Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eb806ee2-a2a6-3496-9d22-6d8021915f52.roa
File:                     eb806ee2-a2a6-3496-9d22-6d8021915f52.roa (raw, json)
Hash identifier:          j0GZZfMkTLwsNlr84n7oDbb3nXlw0esY7Y6Upl1HhzE=
Subject key identifier:   93:EB:FC:A9:7D:12:F3:9D:EC:59:C1:4D:9A:67:59:BE:F9:F9:DE:70
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318B19FDF3786C2B1A5E200
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eb806ee2-a2a6-3496-9d22-6d8021915f52.roa
Signing time:             Thu 23 Jan 2025 06:13:24 +0000
ROA not before:           Thu 23 Jan 2025 06:13:24 +0000
ROA not after:            Wed 23 Apr 2025 05:13:24 +0000
asID:                     16591
IP address blocks:        136.36.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:b1:9f:df:37:86:c2:b1:a5:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:24 2025 GMT
            Not After : Apr 23 05:13:24 2025 GMT
        Subject: CN=4457cb26-43f4-4848-be13-ecf5ab279102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:96:df:2a:d5:8e:ec:30:8d:15:64:f8:6c:
                    d9:ac:a1:62:e2:b8:67:a6:cb:4c:58:f6:74:f7:6b:
                    28:d0:da:eb:2e:54:d7:47:0b:a1:f6:e9:d7:e7:bb:
                    71:5c:36:bc:53:71:e2:12:f9:7b:0f:b4:26:0d:b6:
                    1c:3e:4c:75:82:e7:9d:31:77:8d:64:8a:13:10:87:
                    e3:56:27:bb:c7:c4:55:57:dc:d0:2f:b1:db:5b:df:
                    3f:ce:aa:00:fb:f0:69:fb:96:08:8c:95:86:32:a1:
                    e3:fd:48:90:ed:b6:db:04:c0:a0:c7:1b:b2:0e:cc:
                    34:fe:3f:10:79:41:7c:3c:67:cd:97:8f:73:61:d6:
                    96:75:60:73:de:9b:ab:d2:46:96:4c:b8:fe:73:a0:
                    0c:06:23:9f:10:6a:25:32:75:85:5c:b1:7a:3b:d9:
                    7f:19:cc:44:47:b4:aa:c7:b7:1c:8b:e8:e1:cd:bd:
                    05:41:ff:1c:8d:5c:26:57:be:0c:98:70:33:9f:82:
                    04:83:91:75:7c:f6:57:9b:f7:c6:4e:38:91:79:05:
                    d4:e0:e0:6b:18:9b:cd:16:51:1c:81:72:c5:f0:b3:
                    cb:4d:90:d0:7d:d7:1b:01:06:fc:df:22:43:fe:1a:
                    b9:1a:a4:36:26:e1:ae:a0:24:12:c0:71:2f:5f:05:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EB:FC:A9:7D:12:F3:9D:EC:59:C1:4D:9A:67:59:BE:F9:F9:DE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eb806ee2-a2a6-3496-9d22-6d8021915f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:34:22:83:b8:75:d7:da:df:af:6f:f1:d0:11:95:c7:c5:ba:
         5f:f2:03:9e:5c:01:9c:95:9f:78:3b:22:b0:22:cb:aa:72:8d:
         ab:c6:73:ac:fc:13:dd:9d:3c:47:47:0e:51:1c:a4:12:bc:7a:
         9a:70:f2:dc:90:68:c7:2b:1c:03:f7:96:ad:c8:6e:01:4f:b3:
         3b:02:e8:cf:4a:cf:f1:8b:2a:c0:14:dd:6f:c8:d6:eb:a2:72:
         3f:93:f1:2a:61:5a:bb:8b:2c:e1:25:52:da:a2:e4:dd:2a:33:
         44:c4:01:28:1f:14:7d:c2:01:9d:86:ad:f4:62:e3:fd:e4:16:
         4b:cc:53:46:2f:95:6e:7a:1d:2a:07:c8:7b:95:39:00:ec:b0:
         f6:8c:f4:5a:20:90:79:0f:45:76:4d:04:04:38:d7:39:36:df:
         d7:b5:d0:bc:5a:7d:31:b8:0c:c6:48:94:3e:93:c9:65:ee:05:
         e3:f1:7d:f7:c0:71:a4:11:4f:15:26:7c:f2:b4:64:d7:55:fb:
         96:85:4b:48:5c:f5:9a:ed:41:dd:ae:a0:09:6c:88:ee:52:19:
         06:bd:29:da:20:f3:2d:e5:65:16:bb:40:62:6f:3c:0c:3e:b6:
         b3:7c:e5:7c:de:19:9b:f5:4c:bf:15:a5:4c:17:09:59:6a:c2:
         51:88:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:45 2025 by rpki-client