Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/132942f7-62fd-3f1b-ac0d-0adc82cf43fe.roa
File:                     132942f7-62fd-3f1b-ac0d-0adc82cf43fe.roa (raw, json)
Hash identifier:          TdDV4hXhy50EfwCqVY1lJfTV6xnADaoWF6bxRpobUJM=
Subject key identifier:   12:1F:C8:FF:25:8B:A5:E4:5D:2A:1E:A5:9B:F1:89:3E:6A:29:7A:8C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B1E4329D6A690451EC040
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/132942f7-62fd-3f1b-ac0d-0adc82cf43fe.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.32.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:1e:43:29:d6:a6:90:45:1e:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=52f8b0d7-f0d8-47d3-8698-3e17ed81aa5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:b2:5a:27:12:d0:04:a5:34:9c:75:4d:ab:
                    76:6a:3f:27:5f:fe:ca:48:d4:7d:e3:6d:42:8c:41:
                    61:6a:c4:21:6b:88:3f:6c:d8:11:f9:00:62:10:f1:
                    8b:7d:eb:95:f4:08:7d:50:00:eb:51:31:5c:6a:4e:
                    69:32:18:5f:60:77:24:50:75:63:a5:68:16:ff:fa:
                    88:8c:9f:bf:13:4c:4c:6a:d1:52:5f:9b:71:31:99:
                    4c:d2:a8:fb:e0:f2:b2:92:c7:ec:d9:f6:ce:59:67:
                    75:de:c1:f4:a9:9f:86:ec:c5:96:89:db:55:f3:aa:
                    37:40:4f:6b:0b:51:83:5d:e4:0c:09:40:58:4c:82:
                    eb:12:6d:8c:e2:cd:b1:b6:8e:d9:19:9e:32:d7:a8:
                    85:22:68:e8:f2:04:bb:74:f0:a0:f8:72:0e:d7:ef:
                    f3:0c:a9:b5:76:3d:fc:79:2f:d2:37:ee:35:c0:f1:
                    60:23:86:b2:34:00:d7:2d:31:ca:71:6e:e3:6c:8f:
                    38:89:68:34:10:22:7b:ce:45:35:9a:67:3a:ee:fb:
                    d3:9c:a7:95:73:23:eb:4d:5e:bc:12:fb:d4:3f:18:
                    fd:45:de:e6:42:ac:cd:82:30:17:03:ef:a9:9d:96:
                    7f:5c:07:70:03:d9:52:cc:5a:52:80:55:19:0e:ef:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1F:C8:FF:25:8B:A5:E4:5D:2A:1E:A5:9B:F1:89:3E:6A:29:7A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/132942f7-62fd-3f1b-ac0d-0adc82cf43fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:2c:5b:4b:9f:d8:cf:e8:3f:5a:09:6f:67:25:94:1c:4f:a1:
         73:f3:58:46:7c:5c:b6:cf:78:d3:96:1d:c1:28:2d:db:9e:d4:
         21:39:ff:a2:82:7a:38:1a:1f:39:5f:da:ce:35:fb:58:26:66:
         79:8f:d1:3a:d0:0e:a1:e6:f2:bc:a8:a9:45:a8:fc:dd:7b:ad:
         36:da:69:67:c3:87:d8:72:9a:60:3d:f7:59:f8:04:4c:dc:77:
         59:f8:a3:d0:83:46:92:cb:a4:f9:0b:3e:b2:51:e6:90:9f:d0:
         2d:a7:89:3f:2f:fa:9e:1d:23:83:06:22:9e:10:f8:71:3c:c2:
         94:03:ae:4a:f6:c7:c1:f4:4d:f9:64:ad:94:e1:ff:ff:40:ad:
         e1:eb:25:79:ab:7e:06:77:24:a2:e3:0f:4f:3f:2e:02:5c:da:
         a8:2b:14:f1:fb:c7:5c:de:5d:e4:39:bc:4c:c9:93:6a:cd:ab:
         5b:80:ec:8f:1b:ce:a4:17:46:a2:58:d2:b6:2c:76:0c:82:4a:
         b6:66:46:46:e5:f9:b1:8d:67:db:3d:a4:35:08:2a:25:58:d9:
         47:3c:ea:e1:97:2e:b8:74:de:18:65:d3:e0:5d:2b:e4:03:54:
         25:6e:7f:d3:2e:db:4e:41:a3:06:7c:1b:a7:3f:72:8f:4c:b6:
         4a:04:7d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:53 2026 by rpki-client