Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa
File:                     96c60abd-645f-326f-b5a5-66908173a9c0.roa (raw, json)
Hash identifier:          OuVHTc49ZdcxLd1Fk4U57zyuRksoD7dxmabhGehtdVU=
Subject key identifier:   DF:1D:3A:06:41:FD:09:21:EE:02:AD:EB:8E:89:50:A7:64:1A:6D:26
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A936B55A56DF518FE712C7C80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     16591
IP address blocks:        136.52.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:55:a5:6d:f5:18:fe:71:2c:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=5f1b325e-1ef8-42e3-9889-8793985132b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:41:ac:64:d0:00:fe:85:9f:92:d3:66:86:
                    28:ca:0a:e7:46:cf:10:82:7c:38:b9:68:f3:89:d0:
                    16:de:93:d4:3e:27:02:4f:0b:d4:0a:dc:94:87:16:
                    ba:80:06:a5:54:b5:1c:4a:df:19:e5:41:1f:98:c9:
                    a6:23:76:d6:a5:54:b6:47:a6:d5:48:2e:a4:00:dc:
                    53:03:ac:dd:8f:ea:25:4b:46:cc:cc:9b:cd:84:57:
                    41:23:d9:f3:de:3e:a8:68:21:fc:28:32:41:ed:4f:
                    43:9d:3d:b8:e9:39:76:31:2e:2e:ae:a9:71:e9:73:
                    2a:73:00:0e:cd:c7:10:c1:9c:b7:1d:b8:67:2e:e0:
                    c4:b0:68:5c:45:fb:70:32:1e:03:0b:cd:5c:8b:18:
                    fb:8f:55:84:f9:61:93:2f:4b:33:86:a0:19:8d:cd:
                    cc:21:41:1e:1b:15:68:23:71:20:b4:54:c1:42:4d:
                    fd:e6:b9:8c:95:e6:b4:b8:51:bf:45:7c:59:2a:dd:
                    eb:23:05:03:e7:34:39:22:89:33:a7:52:7c:8e:b8:
                    28:18:d1:39:26:91:e2:41:fb:a3:8c:fc:95:66:bd:
                    de:a3:45:ea:07:d3:99:9f:6b:92:b8:0c:02:7a:36:
                    d0:ca:09:48:45:88:13:ea:b5:d8:37:c0:57:10:37:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1D:3A:06:41:FD:09:21:EE:02:AD:EB:8E:89:50:A7:64:1A:6D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:56:0c:f6:42:d8:0d:6f:4d:55:54:f8:78:be:a5:c0:29:
         83:af:38:f0:d9:dc:aa:54:8f:bc:0b:99:6d:f7:75:9e:74:ba:
         69:38:eb:bc:d5:39:ac:2c:8b:06:79:19:7f:c0:0f:e2:70:a3:
         1e:9f:8d:cb:fc:8d:07:bb:93:cb:21:86:6d:d1:6d:dc:3a:d3:
         ef:17:22:01:c1:41:2b:ca:1e:94:b4:f1:8f:79:77:97:d5:6b:
         2a:d2:32:3b:3d:dd:12:d9:08:82:50:fe:a8:9a:02:b2:6d:d2:
         cb:f3:54:46:bd:4a:a7:fb:ce:8a:01:06:1d:bd:dc:5d:d1:e1:
         68:71:cc:ec:74:99:d6:47:31:5f:2f:9e:ba:84:9e:24:33:61:
         b9:2c:f8:73:46:e5:1d:11:62:d6:af:71:26:00:9b:82:fa:64:
         f6:1e:e5:1a:ee:5b:c2:07:50:b2:12:2b:b3:e6:f9:ce:f6:94:
         16:5e:6e:be:94:d5:91:2f:d1:b7:8b:fb:28:bd:02:7b:23:bf:
         0f:9d:b7:85:33:84:2f:3c:a9:8e:6c:57:ad:d4:11:d6:a8:1b:
         90:4a:77:16:78:f9:12:07:de:2e:a9:70:20:7e:c7:00:96:fb:
         3a:b2:52:d6:d2:bd:7f:d6:ff:a1:22:b5:cd:7b:ae:41:6a:e9:
         21:d1:d9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:03 2025 by rpki-client