Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa
File:                     04a03306-2f12-3d10-806c-44f9debc1d75.roa (raw, json)
Hash identifier:          pxHNtXCEg/IGK7nS1z9ZJybUnUAfqPxD2wUC/s6oEn0=
Subject key identifier:   C8:7D:20:AD:15:3D:BB:17:F8:30:07:3E:34:AC:67:68:67:9E:0D:B4
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B58F0CF2404785A0AE4C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.58.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:58:f0:cf:24:04:78:5a:0a:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=0b82fae3-2564-492f-a1a2-0515b1d4cd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:ca:30:de:87:e1:36:5e:05:b8:41:67:4e:
                    82:f4:96:77:97:c6:2f:bf:77:87:e7:f2:8d:96:33:
                    51:42:1c:ab:0b:48:dd:01:8f:c3:fd:3f:a0:12:d8:
                    a5:3a:4a:bf:92:1e:fa:6a:78:a3:eb:c2:c3:6d:f6:
                    33:66:4b:90:f4:d4:f2:26:53:42:b6:37:c7:35:83:
                    6f:bb:21:32:5f:33:a8:e0:f9:d9:5b:cd:f4:9e:89:
                    49:13:54:a5:22:2d:65:67:81:47:f3:03:a7:18:bb:
                    1c:c7:6b:22:ad:b7:b7:1e:9f:77:32:27:28:91:07:
                    53:de:45:81:41:38:84:cf:6a:62:74:40:e7:d3:e6:
                    a2:fc:3a:80:be:5c:b3:96:94:f5:90:45:16:2c:10:
                    f5:e7:67:8c:4f:c9:93:31:21:3e:2e:fc:22:45:55:
                    12:d5:95:50:e8:f8:31:67:15:b5:1c:54:f2:93:67:
                    48:e4:cc:bf:95:7e:8c:3a:1a:29:c2:7d:54:16:47:
                    df:64:97:19:1e:2d:3f:9b:39:1d:c9:64:00:67:6c:
                    10:cd:52:f7:da:a3:fa:13:c8:5d:75:40:de:9b:dd:
                    b5:b2:fe:c7:97:ea:c0:7b:d3:02:0d:a1:d4:28:1e:
                    92:97:44:94:95:4c:f8:8f:23:21:b0:cf:0c:23:d2:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:20:AD:15:3D:BB:17:F8:30:07:3E:34:AC:67:68:67:9E:0D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.58.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ce:8b:5c:ff:7b:30:5b:30:5c:95:f1:6f:bd:dd:3f:87:6f:
         af:11:f1:8d:b7:a7:27:f5:53:7f:cf:61:7a:92:ef:a5:20:86:
         d1:39:4c:7c:28:77:24:e1:5c:ee:3a:3a:37:f8:55:29:81:cb:
         95:11:e8:b3:4a:ad:83:4e:86:ff:be:15:56:76:7f:e3:28:b1:
         fd:07:d7:bd:8e:2d:5d:c2:11:f2:df:5c:86:0e:b1:cb:21:b8:
         aa:07:22:62:e8:c9:23:a4:d7:c6:05:01:1a:6b:fe:58:37:38:
         f6:08:7b:3b:1f:81:4f:bf:f9:32:9f:38:d0:2e:dc:7d:1a:10:
         2a:8a:e5:c7:50:31:0c:ec:77:27:c0:0d:08:68:8b:03:da:f4:
         9c:0c:d3:b0:6c:3f:e3:f5:4c:e2:28:dc:85:c9:ba:a8:37:fc:
         63:fa:95:ec:a8:b2:df:8a:a2:42:c3:f0:67:d9:f4:92:16:4e:
         1e:70:f0:ff:c6:f3:51:69:99:5d:7b:c9:5b:4e:84:c0:bb:69:
         ca:0f:61:47:f1:47:06:10:c7:fc:13:fc:44:26:1c:30:6b:0e:
         2e:22:08:2c:77:78:f8:0d:13:15:55:04:16:0c:6c:c7:f8:0f:
         52:a3:97:c5:e8:f9:f7:91:8a:6d:9b:b5:fa:3b:1f:a1:b8:d9:
         cf:56:c1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:41:23 2026 by rpki-client