Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9312de1-5c8b-34c5-9ad3-e4a451935b67.roa
File:                     f9312de1-5c8b-34c5-9ad3-e4a451935b67.roa (raw, json)
Hash identifier:          6OWWYTSJGphJ2hDfe19fsibMFljYUnby0SOeF623gPY=
Subject key identifier:   CB:C9:F5:16:06:70:D3:F5:81:24:3E:F8:B0:59:DE:08:E1:F1:17:90
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D153874F4C986EAA5BC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9312de1-5c8b-34c5-9ad3-e4a451935b67.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.47.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d1:53:87:4f:4c:98:6e:aa:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=50a2c5ae-1e38-4de9-a249-79118544f9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2d:18:c5:02:4d:75:a3:96:47:fc:ad:dc:41:
                    43:da:bb:1b:b1:a8:ac:49:73:8e:44:ad:a9:23:47:
                    e0:3b:20:fe:7b:95:9d:47:19:3c:2f:b9:b6:f8:fe:
                    f4:4d:07:bf:f3:c7:92:3c:f1:ee:a4:46:dc:ba:4b:
                    45:c1:a4:0b:23:ee:2b:69:89:a6:44:3c:28:a7:62:
                    db:b6:52:cc:b3:c7:4e:6b:f9:b1:c9:ac:ac:23:84:
                    10:dd:d3:24:35:67:9b:73:96:a9:3f:cd:3f:f1:2f:
                    fd:50:44:dd:ea:38:4a:28:7f:3d:d4:f6:91:6b:81:
                    81:5b:80:a7:11:9a:2d:54:be:33:43:69:fc:be:a6:
                    dd:f5:a9:4e:9c:8e:69:df:8a:01:2b:2b:c9:ca:ba:
                    b8:46:e4:5f:e7:e2:a5:aa:80:44:e1:2e:08:53:8c:
                    6e:58:ee:05:87:e0:08:b5:d5:73:9f:e4:79:74:d6:
                    9a:60:12:3e:ef:f3:6e:ce:48:62:e6:ea:15:e2:17:
                    db:dd:0b:d3:cd:18:f6:30:cd:63:d9:47:e8:28:60:
                    e2:5b:73:8e:ae:0c:15:48:75:0e:db:3b:c8:ee:49:
                    36:4d:1b:3c:98:da:db:96:2f:18:82:6d:53:ce:6f:
                    cb:a1:82:6e:b7:36:0c:00:aa:18:aa:ba:fc:fa:ee:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C9:F5:16:06:70:D3:F5:81:24:3E:F8:B0:59:DE:08:E1:F1:17:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9312de1-5c8b-34c5-9ad3-e4a451935b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.47.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:df:ca:5f:ac:e2:61:68:6a:12:dc:0b:aa:fb:9e:a0:4e:1d:
         cc:79:53:17:32:3b:3c:d1:c2:17:5e:cc:64:c5:85:34:cc:26:
         55:d7:07:6f:55:a5:24:ff:ce:e6:85:f9:8b:4c:00:b6:22:68:
         28:d7:e8:25:1e:d9:72:af:c7:ef:cc:f7:5f:19:0d:cf:b3:d2:
         ba:58:cc:b3:e2:24:7b:23:02:2e:fb:c9:1c:51:94:79:18:e6:
         05:e9:8b:ea:6f:72:c1:bd:0a:b6:b1:46:79:fa:98:62:9f:5d:
         c8:65:d9:aa:1c:b4:e1:90:f9:be:2f:a4:4a:45:94:a8:40:13:
         fe:94:0a:63:fd:ce:0a:c4:3e:b8:c1:e9:d8:81:17:d5:88:a8:
         d6:85:40:7c:48:dc:09:b0:bc:cf:02:4e:ab:d1:f2:c5:35:a2:
         16:3a:05:17:1e:c7:ab:00:f5:b3:60:bd:e8:a8:6c:57:5b:1a:
         1e:f7:0e:41:82:33:e0:a6:32:f8:71:c9:92:ea:7f:0b:2c:7f:
         59:bf:10:7c:8b:f7:ce:3d:14:44:06:f0:78:01:2e:c4:cc:00:
         32:42:ab:82:c5:a7:f4:6b:9e:b8:93:9f:1c:50:f5:12:bc:82:
         af:5e:36:c7:e1:94:52:28:7f:ae:1a:f5:f3:46:1e:f3:8d:ff:
         63:cf:c1:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdFTh09MmG6qW8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
NTBhMmM1YWUtMWUzOC00ZGU5LWEyNDktNzkxMTg1NDRmOWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi0YxQJNdaOWR/yt3EFD2rsbsaisSXOORK2p
I0fgOyD+e5WdRxk8L7m2+P70TQe/88eSPPHupEbcuktFwaQLI+4raYmmRDwop2Lb
tlLMs8dOa/mxyaysI4QQ3dMkNWebc5apP80/8S/9UETd6jhKKH891PaRa4GBW4Cn
EZotVL4zQ2n8vqbd9alOnI5p34oBKyvJyrq4RuRf5+KlqoBE4S4IU4xuWO4Fh+AI
tdVzn+R5dNaaYBI+7/Nuzkhi5uoV4hfb3QvTzRj2MM1j2UfoKGDiW3OOrgwVSHUO
2zvI7kk2TRs8mNrbli8Ygm1Tzm/LoYJutzYMAKoYqrr8+u6AlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvJ9RYGcNP1gSQ++LBZ3gjh8ReQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjkzMTJkZTEtNWM4Yi0z
NGM1LTlhZDMtZTRhNDUxOTM1YjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXfyl+s4mFoahLcC6r7nqBOHcx5UxcyOzzRwhdezGTFhTTMJlXXB29V
pST/zuaF+YtMALYiaCjX6CUe2XKvx+/M918ZDc+z0rpYzLPiJHsjAi77yRxRlHkY
5gXpi+pvcsG9CraxRnn6mGKfXchl2aoctOGQ+b4vpEpFlKhAE/6UCmP9zgrEPrjB
6diBF9WIqNaFQHxI3AmwvM8CTqvR8sU1ohY6BRcex6sA9bNgveiobFdbGh73DkGC
M+CmMvhxyZLqfwssf1m/EHyL9849FEQG8HgBLsTMADJCq4LFp/RrnriTnxxQ9RK8
gq9eNsfhlFIof64a9fNGHvON/2PPwfg=
-----END CERTIFICATE-----
Generated at Thu May 8 15:49:18 2025 by rpki-client