Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa
File:                     0be371a6-479e-3c51-a61d-3d40223861af.roa (raw, json)
Hash identifier:          RZHimPtCNp3WV6nBw8lyC0VO3avEqEZ89qrOHRWItW0=
Subject key identifier:   D4:E6:82:09:96:D7:CE:97:B5:6F:F2:6E:C3:0B:7C:BA:F3:AF:C3:10
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B59C917DEA656082BF4A0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.38.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:59:c9:17:de:a6:56:08:2b:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=867d530f-d1c8-453a-9ff5-206086fc4869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0c:49:44:de:a5:39:7a:12:af:5c:b2:55:b3:
                    53:ae:e1:67:2e:9b:f9:8e:76:b6:e1:b6:b2:d8:c7:
                    eb:e0:93:03:25:aa:8c:70:24:7a:45:4d:b8:cb:e7:
                    76:55:cc:fd:c6:89:c6:c3:a1:8d:2c:9b:cd:9c:96:
                    fe:d3:db:9f:f8:ab:48:7b:3d:cc:18:19:53:ad:62:
                    0d:03:c5:39:60:c0:8c:0b:fa:d8:94:63:f3:a8:20:
                    d8:f5:96:8b:57:98:73:27:11:e5:5a:29:7e:57:98:
                    cc:94:93:c3:02:11:b4:8c:ec:c5:d4:e5:25:ef:b7:
                    23:f5:7d:a5:2e:a5:b3:86:a5:61:04:c8:76:8e:fb:
                    34:8f:b2:06:be:c3:8b:cd:95:b6:4a:17:e1:55:88:
                    b2:c6:4d:59:d4:45:12:e3:35:ba:2b:bb:74:37:93:
                    da:1d:f1:c0:33:47:b4:34:6f:a1:6d:f7:32:76:2c:
                    dc:33:47:b7:6e:f1:f7:19:77:38:61:8b:41:e7:b7:
                    f9:c1:3e:71:1b:2a:4c:85:83:b3:95:ca:37:ae:b1:
                    09:e5:ca:bc:7b:26:b9:40:1f:3d:9d:31:8d:61:ec:
                    8c:4b:fb:6e:ac:0d:42:62:44:c2:e6:7e:9d:0a:f7:
                    6d:e9:8e:f5:e9:9d:63:eb:e8:3b:8e:92:20:af:35:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E6:82:09:96:D7:CE:97:B5:6F:F2:6E:C3:0B:7C:BA:F3:AF:C3:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:1b:17:e1:a4:49:53:74:21:6d:25:7c:00:d2:48:a8:99:
         c5:c1:5a:ca:c8:9d:7b:77:71:70:1c:8a:ae:f2:5b:b8:c5:0d:
         cb:f1:20:7c:65:29:a6:7b:9b:f5:3b:10:c0:ec:16:04:a0:ec:
         49:fa:0e:7b:85:53:37:8b:06:00:a2:2c:41:5b:92:8e:a1:42:
         f9:9a:12:5d:e7:48:fa:b4:e7:67:85:14:b4:3a:4e:07:9a:c9:
         f4:d4:5c:c9:0b:c4:c9:61:50:39:17:65:5a:fd:ff:3d:c9:98:
         42:ee:f9:f1:f2:71:fd:df:5c:54:e2:e6:26:37:a0:1d:6e:2e:
         e5:89:3d:80:be:83:57:6c:c6:16:b6:bb:66:b9:3c:e8:6e:ae:
         e9:30:a7:a5:33:4b:73:66:bf:3c:69:fa:f5:bc:7e:65:f1:02:
         15:45:51:5c:cf:d5:24:7b:9d:c8:64:b5:84:27:a6:91:a3:88:
         bb:a3:25:c6:86:3b:2a:ba:c9:30:6d:57:c5:4c:52:f0:9b:43:
         75:a3:4e:3d:27:db:df:e9:3d:4a:68:40:0e:47:92:25:77:d2:
         a6:18:ac:20:a1:23:5d:8d:75:16:18:c2:4b:1f:f5:db:7f:1a:
         c5:4e:5c:a3:96:02:da:d9:99:97:d6:f8:f2:ff:c6:5b:5d:a9:
         f5:35:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:41:06 2026 by rpki-client