Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17c31fbd-cda7-320c-b05c-bfd63e6b82a4.roa
File:                     17c31fbd-cda7-320c-b05c-bfd63e6b82a4.roa (raw, json)
Hash identifier:          m/hakyxGYJYCwAaaUK7jl9ML2o7hy4YfXPUuvGqZHsA=
Subject key identifier:   83:4E:F6:00:38:15:A6:6D:13:3A:01:EC:D3:FA:96:1E:F0:3D:80:E2
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B562425CC603236A09B40
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17c31fbd-cda7-320c-b05c-bfd63e6b82a4.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.49.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:56:24:25:cc:60:32:36:a0:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=8ed9798c-ed26-4d2b-96f9-847aa59fadbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9c:8b:8f:be:18:8e:df:ab:ff:90:52:5a:ef:
                    fd:c9:0f:ab:be:dc:d9:60:87:3e:6e:a1:f5:7e:1d:
                    d2:d3:f6:e7:31:56:af:95:ff:f2:7a:6a:33:d6:69:
                    6d:5c:f8:96:62:1f:b7:83:2b:64:e8:d5:d1:20:1b:
                    a9:47:b9:63:57:c7:a9:b1:5e:d8:36:db:35:c9:ff:
                    6f:b2:8f:55:95:aa:25:b2:ce:55:3f:ab:04:bc:22:
                    20:7b:18:6b:02:32:a8:27:ff:f2:34:80:3b:34:cb:
                    91:f5:eb:5c:ef:3c:ec:65:46:f2:7c:19:ce:b5:2b:
                    95:ec:58:14:69:9d:30:ca:91:0d:3f:a2:be:55:db:
                    4b:5f:b0:7f:5f:45:d9:61:75:08:d2:1e:2a:43:da:
                    bf:07:d4:3d:71:04:be:b9:51:51:d8:a9:f9:09:3f:
                    d2:4e:61:08:5b:89:89:65:8b:08:e1:69:87:6a:ae:
                    fb:a2:f6:c5:c6:0e:01:62:8c:c8:0e:58:92:b0:97:
                    7b:8a:13:05:74:d0:ab:91:ee:d4:ab:50:35:13:78:
                    10:4f:3f:8c:47:6c:47:b3:95:1f:99:f8:6f:58:51:
                    0d:fd:27:1c:16:a9:0a:fc:27:20:cc:a2:fc:7a:5c:
                    a4:8d:62:d9:57:23:0d:5d:20:96:1e:fd:70:eb:d0:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4E:F6:00:38:15:A6:6D:13:3A:01:EC:D3:FA:96:1E:F0:3D:80:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17c31fbd-cda7-320c-b05c-bfd63e6b82a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:67:f0:96:5b:53:9c:c1:ad:6d:af:84:70:e2:75:cf:69:9e:
         46:88:7a:99:7e:2b:c7:b7:13:ba:4e:58:9d:7c:5f:ad:ba:51:
         6a:96:97:c1:9a:ea:7b:d5:28:27:c1:e0:23:73:5d:5e:14:09:
         1e:fb:2c:f5:4f:b7:cd:b8:15:e5:0d:e7:9e:c7:f9:4b:87:52:
         22:59:ce:85:93:cf:d7:1c:38:e8:82:02:3e:b5:a6:d4:fb:93:
         13:af:a9:f8:6a:1c:3d:f2:7a:e1:89:f2:94:3d:0c:2f:30:60:
         a5:d1:50:be:86:80:f5:93:e1:1a:fc:18:2a:a5:88:0e:c8:7f:
         ff:e3:3d:7b:c9:f6:0f:c7:2d:ee:d8:71:de:f7:df:3b:56:4c:
         39:5c:1d:23:64:00:f7:74:c0:d9:a4:42:da:9c:24:5f:66:10:
         14:df:bc:97:f3:2a:c6:81:50:79:bc:65:7f:d5:04:9e:c7:d6:
         d0:9c:0e:95:cb:53:65:6c:ed:9a:a9:2f:a8:08:e4:4e:34:35:
         e9:f7:ec:0c:1c:a2:a0:32:55:c9:92:db:bc:1a:7e:2f:01:b5:
         fb:16:f2:5d:61:53:06:11:2a:e0:c7:46:ba:37:73:d1:e3:ec:
         24:03:c6:03:89:22:88:a8:ca:89:c0:3a:18:60:e9:d9:77:3d:
         c2:f7:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:37:52 2026 by rpki-client