Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b7425900-332d-3a03-9ce3-e45b79bee266.roa
File:                     b7425900-332d-3a03-9ce3-e45b79bee266.roa (raw, json)
Hash identifier:          FIiUOESL3g3b1keBlhvPSmCoM8WbBHPl2yMisKRJQvA=
Subject key identifier:   9C:C6:E4:E6:4A:1F:04:2A:40:DD:63:0F:17:61:BA:8E:8C:7C:9F:B1
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584B434C4DEA5A5E85BFD0FD1700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b7425900-332d-3a03-9ce3-e45b79bee266.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     16591
IP address blocks:        136.57.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:4d:ea:5a:5e:85:bf:d0:fd:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=6026473d-66f5-4132-a189-f6724fbbcfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:35:d8:1a:b8:e6:d3:da:bc:1d:34:58:6e:
                    df:fd:7d:d4:62:6e:b4:e9:3f:09:d3:b9:cf:b5:fb:
                    82:6c:4d:9d:f8:2d:d8:a5:b3:7f:2b:de:7f:cc:bd:
                    8c:36:de:50:1f:1c:b2:08:b0:af:93:c4:15:d0:36:
                    1b:5d:a1:d5:35:a0:98:00:b2:fa:70:a0:fc:cd:58:
                    aa:4f:7f:09:dc:ca:ce:0b:c2:7e:29:f1:5b:13:b0:
                    4e:22:79:0b:77:5d:1b:80:17:bc:c4:17:a8:26:31:
                    fa:88:9c:62:12:b4:20:a7:c8:07:f3:1a:3a:cb:d6:
                    5f:e4:b4:97:e4:1a:95:5d:0d:34:6d:59:73:c8:ed:
                    63:02:bd:44:6b:a3:3c:5c:da:60:49:99:bb:5a:6e:
                    56:d8:74:d6:c7:2d:82:ef:ba:f7:72:f0:ac:af:56:
                    b5:83:cc:f6:3a:fe:8d:f2:ae:e0:ef:36:a5:88:a3:
                    8a:d5:87:ca:fb:8a:cd:02:9e:ad:fe:33:00:57:ae:
                    ca:9e:86:22:c3:39:cf:06:1a:78:0d:c7:49:e0:41:
                    b7:44:a8:43:82:6a:79:7b:f1:8e:a2:b6:52:9d:ad:
                    70:69:a4:f5:fd:e4:b5:cb:e2:b3:d4:3b:77:a6:4c:
                    fc:c3:e7:d5:07:d1:e7:ae:f6:1d:0e:a9:79:d0:61:
                    6a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C6:E4:E6:4A:1F:04:2A:40:DD:63:0F:17:61:BA:8E:8C:7C:9F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b7425900-332d-3a03-9ce3-e45b79bee266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:31:23:11:1d:c5:fd:9e:eb:f2:e2:fb:45:e7:13:04:60:
         2b:b8:d2:fc:10:60:64:2f:b9:31:66:8d:ee:34:ef:43:db:7b:
         da:1f:98:bd:64:42:41:42:31:09:bc:e9:3f:4d:8d:13:56:df:
         d6:df:54:67:f6:cb:52:67:f0:75:eb:53:02:e6:0f:ef:6b:27:
         79:8f:99:13:b6:10:11:32:78:0d:fd:bb:69:62:a8:5f:62:7b:
         aa:a6:42:5f:34:ec:01:f4:46:4f:8a:ba:b1:12:bf:a9:b9:bd:
         51:7b:ac:b4:a1:0a:9b:d3:8e:d2:70:64:bd:b3:ad:e0:3e:6b:
         c9:e5:63:24:42:b6:c1:35:c9:8b:fa:d8:27:c1:7c:85:a5:c8:
         8b:6d:34:40:29:b5:1d:61:db:90:6f:0b:69:fa:54:e8:bf:61:
         d4:81:59:2a:76:32:5d:af:f0:aa:ac:b5:94:67:e3:2c:2f:6a:
         fe:15:64:4a:3e:e3:c0:53:ec:cb:0b:bd:4a:18:6d:5b:7a:d4:
         0e:75:33:fd:40:57:57:33:0a:52:a3:53:3a:1a:34:de:d7:a8:
         cc:24:e3:d1:1d:1d:93:3e:fd:87:85:43:b4:57:b7:e0:cb:df:
         73:07:09:9b:11:86:dc:c8:85:76:3a:2f:56:89:45:5f:5f:2c:
         90:d0:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:13 2025 by rpki-client