Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6067a587-38fd-3ac3-aeef-0aba25131b8c.roa
File:                     6067a587-38fd-3ac3-aeef-0aba25131b8c.roa (raw, json)
Hash identifier:          hN2aReHBTH5lwrAFTK4La/kIGBrnDvDOKvqYFY3V2vQ=
Subject key identifier:   BC:C9:DA:AE:0B:31:C8:94:50:BA:F3:FE:25:BD:BF:3E:65:54:7B:08
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C5114CA2FF5CF712C1400
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6067a587-38fd-3ac3-aeef-0aba25131b8c.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.37.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:51:14:ca:2f:f5:cf:71:2c:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=f28da3c5-de46-4a61-9af7-f3172cb93391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d5:a5:90:71:c9:e1:f5:00:b2:a1:31:25:cd:
                    28:ab:f8:47:37:3f:dc:31:f9:2a:19:96:1b:94:2f:
                    87:2e:44:c6:9b:3d:4b:95:cd:74:5b:ab:86:4e:06:
                    b6:ec:7f:93:b0:53:4a:06:c8:cf:ea:29:fe:fd:90:
                    71:f3:e4:be:4b:a9:ce:d8:34:a6:c5:ae:56:48:ee:
                    0a:fc:4e:fb:78:2a:0d:86:6d:27:1c:b6:03:ce:51:
                    a8:16:bd:af:a5:4b:46:c9:bf:4c:e4:b5:b9:19:1f:
                    37:05:d8:14:59:df:53:dc:22:e7:0f:e0:d7:14:dd:
                    3c:0d:4c:41:96:f9:3f:ad:af:53:b4:58:9e:55:a9:
                    d9:69:46:dc:97:76:25:13:39:47:02:f3:bb:bc:13:
                    a9:aa:47:40:de:92:66:1f:73:48:9d:87:f8:97:bc:
                    45:2b:2e:d8:d3:5d:08:c2:52:fe:c9:cd:d0:d7:11:
                    cf:02:25:1b:8f:cd:e7:67:b7:aa:0e:2b:c6:c0:54:
                    66:6e:b0:0f:f3:a0:aa:f9:00:bf:0f:8d:6e:b0:cb:
                    b7:60:38:b3:d6:fc:be:ec:94:80:2a:a5:82:a6:4a:
                    c4:bf:69:5a:cd:99:09:74:1c:a1:a9:f0:78:a6:23:
                    97:92:c5:c8:55:cd:97:1e:85:ed:ae:9e:f7:2a:e9:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C9:DA:AE:0B:31:C8:94:50:BA:F3:FE:25:BD:BF:3E:65:54:7B:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6067a587-38fd-3ac3-aeef-0aba25131b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a6:7f:48:cd:6f:ec:27:35:c5:5c:78:b7:b4:de:6a:1a:a9:
         78:5c:b0:2a:33:5f:5f:a7:19:40:f9:a0:85:d6:45:14:c8:4e:
         b8:c9:bc:bf:d0:81:ea:75:b9:70:68:97:f5:00:df:ec:f2:da:
         ba:e4:a5:91:e4:aa:e0:29:e1:f5:a6:cd:79:82:3e:ef:7a:6a:
         33:5f:c3:f8:7e:de:22:2c:dc:2a:a1:69:b2:d1:93:d1:91:41:
         3d:70:53:50:a7:1c:0a:ed:a7:ae:a7:63:aa:90:cd:a4:8f:b6:
         0f:36:08:0d:4c:af:de:7c:60:14:56:0f:65:66:3f:de:d9:ae:
         37:ca:ad:13:8c:c6:b5:91:5d:55:c4:3a:d2:5a:6b:5e:b3:50:
         90:46:31:0c:11:05:b6:4b:7b:09:2b:f1:e3:54:bf:ca:0e:59:
         c8:d4:ff:63:7b:e6:0b:b6:bc:b7:2b:12:b1:24:fb:c7:8f:f4:
         b6:94:8b:64:97:49:23:04:5a:64:b8:76:3d:f4:4e:2d:6f:74:
         d7:cf:c8:10:6d:e5:cc:cf:0d:52:9a:31:a4:af:b9:57:78:3e:
         92:44:90:8d:76:9d:1e:fe:07:af:e7:4e:7d:3b:06:3a:54:25:
         b5:4b:96:13:f2:a7:1d:91:29:cd:2f:74:40:82:95:1e:bd:86:
         b0:f1:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:10 2025 by rpki-client