Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8c384118-1de4-341d-ac72-59664874a7ab.roa
File:                     8c384118-1de4-341d-ac72-59664874a7ab.roa (raw, json)
Hash identifier:          PiyifjVcKLccNLUUTu0VaivtdGgIqqrFSSrXRc32/tg=
Subject key identifier:   05:47:4A:3C:60:91:C5:D3:7A:5E:0C:A5:73:AD:79:BC:F3:60:F6:B5
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C61ACB15ED7A4B3129800
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8c384118-1de4-341d-ac72-59664874a7ab.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.53.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:61:ac:b1:5e:d7:a4:b3:12:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=1d73c67f-a6d1-4af2-9626-952c0866d434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:54:ac:2d:e1:2f:a5:59:dc:ac:57:5c:60:89:
                    20:74:07:d1:34:b9:63:92:fa:eb:4c:a3:cf:0a:e7:
                    07:95:0a:c9:ea:5d:46:5b:7a:b3:ad:e9:d7:97:b0:
                    b7:9a:d4:0f:1c:2e:48:54:93:e6:62:f0:68:41:9c:
                    ca:9e:6c:54:b2:db:62:eb:28:28:71:31:2c:68:e6:
                    17:23:f0:65:ed:69:a8:2b:53:fa:e4:e9:e7:85:10:
                    30:e7:9c:a7:9b:59:88:39:3a:97:1e:6a:b6:f9:d0:
                    8b:bd:9d:01:c5:c3:45:b1:5a:97:3e:df:bf:42:1f:
                    30:64:de:77:44:30:3e:d7:c0:0b:79:5d:28:9b:60:
                    0a:81:e5:3d:95:b6:d7:08:99:14:df:02:d7:32:c4:
                    c7:86:a0:09:20:84:99:09:41:2c:b8:e4:08:32:2f:
                    54:ec:a5:08:3e:ea:70:76:7f:ff:22:cd:b3:9e:58:
                    fb:98:35:0b:fc:21:da:ef:33:14:15:64:8a:46:7a:
                    8a:4e:23:ec:f6:7c:71:74:3c:53:36:c3:cc:52:58:
                    d9:bb:0f:cc:3c:7f:ad:1f:8b:78:95:4b:1b:59:16:
                    02:10:56:38:71:e8:75:2f:b0:a7:06:f3:55:89:d2:
                    28:ed:a8:fd:51:c5:cb:c6:69:33:94:bd:1a:91:bd:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:47:4A:3C:60:91:C5:D3:7A:5E:0C:A5:73:AD:79:BC:F3:60:F6:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8c384118-1de4-341d-ac72-59664874a7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7a:c4:db:f4:58:89:d7:fc:41:28:87:9e:15:03:85:50:a0:
         de:08:d1:ee:e7:28:c4:0d:40:13:42:51:8c:e1:ab:2e:1a:4b:
         a3:06:9d:ab:78:88:66:87:ce:b8:42:f9:c9:be:f9:65:b5:26:
         06:6b:92:90:b2:fa:05:4e:4f:31:52:49:03:3f:12:45:1a:d0:
         dd:fd:b5:8a:8b:4f:2f:3a:0e:95:c0:b4:13:79:21:ef:89:64:
         52:39:8e:1a:95:3c:a5:dd:ee:db:8a:79:b6:49:aa:d4:62:ab:
         6c:36:71:ac:7d:ee:e5:85:be:de:bc:98:41:a6:c3:97:fb:e6:
         b5:d4:71:2f:fc:aa:79:34:b8:b5:8d:a8:35:2e:57:fd:8c:9a:
         b1:33:3d:65:da:a5:6a:3f:37:28:33:1a:33:40:75:cf:cf:73:
         6d:75:da:4f:bd:d6:bb:a7:9e:72:4d:0d:80:4a:8a:01:0f:ce:
         2e:bd:81:a3:95:90:24:25:aa:a5:a5:ad:2f:8b:3a:fb:ff:4d:
         70:f7:82:62:9a:8d:4f:a0:b3:f0:7a:22:ef:66:3b:4d:d0:23:
         dc:eb:fc:3d:d6:d9:4b:61:80:b7:48:dc:bf:0f:8d:4f:02:6f:
         f0:a8:a7:37:48:8d:be:e9:e6:15:75:a5:ef:20:ec:69:17:2f:
         bb:58:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:14:50 2025 by rpki-client