qsSGXFx93Dhp9Qck=
Subject key identifier:   42:5E:13:01:62:1E:1B:11:69:B2:25:47:AE:31:D6:D7:53:1A:0A:D4
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62908A4DA894E459BB2D6500
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/df5747e3-08bc-31a5-b2e0-b086a894bfe7.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.58.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:8a:4d:a8:94:e4:59:bb:2d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=49f9a03f-7b64-4c87-9d0a-503098b5c1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:c4:24:b2:53:e9:ff:28:76:49:86:76:f2:
                    a2:8b:3b:86:65:14:38:24:c1:75:c8:5d:3f:79:46:
                    d3:e8:24:a1:b3:16:af:f4:7f:82:84:fd:61:70:a1:
                    c2:57:85:7b:6a:fd:00:0d:bc:26:4c:27:a3:be:ef:
                    c8:09:32:02:0e:4e:7f:a6:8f:81:e5:76:56:d8:f9:
                    f8:a5:a0:2b:df:8c:06:0e:00:48:fc:87:34:a9:40:
                    05:36:70:a4:69:c7:87:48:20:10:8e:e3:ec:0e:63:
                    98:6a:bd:f2:40:6a:88:52:33:a4:f6:ac:28:f6:a9:
                    5b:3f:5f:bf:0c:e2:7e:01:e3:26:92:f2:0f:51:14:
                    1a:03:ba:86:dc:e7:43:95:60:e6:f0:2c:cb:da:85:
                    38:2e:9e:fe:32:36:0d:2e:0a:21:61:cb:9e:fc:ae:
                    6f:16:18:5f:14:64:76:1b:f0:5f:c5:e6:2e:02:53:
                    d0:da:ad:d7:9a:ec:36:51:da:57:c3:8b:25:6a:17:
                    4f:5e:b1:63:f6:86:0b:12:34:41:17:02:93:52:75:
                    2f:c8:36:0b:65:6b:c7:d1:72:91:22:e3:37:70:19:
                    ae:fa:28:d7:2c:61:ab:fe:2f:6f:d9:82:fe:9b:91:
                    43:c6:8f:e4:0e:5b:bb:89:4f:69:73:11:35:2f:93:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5E:13:01:62:1E:1B:11:69:B2:25:47:AE:31:D6:D7:53:1A:0A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/df5747e3-08bc-31a5-b2e0-b086a894bfe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.58.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:84:67:0b:6e:89:93:7b:21:d3:df:de:0d:e9:9a:b1:f6:64:
         75:41:32:de:c4:2d:16:39:48:9b:f5:01:61:44:5b:06:2b:8b:
         3b:45:17:3c:82:1f:f5:37:37:6a:1c:80:fb:04:49:3a:bd:ef:
         38:20:58:1a:8d:ec:97:23:e8:bb:99:b4:6d:b3:4c:4c:fa:d6:
         c3:c9:8e:4c:02:78:93:58:10:ab:d9:2a:00:21:d5:02:c2:6b:
         71:fe:75:d6:7f:8c:c3:2e:6d:f2:01:16:54:e4:e7:29:54:c3:
         60:0b:51:19:74:13:cf:e0:de:ba:f0:48:ef:12:ce:1c:c7:db:
         91:86:82:85:f0:b8:a2:0f:74:c7:50:fb:7b:f8:46:1c:43:2a:
         8f:70:92:50:d0:2b:8b:3a:a6:7e:cc:51:f9:ba:25:95:58:49:
         36:16:dd:1e:4a:04:21:f2:68:15:ae:ac:ee:77:d2:4e:80:d3:
         b0:29:02:02:1b:e3:f3:9b:1e:07:8f:ef:2f:e3:d6:c7:3f:a3:
         28:19:6a:b8:04:f2:01:3c:45:77:70:ff:47:3f:35:20:ea:06:
         ac:7b:54:58:e9:38:15:bb:30:f7:17:f2:f7:c2:c8:a9:eb:35:
         02:d1:1b:b6:ba:b1:e2:c9:50:70:62:40:20:de:f2:05:8e:55:
         80:c5:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:49:11 2025 by rpki-client