Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa
File:                     fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa (raw, json)
Hash identifier:          PkXZpPUWjrKtuDkW+mPb7HXWaBjzYx+2XQY6wSdynTU=
Subject key identifier:   9E:34:7A:24:F7:C5:DE:F1:87:E1:C5:D8:CC:9A:41:21:0F:42:4E:D5
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A629098877C2B112D497BD180
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.35.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:98:87:7c:2b:11:2d:49:7b:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=9d8ce8c2-937d-4fcc-b24e-2f7d0b49f15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b7:26:18:33:c0:2a:f5:f4:08:d3:26:62:ec:
                    00:a4:b8:2f:21:fd:e8:f9:41:90:d1:7f:fa:90:4d:
                    3e:3e:6f:db:76:a8:7c:af:5a:05:f2:74:69:87:ed:
                    af:67:d3:99:00:ad:81:68:76:91:58:fd:c4:87:60:
                    08:9a:f9:28:fc:ac:cb:a3:fd:cd:f1:3c:93:58:c7:
                    6d:0a:8c:4e:fa:ed:40:f0:df:35:01:fb:9e:70:99:
                    63:f5:38:91:e4:68:ac:53:ac:87:99:01:42:b0:ad:
                    1d:51:8a:7b:c4:7f:60:95:a2:72:23:66:69:c5:69:
                    cf:83:0f:d9:54:bb:23:16:5d:0c:cf:a2:a6:8f:ef:
                    2a:ab:81:bb:ac:3b:6a:73:97:e3:6a:48:27:5b:1b:
                    09:57:ca:27:00:20:39:80:5e:a1:23:65:a4:fb:b4:
                    45:c0:b6:ba:5d:23:92:e2:ba:a3:fb:b7:37:76:40:
                    f7:d4:70:4b:28:4f:e6:9b:b0:6e:68:e1:df:e4:e8:
                    ac:f8:e8:1a:fc:99:7d:7c:fa:a3:fc:62:3e:74:46:
                    a6:0d:da:08:4c:bf:b2:e9:e2:0b:2a:47:5a:95:41:
                    a7:2b:a1:97:92:75:46:57:a5:07:fa:8f:ec:0c:de:
                    73:e5:8c:aa:c9:5c:2c:26:33:00:0a:6f:ab:e1:08:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:7A:24:F7:C5:DE:F1:87:E1:C5:D8:CC:9A:41:21:0F:42:4E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.35.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:51:4e:6e:3f:be:68:72:95:b5:3a:d1:5b:86:79:79:9b:29:
         c6:8c:97:cb:84:fa:13:f8:39:fc:f4:53:68:73:28:71:2a:90:
         0b:b9:e5:e7:69:97:9c:7c:48:2f:20:5e:d6:da:6b:dd:2d:73:
         25:9c:bd:6f:d3:49:ae:52:42:35:fd:56:2d:44:fd:5f:e2:62:
         be:ff:e6:0c:fa:26:16:45:e8:4a:5e:7b:d3:ca:db:fa:c9:d5:
         19:9e:d5:64:fc:a0:47:51:aa:f6:30:3b:3b:ff:e4:63:26:57:
         3d:08:37:19:bd:2e:15:86:99:46:74:99:10:0e:38:4b:82:7a:
         48:64:d7:51:0f:ec:69:4e:dd:28:e1:e4:ee:86:b7:7b:58:c7:
         76:4b:5c:91:87:7a:4e:51:16:77:76:59:69:54:1c:4f:bb:b9:
         ca:04:21:31:c4:df:1a:9c:98:58:40:ed:76:e4:06:30:67:ac:
         38:99:c1:58:c0:d2:48:b5:08:35:19:6d:5d:50:d6:06:e3:e8:
         cc:1e:4e:07:7b:6f:f3:e1:9c:b4:fd:b1:c6:86:00:b6:1b:e0:
         b9:03:82:4b:f0:ac:c5:3f:21:fa:14:e6:74:99:8f:09:fa:d9:
         49:ab:21:c9:9e:43:79:89:59:ca:03:d7:eb:b1:74:29:1e:bf:
         cf:5f:f1:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJiHfCsRLUl70YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
OWQ4Y2U4YzItOTM3ZC00ZmNjLWIyNGUtMmY3ZDBiNDlmMTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAircmGDPAKvX0CNMmYuwApLgvIf3o+UGQ0X/6
kE0+Pm/bdqh8r1oF8nRph+2vZ9OZAK2BaHaRWP3Eh2AImvko/KzLo/3N8TyTWMdt
CoxO+u1A8N81AfuecJlj9TiR5GisU6yHmQFCsK0dUYp7xH9glaJyI2ZpxWnPgw/Z
VLsjFl0Mz6Kmj+8qq4G7rDtqc5fjakgnWxsJV8onACA5gF6hI2Wk+7RFwLa6XSOS
4rqj+7c3dkD31HBLKE/mm7BuaOHf5Ois+Oga/Jl9fPqj/GI+dEamDdoITL+y6eIL
KkdalUGnK6GXknVGV6UH+o/sDN5z5YyqyVwsJjMACm+r4QgVqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ40eiT3xd7xh+HF2MyaQSEPQk7VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZmMyZGNjNmItZWJhMi0z
ZjI2LWI2NDktZjFkZmFlZGViZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCNQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNRTm4/vmhylbU60VuGeXmbKcaMl8uE+hP4Ofz0U2hzKHEqkAu55edp
l5x8SC8gXtbaa90tcyWcvW/TSa5SQjX9Vi1E/V/iYr7/5gz6JhZF6Epee9PK2/rJ
1Rme1WT8oEdRqvYwOzv/5GMmVz0INxm9LhWGmUZ0mRAOOEuCekhk11EP7GlO3Sjh
5O6Gt3tYx3ZLXJGHek5RFnd2WWlUHE+7ucoEITHE3xqcmFhA7XbkBjBnrDiZwVjA
0ki1CDUZbV1Q1gbj6MweTgd7b/PhnLT9scaGALYb4LkDgkvwrMU/IfoU5nSZjwn6
2UmrIcmeQ3mJWcoD1+uxdCkev89f8f8=
-----END CERTIFICATE-----
Generated at Thu Jul 10 01:30:52 2025 by rpki-client