Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/132942f7-62fd-3f1b-ac0d-0adc82cf43fe.roa
File:                     132942f7-62fd-3f1b-ac0d-0adc82cf43fe.roa (raw, json)
Hash identifier:          /81V+ctC18g6vHDgmuCBqp08Ixy0+qifmns3O+u2atU=
Subject key identifier:   FC:C6:F0:B5:E7:D5:6F:ED:5A:F5:C0:A8:55:F6:D0:65:0E:56:13:B2
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C51F4A8C1CAEF8DC53080
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/132942f7-62fd-3f1b-ac0d-0adc82cf43fe.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.32.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:51:f4:a8:c1:ca:ef:8d:c5:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=0483ed16-4f93-42e6-897d-fbfb55c2fe76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:87:9f:50:ae:68:80:19:98:33:19:9b:65:
                    fc:fe:7e:8b:af:44:6d:d9:54:06:b4:bb:e9:84:db:
                    65:40:1f:5a:bf:38:07:51:ce:1e:28:67:ca:73:61:
                    42:02:b0:d6:8d:38:2d:62:c7:dd:7d:5d:21:aa:cc:
                    21:38:b1:d9:8e:ab:89:47:fa:15:0d:68:9a:51:f1:
                    68:12:27:07:1c:b0:df:84:0a:92:5a:0d:a6:b9:a6:
                    df:ea:31:cb:bf:74:83:42:64:79:0a:06:97:25:02:
                    1f:20:56:a9:27:52:37:74:62:c4:75:0e:67:2e:40:
                    3e:f6:5c:9f:77:02:2c:f1:d6:62:63:02:bb:ec:6d:
                    2d:fb:ba:29:82:9d:c4:a2:40:d5:59:3c:e2:f4:a8:
                    eb:8f:15:b6:1c:79:65:df:56:dd:54:4f:4b:98:77:
                    e4:9e:37:47:09:4c:a4:fa:3a:e7:3e:c6:38:bf:dc:
                    d7:20:60:f7:51:08:82:95:60:42:f7:67:d3:2a:1c:
                    22:9d:b1:cd:e3:26:f2:10:a8:9b:ef:7c:8d:e6:be:
                    3b:1c:b9:2f:10:bc:93:b4:3d:44:e1:ed:13:bf:27:
                    04:b7:11:34:1e:cc:e7:f5:70:78:fd:60:35:92:ea:
                    b6:37:13:e8:2e:00:06:76:af:b3:b4:dc:98:f0:8b:
                    45:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C6:F0:B5:E7:D5:6F:ED:5A:F5:C0:A8:55:F6:D0:65:0E:56:13:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/132942f7-62fd-3f1b-ac0d-0adc82cf43fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:93:81:52:10:e9:54:04:db:65:8d:6a:ef:16:ba:cb:e6:bc:
         72:c4:fd:3c:0a:77:2f:4d:de:af:98:26:1a:c6:13:e7:6a:c5:
         fb:39:6d:9d:33:95:e7:67:6c:84:26:15:ce:41:d2:a6:07:c9:
         df:11:e4:0c:82:25:c6:13:6c:42:39:53:60:65:3f:d8:42:fb:
         93:9d:d8:9d:ff:29:ae:ee:5a:6e:9e:2a:2b:13:84:3b:de:11:
         97:6e:26:f3:1c:0e:60:3a:8e:61:f7:3b:b6:83:20:35:5a:29:
         a4:ed:92:51:c9:35:82:96:0d:23:30:df:c7:c3:f2:80:e6:c9:
         ae:8d:d8:6d:06:45:be:d1:76:f8:71:4f:2c:55:c2:c6:c7:ad:
         5b:8d:bb:58:5e:4c:20:25:08:af:94:dd:4d:e1:e7:1c:ab:80:
         3c:ad:91:be:91:e6:62:98:35:c0:11:65:97:de:98:88:24:f3:
         df:ab:99:2a:96:6f:00:95:f1:a7:56:9e:f6:33:5b:3b:f6:4e:
         a5:75:9e:f7:41:a0:20:ce:ff:ec:e5:fe:14:2d:4f:29:51:1e:
         68:64:5e:1d:59:96:c7:eb:56:f9:f1:45:dd:b1:15:a3:70:39:
         a8:31:02:4f:c4:3e:f0:2b:3f:d0:bd:dc:13:fc:b1:4e:0c:a4:
         56:8e:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:12 2025 by rpki-client