Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b618c20d-45e2-39d5-a8d9-0e428be0638d.roa
File:                     b618c20d-45e2-39d5-a8d9-0e428be0638d.roa (raw, json)
Hash identifier:          WsmwJ5/SKg7J7gCV3D8yxnhAadd/7iydyFmdKg5sEVw=
Subject key identifier:   5B:38:77:DA:72:DA:FC:C1:95:88:5A:53:58:E2:51:AC:4E:86:69:C6
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434CA61B3DEFA44CE2AF8180
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b618c20d-45e2-39d5-a8d9-0e428be0638d.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.61.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a6:1b:3d:ef:a4:4c:e2:af:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=117947d2-f385-4783-96c5-675150ae86a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:bf:bb:60:f1:14:21:4a:f2:e2:57:a6:cb:
                    f1:3f:f3:31:4a:e2:40:a3:bd:c0:25:15:4f:5a:20:
                    27:54:a3:fe:03:71:11:a5:e3:b6:4e:27:f0:02:4c:
                    e5:b6:46:76:e9:ef:ff:07:34:0d:cb:45:ed:58:93:
                    23:89:54:6e:60:6c:a8:c3:c5:f8:63:66:d0:e2:82:
                    e3:c6:e7:57:a2:9d:45:81:35:44:21:e9:c1:45:62:
                    be:b4:40:82:39:d3:67:4a:a8:68:32:0c:7c:e8:e3:
                    b9:dc:ac:e6:e4:57:cb:af:4f:21:6d:46:2d:79:6c:
                    eb:7c:e5:bd:c2:53:d2:a7:4f:e9:96:93:9c:ac:e0:
                    de:88:03:28:9d:ef:1f:6d:75:7d:5a:ac:bf:bf:1d:
                    f7:65:51:80:d7:10:9f:40:f5:b9:fb:d2:5a:ac:60:
                    76:27:f0:5d:26:a7:1b:72:d3:46:ff:26:49:e8:41:
                    fd:13:d1:a8:7a:29:d8:79:12:30:fa:d6:28:eb:3c:
                    cd:15:5b:cb:f9:e8:93:f3:a1:46:58:0f:d4:1a:4a:
                    7a:aa:94:4b:37:46:5d:48:dd:ac:5e:3f:83:19:bb:
                    d0:b0:8e:1c:7c:a9:19:07:b3:1d:01:60:54:71:00:
                    b9:f5:08:70:69:2b:87:43:37:45:d0:1d:b2:b2:60:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:38:77:DA:72:DA:FC:C1:95:88:5A:53:58:E2:51:AC:4E:86:69:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b618c20d-45e2-39d5-a8d9-0e428be0638d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:df:0d:2a:72:16:54:fe:f8:1b:60:20:67:99:65:c3:bb:56:
         07:20:e4:56:78:96:9e:78:f1:ca:74:c3:a5:f4:d9:6d:b3:b3:
         6b:1d:5e:6c:18:96:16:2d:fc:05:b0:b2:93:05:e8:63:6b:1e:
         0c:a9:86:0c:7c:d1:a1:34:98:2e:a3:9b:a2:e4:7e:e7:5a:5f:
         e2:fb:64:d3:2a:46:54:44:db:e8:d1:86:06:26:97:be:34:fe:
         e9:2d:40:c7:11:f1:f9:99:cd:38:93:c4:03:6c:83:06:ae:e8:
         d2:1b:3f:00:ac:da:46:ec:58:42:65:1e:86:cd:04:f0:11:d6:
         c6:df:67:6c:d1:fc:dd:5b:d3:4f:52:7c:2a:e9:94:1c:be:70:
         5e:a3:cd:7c:c6:60:da:99:c5:df:0e:23:4c:6c:ca:0e:e2:b8:
         a6:20:1a:9d:e4:f9:14:2d:8d:7b:e0:cd:d7:3f:3b:80:10:9d:
         60:f6:81:4e:37:e5:44:aa:93:ff:27:5d:75:7c:97:22:4a:b1:
         db:d4:f7:73:1f:79:1c:6e:6e:cf:e0:0b:24:cc:66:18:a9:ba:
         39:1c:a7:59:e9:3f:88:60:21:1f:5b:7e:ae:05:fd:ae:e4:ec:
         5f:eb:8f:65:7e:aa:ff:dc:63:7c:eb:08:86:38:85:75:17:57:
         12:96:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:10:29 2025 by rpki-client