Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1511a50d-8ea4-35df-aca9-5531e4cc2ecd.roa
File:                     1511a50d-8ea4-35df-aca9-5531e4cc2ecd.roa (raw, json)
Hash identifier:          Q4Pr3Op/IdiRh+RFoOqDw7uTqRQdfy1Lhv2jPPkqkGg=
Subject key identifier:   1F:0A:27:58:15:B8:27:48:04:C3:C6:2E:A9:C7:07:FA:67:C5:BD:25
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B6119862205F038A1DD40
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1511a50d-8ea4-35df-aca9-5531e4cc2ecd.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.50.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:61:19:86:22:05:f0:38:a1:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=dfba12c1-026b-4ce0-8ff2-c28f4da213a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b4:2f:bb:61:ca:4e:35:e2:0e:07:79:05:a3:
                    13:ce:80:d6:a5:5f:3e:3b:8b:cc:4e:ea:a1:57:c6:
                    12:31:cb:9f:b3:2c:f6:85:9e:96:e8:b5:c3:5d:ea:
                    f2:a6:e2:de:6b:7b:cd:0e:80:06:24:a0:e6:48:e2:
                    52:e4:15:24:38:1c:2e:4b:9a:b5:78:0a:a5:a9:65:
                    2a:43:81:3a:68:da:8e:93:8b:e7:86:be:52:c7:fe:
                    30:68:90:67:62:8d:72:90:0a:ee:20:fb:40:21:ce:
                    5e:02:17:ce:49:85:4d:29:6c:e6:89:ba:62:10:78:
                    b6:28:c2:0a:b2:ed:94:3c:76:6f:37:a0:a0:86:26:
                    db:30:51:42:36:75:40:b1:99:31:a7:5a:ba:ac:86:
                    46:6e:81:dd:88:e9:c9:57:dc:38:46:04:2f:c6:ad:
                    7c:37:95:d6:a5:19:08:c1:c4:69:25:cb:12:a3:f2:
                    12:cb:83:1c:4f:e1:e7:4f:e2:e5:70:95:4e:f7:23:
                    59:f9:ed:0f:bd:0c:f0:05:be:b6:07:db:02:5c:d8:
                    98:4c:83:49:66:3d:6e:8e:f8:5d:84:d2:17:27:64:
                    27:f2:63:d8:ab:85:f3:34:e0:f0:3d:65:74:0a:cf:
                    fd:ee:a4:0a:c2:b8:7c:a5:06:62:a3:a8:48:83:4b:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0A:27:58:15:B8:27:48:04:C3:C6:2E:A9:C7:07:FA:67:C5:BD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1511a50d-8ea4-35df-aca9-5531e4cc2ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3d:5f:16:87:e5:87:2a:12:e4:1e:7f:41:4b:65:8f:1d:1a:
         84:7d:35:7d:1a:ac:21:ea:2e:19:e5:62:ac:da:7c:fd:db:cc:
         8e:f1:10:b4:0c:2f:f3:59:9e:62:54:13:4b:a7:2e:8c:53:c2:
         85:e1:46:65:6d:e0:3b:d9:eb:eb:76:e4:54:99:af:d5:3a:a8:
         a0:90:ec:7e:b1:f2:d2:ca:d9:6b:6a:a3:3f:46:c3:06:e0:4b:
         6d:29:9c:77:bf:31:98:a2:e3:3a:97:50:57:c5:a6:73:5d:6f:
         c1:4e:a3:dc:b6:38:88:c9:40:d2:b3:59:f3:e3:1c:87:52:dd:
         08:cb:10:a4:ce:3c:86:be:51:4a:58:7c:d9:93:63:1d:8c:38:
         5e:9d:0b:96:ff:fe:f6:d3:28:9c:25:db:f3:a2:42:d9:b9:84:
         36:11:90:79:4c:e4:66:04:b0:b3:4f:4d:5f:3b:8f:43:ba:a1:
         12:d6:05:7b:19:28:b8:e7:c9:e7:59:e2:cc:0d:bb:0a:f0:4e:
         dd:33:6b:c8:ff:4e:8c:97:13:e1:21:63:a4:d7:32:c6:46:62:
         f4:58:2b:13:6a:54:31:8b:53:4d:59:7a:ba:e6:80:12:dd:be:
         74:b5:6c:fb:93:f2:bc:c5:e2:b3:89:07:d7:61:4c:ce:58:d2:
         80:76:59:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:22 2026 by rpki-client