Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/19e0b13d-972d-345a-ab73-5c57313f5b7c.roa
File:                     19e0b13d-972d-345a-ab73-5c57313f5b7c.roa (raw, json)
Hash identifier:          RbnRb6Frk8lBmpJKJuXt5OTXapIixzCpYgAARsCZZTY=
Subject key identifier:   5E:15:70:61:CC:44:B2:7A:B4:CD:5C:54:6F:DA:F6:11:3F:14:32:3C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B205FAA1D3EB120AA50C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/19e0b13d-972d-345a-ab73-5c57313f5b7c.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.33.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:20:5f:aa:1d:3e:b1:20:aa:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=7f2cd923-356f-464a-9f7a-945938826180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:10:8a:88:bf:74:f5:32:43:04:46:ba:bc:f6:
                    dc:a8:e1:11:50:21:27:5d:00:f7:29:f0:63:57:e8:
                    a7:35:d7:5e:b7:f9:2b:c7:eb:aa:61:a7:ae:be:04:
                    6e:d6:42:60:96:7a:f0:17:35:13:cf:7b:d1:0c:80:
                    6f:1f:40:d2:c5:f8:22:8f:16:be:c7:ac:53:42:ee:
                    33:cc:af:3d:7e:9e:f6:6c:f2:ea:33:f3:02:5c:9b:
                    60:30:8c:db:c0:46:b2:3a:95:de:98:13:5c:29:5a:
                    14:5f:cd:eb:92:f3:ca:c9:dd:59:9e:85:91:7a:32:
                    20:fd:e7:a4:fc:5e:f7:22:4c:b9:ff:d7:de:76:d8:
                    a8:ed:8c:bc:e4:67:ed:33:a4:20:50:a0:1e:4a:c1:
                    d1:1e:df:7f:bf:8d:fd:76:67:03:17:7f:36:73:dc:
                    5c:f9:6f:46:5c:98:96:d7:57:a7:b7:6f:5e:b1:ec:
                    50:fd:f0:23:47:c7:df:fc:db:c9:be:d1:eb:02:5c:
                    c2:15:31:9e:3c:f8:4a:7c:18:cb:7d:f1:ae:81:9c:
                    9c:95:6b:b4:e3:d5:78:03:81:07:76:0e:82:ac:05:
                    8a:6a:60:50:8e:d7:03:ae:57:4b:55:42:cf:3c:8f:
                    ac:1c:00:b2:01:5f:84:e7:90:ab:79:9d:00:be:83:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:15:70:61:CC:44:B2:7A:B4:CD:5C:54:6F:DA:F6:11:3F:14:32:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/19e0b13d-972d-345a-ab73-5c57313f5b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:96:2a:73:b1:25:5c:4a:47:95:c3:c8:2c:4b:03:fc:74:4a:
         68:b3:8e:65:24:89:ee:32:0d:aa:d1:19:b0:90:15:ee:d3:92:
         69:7c:ec:73:2e:90:6b:74:3c:ab:48:ee:3d:a6:db:5f:6a:98:
         9f:44:19:bc:fd:f3:c3:08:05:49:10:78:5a:61:c6:13:09:e6:
         18:92:b7:95:d0:a8:e7:15:8b:96:7c:e0:dc:e8:7b:f2:e4:25:
         76:30:37:34:f3:7a:b0:42:1a:08:2c:a6:09:60:c3:bb:c2:6c:
         3b:44:b5:a0:45:70:ca:3d:4e:a7:18:8c:ae:82:80:de:e4:80:
         9f:c9:4b:2e:df:55:c2:e5:8c:42:ef:fa:33:15:6c:ad:cf:7f:
         03:92:5f:42:c5:3f:09:ba:48:59:7c:ad:ed:3e:78:8e:f0:74:
         1d:29:a6:fd:d2:88:b2:b3:0a:4e:41:ac:58:26:2c:06:62:7e:
         bf:90:3d:15:99:a8:cc:1c:03:04:c5:a5:0b:98:82:4e:c8:ef:
         e9:ab:2a:76:17:e2:32:74:5b:a6:fe:9d:67:e9:ef:24:53:0e:
         ac:bc:23:56:8d:58:d3:33:32:2f:59:73:52:53:a9:a5:d0:0a:
         87:c2:49:7d:1e:08:27:2a:04:07:81:dd:b7:d0:d8:ed:b1:b8:
         f2:e9:46:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:32:02 2026 by rpki-client