Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/716ef213-e8a2-34db-b2ca-14228c37f7b9.roa
File:                     716ef213-e8a2-34db-b2ca-14228c37f7b9.roa (raw, json)
Hash identifier:          fWDNjVQyUr1z5pIte1mjbIfJL6QLuNOxwnRHq5Z5iRQ=
Subject key identifier:   00:91:17:9D:3B:FF:44:5D:D0:12:5D:6E:B5:EA:34:FD:50:43:64:B1
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D873B39503C38E76D880
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/716ef213-e8a2-34db-b2ca-14228c37f7b9.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.38.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d8:73:b3:95:03:c3:8e:76:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=ed2d664a-f6f4-429e-960b-d265d6ba79c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:fe:15:eb:7c:e6:9f:2d:c0:f4:de:e3:4d:
                    0f:9d:78:b2:4c:a1:b0:95:a0:0c:39:e2:b8:f8:18:
                    10:77:82:23:a8:a1:0d:59:77:02:c1:e3:5d:6c:8b:
                    19:f6:04:ed:cc:b2:0a:81:5a:fd:10:a6:13:8a:0d:
                    d9:66:8b:81:ab:3b:1a:7b:1d:3a:c3:ce:13:58:18:
                    6e:f8:9e:90:82:35:fd:e7:e9:69:39:ab:aa:ba:13:
                    d4:8d:2a:cb:19:ae:9d:f3:15:c5:59:c0:e0:ea:39:
                    80:f9:43:46:e6:bc:e0:66:12:7a:3e:59:95:8e:d3:
                    0f:96:0e:23:91:c4:2f:43:0c:fb:96:e6:d0:9c:35:
                    28:6f:29:3c:d1:cd:3b:58:c3:ab:ac:0f:35:da:1a:
                    cb:59:52:fc:a5:be:da:4b:aa:be:7a:72:c1:0b:0b:
                    1f:49:79:9d:9a:6f:32:8e:04:2c:31:a7:1d:82:73:
                    15:07:bb:36:76:7a:83:57:1b:48:67:54:f3:0d:2a:
                    7a:45:16:c6:35:27:89:9b:65:dd:7d:2d:95:19:6f:
                    63:35:74:ee:62:c0:74:a0:35:d4:34:91:65:51:d8:
                    6e:63:a7:e0:a7:79:f8:1e:ba:08:df:43:37:06:ca:
                    bb:10:ba:c2:43:d6:ef:38:28:15:08:47:52:c4:40:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:91:17:9D:3B:FF:44:5D:D0:12:5D:6E:B5:EA:34:FD:50:43:64:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/716ef213-e8a2-34db-b2ca-14228c37f7b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:95:ff:52:d9:a8:e9:51:1d:e6:bb:45:29:8b:62:e9:33:8e:
         e4:ec:e9:5d:13:21:f1:6b:3f:42:eb:28:6e:4e:f9:6a:d0:42:
         99:aa:d1:94:d6:5a:96:8c:0c:ab:de:07:43:a1:8e:23:f6:56:
         39:de:51:3e:2a:0f:96:c6:b6:94:d3:f7:ea:cc:b0:e9:73:c5:
         99:8a:d8:3a:df:aa:36:2f:e9:59:3c:06:7f:a6:7c:26:6e:d1:
         11:1a:cd:a7:6e:0a:c7:3f:9f:44:42:93:a9:f2:4e:1f:57:ec:
         24:da:80:08:6c:d4:52:d2:48:43:87:06:58:13:4f:a9:c9:d0:
         55:10:97:db:a6:06:7b:c7:31:dd:d1:0c:37:b3:79:42:f4:8f:
         9a:b6:21:e4:cd:e8:3c:7e:55:aa:7c:c7:8a:62:55:8a:ec:3f:
         a5:24:15:cc:af:60:57:f1:70:13:18:d6:98:cf:a8:72:49:b9:
         ff:cb:2e:f0:f8:35:4e:df:b9:1e:e6:59:da:ce:f7:4f:4a:38:
         5d:fc:8f:f0:95:ca:8d:fc:50:2b:05:25:1f:5f:3c:d8:10:b3:
         be:83:82:ee:ea:65:bb:f2:de:cb:80:ac:d8:26:b3:f0:e7:3d:
         9f:a6:fb:2a:4a:20:fe:e1:a6:8f:be:77:86:14:dc:7b:ea:42:
         fe:81:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:07 2025 by rpki-client