Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/94008665-cb83-33cf-8eed-284ba0f22497.roa
File:                     94008665-cb83-33cf-8eed-284ba0f22497.roa (raw, json)
Hash identifier:          wbZXR4WcdlwvDhl2zNNMGaplpam19LRN2nVeVLCCRcY=
Subject key identifier:   26:FD:B8:57:F7:9D:52:29:AE:71:5A:45:03:05:01:42:A7:1D:36:67
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C4DB98C4FB0035FB44800
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/94008665-cb83-33cf-8eed-284ba0f22497.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.60.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:4d:b9:8c:4f:b0:03:5f:b4:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=2fc98826-ccb2-4cfe-8424-36604f7d2186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:f9:e2:b7:a2:2f:14:bf:d1:33:4a:b8:bb:
                    e8:f1:2d:13:95:77:da:97:84:e4:27:39:6d:fb:90:
                    6f:1c:38:f0:04:ec:fe:59:92:2c:a7:87:17:cf:3a:
                    0d:49:36:a3:28:34:6c:c8:71:38:f9:51:a9:d4:ab:
                    d5:56:77:e3:87:a5:ff:84:fd:df:50:ae:74:a9:8f:
                    fb:dc:b3:70:d0:3c:c7:a6:39:f7:b9:3c:0f:9d:78:
                    49:52:c4:bf:68:f2:8d:34:af:19:35:af:2e:ae:e6:
                    b2:6a:59:e2:fc:49:d1:e4:ed:41:80:bf:bc:2f:0f:
                    28:b2:fe:6c:47:27:ab:9d:11:a0:1b:a8:0d:ff:ee:
                    df:fc:65:33:4d:72:07:99:84:79:4b:ca:9a:a7:25:
                    27:52:ef:b7:72:4a:42:46:d5:38:e2:50:b3:cd:47:
                    0f:38:0c:14:ef:26:2b:d2:da:1d:e3:72:82:6a:19:
                    7d:7a:2b:27:78:c2:dc:f9:62:18:40:22:73:98:94:
                    1c:e9:70:d3:e5:14:d3:c7:b6:77:45:38:38:17:11:
                    60:b0:e4:a8:52:eb:43:02:38:b3:37:54:c4:bf:04:
                    49:7f:92:cc:a2:b6:21:be:a8:91:74:8f:fd:fd:fa:
                    ea:80:71:7a:a1:e0:45:5a:13:97:a4:d7:1f:f2:30:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FD:B8:57:F7:9D:52:29:AE:71:5A:45:03:05:01:42:A7:1D:36:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/94008665-cb83-33cf-8eed-284ba0f22497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.60.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:21:09:7e:dd:bb:9b:1d:c8:97:79:fc:e1:86:49:0a:62:
         0c:7d:5f:9a:a2:94:a4:14:86:c5:5a:e7:0b:32:ea:59:8f:b7:
         ef:d6:0f:64:97:8b:65:72:a4:1f:9b:d8:37:48:a6:98:bc:a0:
         63:45:d6:70:22:e7:66:ee:95:f7:d8:5f:96:34:a9:27:9c:21:
         d3:b6:bb:28:ac:16:a9:27:88:d3:5d:4d:fc:ca:7c:68:12:66:
         1a:56:9b:54:96:e5:a1:7f:cd:8d:49:d1:1d:1d:29:67:d9:1f:
         68:fb:d2:f1:aa:7f:75:2d:48:11:80:4a:47:49:a6:e0:9c:48:
         41:6f:65:c9:38:5f:b2:40:56:12:c6:c1:9d:00:c4:a2:dd:30:
         66:ae:c6:3f:1e:1d:20:f8:b4:39:67:cc:40:dc:05:22:47:76:
         12:19:40:1c:8a:b5:2e:d6:b1:29:29:5d:05:c1:5d:b5:aa:ae:
         45:4b:2b:e0:85:34:c1:fd:c3:9e:01:9a:ad:8a:bc:46:32:f6:
         74:7b:e8:58:cd:36:c0:71:7d:8f:21:e7:cb:40:89:90:d4:62:
         72:7d:04:7d:0a:4e:f7:95:1f:6e:db:65:90:ac:a1:0e:c3:6d:
         9b:3a:3f:b6:cf:55:e5:03:96:78:76:d9:25:38:27:7e:67:77:
         8c:f3:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:21 2025 by rpki-client