Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/085e16ec-a34a-3992-a9ad-40ea74d17c35.roa
File:                     085e16ec-a34a-3992-a9ad-40ea74d17c35.roa (raw, json)
Hash identifier:          njIH2T+7XJoal6l14uDnz3ibsdC8BTOyW+VWg7T3ArY=
Subject key identifier:   74:CE:F7:37:DD:05:B0:2B:B8:6E:2D:16:F8:47:3B:05:D7:25:CF:9C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B57D4345FC920AE84AFC0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/085e16ec-a34a-3992-a9ad-40ea74d17c35.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.38.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:57:d4:34:5f:c9:20:ae:84:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=56d889a9-5611-4681-98ec-919c74d28c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:8d:eb:b0:52:84:3f:4c:f5:19:ec:10:86:
                    1a:ef:a2:ca:bb:61:94:96:06:1e:6c:88:dc:9b:2a:
                    a2:5a:4c:70:94:64:b3:8f:c1:91:32:6f:fc:96:83:
                    a9:8d:e7:28:66:60:88:95:13:62:3b:ff:7f:9f:11:
                    c7:93:60:14:94:c1:ea:ff:88:70:53:1d:40:de:c4:
                    8b:6a:23:70:ac:82:fe:bf:27:c2:2e:a4:0d:2a:8e:
                    25:26:03:56:9a:fb:ca:e5:1e:22:9b:4d:eb:6d:2a:
                    25:72:0f:29:3c:d7:6b:37:27:92:29:94:aa:09:26:
                    51:ae:7e:41:cb:ce:9b:7d:c8:08:e5:af:fa:4c:70:
                    17:b7:b2:4d:a1:16:3b:22:ee:38:85:7a:6f:72:99:
                    26:9c:e2:0b:82:e7:c9:3a:84:38:43:7a:b0:63:81:
                    e7:d6:7e:35:b2:58:0b:da:f7:bf:e8:c8:f1:c4:80:
                    c2:71:87:4e:48:10:f1:75:f5:87:ff:8c:c2:ee:29:
                    5d:48:ee:2a:0f:78:c9:9b:08:0f:62:69:90:0b:bc:
                    5e:70:b1:fd:33:b1:ab:5f:3f:12:52:b8:8a:42:ac:
                    e6:04:da:2f:c5:ab:8e:4e:88:20:95:9f:c2:35:e2:
                    ba:1f:27:0a:9c:a2:09:b0:3a:03:54:b9:95:d2:0c:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CE:F7:37:DD:05:B0:2B:B8:6E:2D:16:F8:47:3B:05:D7:25:CF:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/085e16ec-a34a-3992-a9ad-40ea74d17c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2c:83:c7:70:86:41:8c:1d:a8:94:45:97:27:72:d4:af:e0:
         54:cd:52:c8:d9:fb:5e:ed:58:dc:a7:ad:b6:ce:84:80:6b:a9:
         8f:db:d4:68:7e:53:c5:0b:17:ad:59:08:ff:a7:37:da:d7:3e:
         b8:51:7a:11:88:c4:76:1a:37:ea:6c:a4:16:e2:94:58:c3:a9:
         5f:d0:a8:92:00:e3:24:f1:79:25:7f:45:40:c0:d3:dd:30:92:
         fd:c5:f0:74:f8:51:30:4b:05:98:84:09:e3:75:12:dc:f7:97:
         36:56:9a:30:55:00:ff:86:97:18:15:9a:3d:6a:a9:a6:0d:a3:
         e9:bc:b6:87:c3:98:7a:4b:3a:5d:b4:62:f1:23:9e:bd:59:90:
         53:18:f3:0f:ac:8a:53:b1:d3:ec:4f:72:19:88:94:11:13:78:
         8f:88:93:6e:32:d1:78:33:cd:ab:e5:50:5f:98:13:e3:3a:e4:
         10:7a:d4:34:d6:9f:5b:1b:ea:85:4d:c8:1f:53:cf:f4:cc:65:
         a3:28:1b:d6:43:0d:97:f1:7c:27:e9:b2:44:d8:ef:66:19:72:
         74:eb:74:41:77:93:e7:64:9b:87:87:8e:c0:e4:5e:77:99:b7:
         08:f6:c5:54:01:da:0c:b6:a0:86:2c:d1:b3:86:14:fc:f4:62:
         74:42:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:59 2026 by rpki-client