Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f52b06f5-3629-343c-bb95-0fe8bba70179.roa
File:                     f52b06f5-3629-343c-bb95-0fe8bba70179.roa (raw, json)
Hash identifier:          +UivHGUDWUCYciOcCUfJmkcldFE4g1dbBK4wdiRNrig=
Subject key identifier:   4D:62:DD:64:CE:C1:53:E8:CD:04:AE:33:90:AA:D3:08:E0:3C:97:90
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290D2EE174A250F5F2CD400
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f52b06f5-3629-343c-bb95-0fe8bba70179.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.36.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d2:ee:17:4a:25:0f:5f:2c:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=b39d1050-9d78-4b9f-8424-0b1542f9683c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:a7:6e:6d:0d:09:a0:20:05:36:98:34:6d:
                    99:8e:8b:3d:98:51:8c:22:2c:12:0c:b2:cf:f7:24:
                    58:9e:61:94:18:a2:1a:02:77:c1:81:f6:8b:b4:be:
                    63:d0:a9:93:be:e6:38:0d:ab:13:06:5a:bb:d0:31:
                    75:6b:8e:9a:4e:73:58:1e:92:2c:f3:c1:86:0f:ef:
                    58:af:bd:ff:0d:5a:2d:ca:b0:8f:c7:3e:3e:60:11:
                    64:ab:31:d7:90:53:7d:54:e4:29:69:cf:f4:63:8a:
                    bb:9c:28:f2:22:21:60:c0:e4:15:1d:99:bc:8a:61:
                    e6:97:38:78:7b:ae:1b:fc:45:88:43:7b:42:91:44:
                    36:bd:cd:c0:a6:9a:84:ad:ad:8e:2a:7a:21:89:17:
                    e1:be:99:d6:f0:26:42:4b:82:58:90:64:2a:f9:80:
                    4b:f0:98:5a:cc:91:8a:3a:b1:b4:8a:e9:8b:8d:dc:
                    fa:77:dd:a0:c3:83:0e:d4:89:3e:a6:21:ac:a2:27:
                    94:0a:4d:cd:61:eb:3b:61:28:dd:33:95:00:72:37:
                    52:5b:95:99:7a:cc:00:d8:17:a5:e7:65:2b:aa:37:
                    69:14:96:18:3b:e5:1d:90:ec:7d:47:f2:eb:a6:3e:
                    2e:6b:33:fa:26:4e:39:7c:e6:1d:6c:46:45:7b:5e:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:62:DD:64:CE:C1:53:E8:CD:04:AE:33:90:AA:D3:08:E0:3C:97:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f52b06f5-3629-343c-bb95-0fe8bba70179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cb:ba:c6:52:cc:95:fa:a8:0c:a0:74:8e:85:b4:2a:a7:03:
         8e:fa:49:d1:c7:ca:77:d8:20:f7:20:c4:6a:01:53:24:cd:cc:
         4a:10:a4:96:94:cb:12:41:b9:6e:78:4a:53:a2:bc:2b:15:86:
         e5:43:73:88:7f:f5:ff:5e:a4:e6:94:3d:c6:61:34:f8:cd:b2:
         e5:4b:a5:e3:f4:be:43:4d:cb:d1:f0:c1:3e:3e:09:48:25:da:
         9d:34:83:bb:a0:61:36:a8:48:67:e9:40:31:be:57:a5:74:2a:
         fe:1e:82:aa:02:fb:2a:5f:61:18:48:d0:30:b2:63:e7:03:47:
         9f:66:87:38:e1:22:52:d9:ee:02:6d:d6:1d:5a:a7:af:93:4d:
         4e:59:8e:13:9a:11:0d:39:21:5c:05:e5:2f:c9:18:0a:f7:64:
         1b:53:b1:5f:36:2c:bd:4e:a6:c8:72:e4:1a:0e:4e:61:2f:e1:
         3c:0f:40:23:b0:52:42:2e:e8:57:2f:24:ec:d5:de:29:e3:9a:
         43:0d:6c:2e:be:9d:26:37:e9:a3:19:af:e6:81:a9:1a:d0:62:
         bd:2f:33:2e:f0:3c:14:09:ba:7b:58:55:8a:79:06:40:8f:1f:
         26:a1:11:a7:f9:ef:3f:30:94:d7:99:a7:5f:fd:0e:af:92:9c:
         5c:40:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:32:40 2025 by rpki-client