Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa
File:                     27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa (raw, json)
Hash identifier:          rJEuOUdOPSNLuQabQoIkX1SqPA75DiAhUOMGVg1I8SA=
Subject key identifier:   6A:69:C6:51:3B:63:3E:22:E1:75:D1:68:36:A5:A1:2F:AB:31:27:71
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B219539319C99A701C400
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.38.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:21:95:39:31:9c:99:a7:01:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=5810621b-d568-4c27-a8e1-979d2729b27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:a4:d2:83:a4:c0:0b:9c:89:74:0d:16:27:
                    00:5c:8d:48:52:c6:d7:d1:30:65:75:f7:df:9f:a4:
                    f8:a8:bb:b1:f1:89:c4:23:08:2b:48:31:b3:0f:58:
                    38:2a:5c:a6:01:f5:38:a9:61:80:f7:78:ca:81:ac:
                    ac:4c:b6:0e:e8:fd:bf:1b:c7:00:7b:0d:fe:89:3c:
                    b8:79:e0:ba:10:f4:11:ef:ad:9d:4c:6a:0c:b9:2f:
                    58:8c:52:d5:a0:4b:cf:20:f5:98:ee:35:fe:8d:49:
                    26:6a:0a:32:e7:5e:6a:0b:34:21:eb:29:41:a5:b1:
                    da:ec:f1:3d:73:99:28:f9:c2:30:40:c8:91:5a:db:
                    57:99:4a:4b:f8:c3:6c:09:8c:56:28:54:65:07:b5:
                    6b:84:dc:ab:bf:d4:63:c2:ea:44:74:09:b6:eb:e0:
                    cb:7e:1d:54:a7:63:d8:88:4b:20:4b:89:6a:1d:c2:
                    f3:c4:26:c3:b0:9d:c5:93:82:a1:10:1e:46:e6:ac:
                    87:29:c4:5c:19:8e:91:e0:5a:32:60:01:ca:8f:2d:
                    8c:9e:42:2b:6f:92:bf:c0:05:90:da:f1:b4:98:ea:
                    5c:17:f5:ce:2d:08:18:4a:1e:4e:08:66:e7:f0:0e:
                    6f:bd:bf:f3:4d:38:43:5f:7f:67:17:58:e1:1b:1f:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:69:C6:51:3B:63:3E:22:E1:75:D1:68:36:A5:A1:2F:AB:31:27:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/27ff5311-a915-3e09-a9ae-83b8a539bb0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.38.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:65:b1:80:c7:34:de:91:3e:40:78:69:00:a9:8d:d6:8f:1a:
         9c:7d:39:b6:73:5c:6f:30:9d:d6:22:0e:91:85:7c:3f:27:b7:
         3c:b6:ea:db:ae:e5:82:b2:3f:49:6c:8e:22:38:0c:ed:fe:8a:
         a4:a3:b9:11:05:46:02:a5:e3:4e:1c:83:6c:ad:58:20:c7:f6:
         4c:62:10:95:d4:e3:08:6a:29:85:69:15:85:0c:58:25:20:62:
         ad:d6:dc:d0:64:95:bc:32:8e:0d:54:50:b5:18:98:db:0c:07:
         9b:40:28:0a:d9:47:f1:1c:f8:42:67:77:5b:fb:10:45:59:dd:
         59:af:39:c7:9e:b6:7d:44:25:fd:5e:57:77:8f:bb:4f:37:4e:
         a9:d3:d8:9d:73:b6:5f:7d:41:36:c1:10:b0:42:c7:1a:78:40:
         c0:fe:39:7d:89:dc:09:fe:ca:7e:a8:82:1c:02:28:0c:a1:c4:
         c3:2d:c2:8e:42:0a:32:9e:bb:94:65:14:82:62:11:d4:26:de:
         71:2c:10:b2:ee:0c:ce:85:30:bc:08:e7:27:bd:12:78:42:8e:
         a1:db:48:fe:d0:b6:2a:f6:e0:21:18:8a:fc:12:15:6a:96:42:
         d4:97:08:2d:ef:72:af:4a:a9:c7:80:b9:80:c9:ba:58:36:01:
         51:04:d5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:53 2026 by rpki-client