Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
File:                     f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa (raw, json)
Hash identifier:          LNF37kp2l9AR/2uMo9IVRn3177rwYRkqrvWKqGLcoog=
Subject key identifier:   85:DB:7D:7C:E3:23:54:90:E0:44:2E:2E:A0:BD:EB:A9:C7:B1:29:71
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A62908386ED3CA7869023D540
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.33.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:83:86:ed:3c:a7:86:90:23:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=247071ae-ca03-4d14-85cc-97183084600d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a5:db:ce:94:b8:5d:d8:74:a9:55:9d:de:f7:
                    5a:61:28:4a:df:c6:32:22:5e:77:0a:68:3b:52:20:
                    57:46:a8:c1:2f:06:0f:e2:c5:af:ce:ed:63:fb:ce:
                    fa:86:41:0e:a8:85:d2:d0:a3:36:85:8b:7c:09:aa:
                    92:c8:23:1c:de:ab:b3:27:7b:67:6c:e4:76:d8:f3:
                    a0:15:ee:fd:4d:a3:df:a6:73:c2:a9:eb:f4:45:aa:
                    b4:c3:5c:d3:e2:4e:74:f7:ad:35:d6:f9:61:f8:92:
                    b8:3f:1a:ae:08:12:75:24:3e:7c:ba:80:72:0f:4e:
                    9b:a9:00:cb:ad:76:f8:b4:01:b0:45:d1:c6:38:e7:
                    3f:0f:41:08:5b:ef:6e:03:4b:51:d2:27:bb:62:b1:
                    a7:fa:e3:22:ee:75:84:18:9c:f1:6a:af:8b:fb:cf:
                    b4:a5:61:dc:19:99:a6:1b:ea:37:f4:a1:f7:c5:2d:
                    dd:7f:61:60:93:7a:7d:c0:67:96:e7:2f:4d:35:91:
                    28:2b:01:b9:3a:19:ff:7a:cb:99:06:34:f4:ce:5d:
                    6d:4b:7e:08:48:3c:70:82:6b:de:c8:b7:85:79:99:
                    0f:1f:31:cb:c9:8c:50:85:3f:67:1a:e3:87:b2:f4:
                    14:3c:53:dd:7e:12:df:89:ff:a4:72:de:83:81:50:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:7D:7C:E3:23:54:90:E0:44:2E:2E:A0:BD:EB:A9:C7:B1:29:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:7b:1f:06:72:99:73:ab:b5:23:c6:9f:c4:b5:97:ab:9c:47:
         4b:a2:ac:1f:99:c7:45:d5:b1:5b:1d:f3:87:02:85:8c:41:70:
         dc:6e:3a:18:d1:f6:c0:90:e3:ab:fa:ae:d5:5d:76:4a:0b:9c:
         41:4f:ef:4b:33:82:80:b9:91:18:fb:14:f9:c7:ce:03:ed:c1:
         f4:2c:36:fa:e3:2c:5a:e7:60:69:1a:3f:08:fc:7a:bb:d4:f8:
         70:2e:14:57:27:16:a6:91:7b:0b:e4:7b:ab:59:44:96:03:e3:
         7c:07:c7:7b:7d:4f:69:2a:2e:c5:7c:5b:ed:6b:89:d9:33:c1:
         a1:7c:b0:ce:e6:49:03:c7:eb:c6:59:30:27:1e:58:82:ff:74:
         0d:07:08:dc:96:8c:ab:c8:2e:b9:b0:25:7e:4e:ff:76:20:24:
         88:94:b6:02:94:8b:48:e2:0b:ae:ac:8c:f9:85:6a:f5:df:fa:
         f6:1c:b2:9f:f5:f3:61:c5:cb:75:41:4f:3c:9a:d5:6a:58:5b:
         15:86:7b:44:24:c1:8c:45:b6:4b:0d:7d:30:d2:0c:c2:73:dd:
         b1:f7:f1:15:cc:0c:4f:26:5b:13:b9:cb:e9:5e:9d:db:1a:91:
         da:87:7a:cb:71:1b:e1:5b:f3:d8:fd:0f:2d:20:35:db:82:20:
         4f:17:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 13:51:28 2025 by rpki-client