Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0da807cf-9bad-3510-a605-b990813b5a9f.roa
File:                     0da807cf-9bad-3510-a605-b990813b5a9f.roa (raw, json)
Hash identifier:          WrUsbjTYDUmxcBw2HNAvmHnqDcusvEwQisJh0Ji48EM=
Subject key identifier:   CD:5D:2C:7E:65:28:6C:3C:D5:83:CD:85:F1:8C:78:01:9C:EE:4C:91
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B2960A91FB7BF65411600
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0da807cf-9bad-3510-a605-b990813b5a9f.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.49.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:29:60:a9:1f:b7:bf:65:41:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=8ea8e32f-e4c5-40fd-ab8a-fd511abce5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:44:8b:3e:c6:06:68:e1:66:ec:15:04:a3:
                    17:26:92:00:a9:24:fb:47:68:d5:ff:40:14:a2:39:
                    fa:fe:f4:7d:a1:33:e8:11:12:d2:3c:31:96:6c:61:
                    68:7c:dc:cf:3f:4d:41:75:71:8d:eb:5a:2b:02:a8:
                    4c:00:12:bb:4e:d6:c1:1b:18:80:5c:22:5b:04:44:
                    6c:b8:1d:2f:17:33:1b:a6:73:c0:db:27:5b:5e:a3:
                    04:ed:2c:b7:0d:3c:33:16:ac:ee:c2:b1:ae:65:2e:
                    d1:f4:ea:4f:bc:cb:27:5d:e7:d8:c1:00:82:4f:7f:
                    39:88:2a:91:d6:bb:e1:46:fd:de:97:de:21:58:33:
                    0e:5a:2c:cb:19:ea:60:eb:74:78:db:e1:88:60:fb:
                    ab:f1:97:50:90:56:d3:5f:42:d1:c0:da:0e:27:7a:
                    d4:bd:c0:a8:5a:66:1e:4a:3f:27:b2:62:84:fc:99:
                    c4:7f:db:0f:29:cb:7d:3c:4b:88:ab:21:b2:db:b3:
                    d6:0d:77:45:3e:40:3c:56:25:ee:bd:83:eb:df:eb:
                    20:6d:84:3a:6d:09:8e:aa:4d:58:1d:4c:f0:95:a5:
                    58:c1:9f:0e:14:71:d6:e4:14:6b:ca:e9:9a:a1:d0:
                    a8:97:55:5a:64:e2:71:b1:78:96:0c:44:a1:24:09:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5D:2C:7E:65:28:6C:3C:D5:83:CD:85:F1:8C:78:01:9C:EE:4C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0da807cf-9bad-3510-a605-b990813b5a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:5f:70:75:9a:f2:35:e2:fd:49:b7:51:d0:05:f2:22:21:
         c0:1e:4a:c5:30:48:ff:dd:f4:80:1d:df:9e:df:55:14:42:d3:
         34:54:6a:1f:9f:af:7d:37:e3:77:d1:4f:52:4f:d8:d7:63:ea:
         c2:99:f0:8c:0d:59:db:9c:56:f3:9f:b6:2e:7b:0c:c7:da:10:
         a6:0d:9b:e2:28:39:14:0d:69:60:e1:cf:24:29:49:a5:e2:78:
         1a:af:02:09:37:49:43:8a:a0:43:3a:99:ee:bf:5a:ae:fc:81:
         2b:16:a2:c6:b9:e4:a2:03:9f:5e:90:32:58:81:f5:9d:4a:41:
         68:cd:2f:1b:00:b8:8e:e5:5f:fa:c9:c7:63:e9:37:a3:1b:c0:
         ae:dd:67:3d:04:43:63:64:37:89:d4:11:8a:26:f7:d1:26:73:
         24:4d:fa:3b:35:a3:0d:63:82:c0:04:8c:ef:f8:93:75:73:11:
         b4:f9:96:ef:ee:6c:84:55:b4:05:50:da:bc:41:10:5d:ec:1c:
         f6:c4:a7:c1:56:51:97:b5:19:b5:1e:81:95:81:6d:44:36:68:
         c4:fa:f5:76:73:4d:bb:64:d2:ea:c5:94:a0:3b:c4:ba:c4:8b:
         4b:82:1a:17:93:63:ed:6d:59:20:21:1c:b0:15:91:40:61:d6:
         e2:af:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:31:05 2026 by rpki-client