Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa
File:                     d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa (raw, json)
Hash identifier:          djoV2cKsbUtpP5owk4jwLb99pq++UuI9yGSAVSyh0jc=
Subject key identifier:   5E:44:77:B4:07:94:2B:02:70:30:2C:58:03:ED:D6:C2:47:71:3D:58
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D52123B2FE8B121D3B40
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.62.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d5:21:23:b2:fe:8b:12:1d:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=f7b36c97-12ea-4b4d-a121-998d8dc6100f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2e:55:fd:61:1d:8b:11:6e:67:7e:e9:2b:ef:
                    5b:95:b5:a8:d6:15:88:fc:c6:c1:4e:bd:15:95:fc:
                    2d:1a:b0:ed:c2:14:4e:12:af:9c:94:1c:c6:dc:1c:
                    d0:cf:8b:99:21:76:83:38:89:bd:06:95:f1:90:d2:
                    7d:d1:6f:08:6e:68:9c:fc:6b:1e:a3:21:f7:45:df:
                    d8:d6:9b:b5:ea:52:99:7c:75:0e:31:7d:2e:13:be:
                    de:3a:96:f1:01:0d:2d:17:09:cd:6d:b3:33:bf:c8:
                    60:82:d0:fb:4b:cb:84:28:53:57:64:47:f8:4a:9f:
                    b4:55:75:84:b3:eb:15:f9:ac:0a:b5:f4:b1:ee:95:
                    1f:50:a5:a8:9d:5b:59:2f:5a:ab:9c:4b:8a:15:04:
                    e8:71:6b:28:b3:f8:40:0b:a9:dd:0a:45:50:09:4f:
                    f2:12:53:49:ef:e0:8e:9a:cd:fb:69:40:99:bc:93:
                    28:a4:f2:f9:58:55:0a:a2:b6:87:fa:50:07:d3:b1:
                    f7:0a:4c:2b:85:72:2f:7c:2e:38:99:08:f6:2a:aa:
                    f1:ab:50:20:4e:1b:9b:7c:76:08:6f:7b:36:bc:17:
                    a9:14:32:2f:b7:6e:0f:83:76:b1:76:89:8d:cb:bb:
                    33:0b:0a:fc:06:38:3b:13:67:b8:40:f5:ee:84:a5:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:44:77:B4:07:94:2B:02:70:30:2C:58:03:ED:D6:C2:47:71:3D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:da:6a:60:22:c6:23:ec:0b:d2:02:ed:86:b3:95:a4:72:57:
         2a:c9:04:24:e4:ea:da:43:9b:aa:bd:10:f9:c6:e7:39:d8:44:
         5d:fc:8c:6d:4c:c0:64:f0:ef:83:8d:40:29:aa:86:53:46:ed:
         ad:88:eb:f6:6d:c4:db:6a:e9:49:2e:79:a9:60:15:7d:d6:51:
         e5:f6:01:ad:ce:14:80:5d:31:ad:0b:fe:fe:6c:69:03:11:2e:
         1d:63:d9:78:0a:82:d6:7b:55:0d:14:1b:89:60:5d:59:cd:79:
         0e:31:12:60:d9:b3:90:88:ef:48:80:c9:74:81:62:bb:f0:c0:
         f1:3e:42:96:8b:7a:47:da:73:e9:9f:e7:cd:6b:66:0a:55:d9:
         24:48:36:60:01:5a:02:fb:8b:29:6e:d3:75:13:4e:e4:b1:cf:
         40:03:0d:8f:d7:66:f7:2d:73:45:48:af:de:35:fb:da:e1:a3:
         5f:96:2f:f5:8a:79:be:78:88:83:c1:98:4b:2f:90:bd:c0:95:
         43:71:05:0b:e0:1a:68:9b:c0:1a:fb:b6:00:dd:a9:18:86:ab:
         d6:0a:97:11:6e:8c:8b:6a:dd:da:24:09:6f:05:d0:f6:d6:2a:
         27:10:e1:d2:45:6d:ef:0e:64:45:08:51:d7:97:48:c9:10:d9:
         52:69:f0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:31 2025 by rpki-client