Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa
File:                     f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa (raw, json)
Hash identifier:          fRkbJCRVwfpiUXva2MGRPbDkl4xcgBwv8wAjzVztOI0=
Subject key identifier:   A2:EB:EB:5C:08:29:41:BA:D3:23:E9:F7:04:93:06:37:23:F4:13:2B
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318A30AEDE183F306DA1100
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa
Signing time:             Thu 23 Jan 2025 06:13:17 +0000
ROA not before:           Thu 23 Jan 2025 06:13:17 +0000
ROA not after:            Wed 23 Apr 2025 05:13:17 +0000
asID:                     16591
IP address blocks:        136.35.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:a3:0a:ed:e1:83:f3:06:da:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:17 2025 GMT
            Not After : Apr 23 05:13:17 2025 GMT
        Subject: CN=8b2a0374-199f-4b5b-b56d-6e0f27842e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:21:c8:8f:46:87:06:e2:43:50:29:7b:d2:
                    80:46:a4:78:29:f2:2e:d4:46:24:b8:9b:41:26:42:
                    9b:56:6a:46:99:72:d0:d3:87:82:7d:79:2d:fe:50:
                    a5:b5:51:19:29:17:6c:9b:3b:17:26:fc:1e:74:4e:
                    90:75:98:0c:fb:e1:89:06:16:b0:77:7b:a2:a2:52:
                    2d:16:86:7d:17:a4:61:f8:97:d0:79:86:0d:f8:14:
                    0f:74:08:6a:21:8e:82:ee:27:c3:40:e6:0e:f2:87:
                    96:1c:3c:69:89:d2:76:d6:f9:cd:51:93:e3:95:88:
                    55:11:6b:ea:ac:5a:5c:36:57:69:50:e4:0d:7f:6c:
                    24:64:e5:fa:a0:d2:2a:0e:ff:6a:bc:52:d4:01:ef:
                    a5:15:1c:e1:ac:e6:39:4e:6e:29:9d:46:02:71:bd:
                    58:4c:cd:b6:34:b8:fb:e3:1a:65:8f:62:ee:3b:d1:
                    b3:20:af:c8:4c:9d:00:6a:3e:3d:5f:5b:29:5c:84:
                    71:22:45:ec:4d:8f:e3:55:89:e1:4a:39:de:24:74:
                    ad:c4:3e:cf:e5:83:48:ac:ec:ab:38:91:6e:ab:f0:
                    0c:c0:35:27:57:e4:56:02:7c:a8:7f:22:e0:75:b9:
                    97:2e:bf:77:94:71:3f:f3:3c:35:9d:10:ac:62:1b:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:EB:5C:08:29:41:BA:D3:23:E9:F7:04:93:06:37:23:F4:13:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:db:61:14:a9:91:0d:91:38:a8:fd:34:96:e1:f3:f0:9a:12:
         26:9d:b7:2e:ba:2a:85:2b:0b:f0:6f:16:5b:f4:d8:d5:39:de:
         fc:69:a7:b9:3a:3f:71:b6:57:b7:09:a4:20:5a:d2:ad:fe:ef:
         8e:60:60:e3:92:7e:5f:8f:a9:1e:75:23:61:48:ae:9c:58:12:
         34:69:e3:b6:fe:ec:96:60:e2:f1:9f:ff:05:42:e9:37:ff:f4:
         55:a8:56:1e:97:f8:61:83:20:0d:34:f7:86:16:55:3e:32:e4:
         b2:24:65:bd:d3:7b:08:ef:aa:39:37:db:42:cb:7d:4e:1b:d6:
         11:9e:52:2c:cc:0a:4a:52:48:dc:26:ba:ff:62:e6:9f:ef:f8:
         56:c4:94:3c:39:77:47:0d:3d:68:9b:d8:ea:1c:9d:e0:8e:34:
         81:47:3f:a5:38:ad:a7:a7:0c:95:29:95:33:d2:27:5b:e0:1e:
         c0:8b:a3:9b:17:74:58:3c:a4:19:99:31:0f:ee:25:82:0d:16:
         12:a0:72:ff:06:a9:3f:a4:e9:e9:59:40:6c:4f:62:a1:71:c5:
         b7:0d:ff:d0:04:45:32:4b:fd:08:31:5d:3b:54:8b:78:0e:6f:
         33:e0:3a:ae:3c:bb:d2:4d:3b:20:67:19:b0:60:98:8f:b8:ae:
         c7:35:ae:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:37 2025 by rpki-client