Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa
File:                     3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa (raw, json)
Hash identifier:          /6Lauzg6XR6vZBr4rYJO1XLjv4wmm6qP2svnrDMSHZk=
Subject key identifier:   E1:E7:02:2B:2F:88:7B:BC:73:C7:56:FC:37:AD:D0:4A:4D:24:3A:8E
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B5C39137A59E84D275800
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.63.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5c:39:13:7a:59:e8:4d:27:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=02d2dced-8ce7-449a-9269-61e22f02f9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:66:ee:2d:f7:2f:b9:7b:38:38:ca:b5:7a:
                    ef:e0:a0:6b:c7:01:b4:48:31:e1:10:db:34:a6:c8:
                    7d:a7:93:50:e7:e6:0b:87:88:8f:04:3d:c9:87:17:
                    2e:61:c9:83:4e:09:44:57:3a:38:68:9d:c5:b2:44:
                    3c:8c:6a:d1:69:ae:73:15:76:44:7d:ca:67:c8:bd:
                    35:06:75:10:87:04:ca:2e:4e:1a:5b:5c:9c:76:be:
                    c2:34:6f:af:15:cc:fa:2b:9a:28:c5:5b:37:2e:11:
                    80:88:62:a9:17:f5:fb:35:63:72:0e:9c:c7:7b:a0:
                    21:bb:95:60:32:c7:31:d4:cf:5b:78:f4:cd:c4:6f:
                    e4:b1:88:8e:1a:bb:60:75:9d:e3:ee:50:b5:67:3a:
                    ed:bc:d6:80:b5:a8:47:b0:f0:22:ab:0e:a7:25:ac:
                    c4:0d:05:f2:e4:fe:2f:5d:2b:b0:37:32:7c:85:68:
                    2c:9c:09:88:57:c2:e3:5d:d4:c9:14:28:7f:6d:b1:
                    36:6c:db:6f:b8:44:80:2b:99:e9:df:64:57:e5:c0:
                    6a:d8:0c:69:45:68:7f:85:5d:25:5b:46:0b:bd:0c:
                    9d:07:ca:87:21:15:a3:05:fb:aa:82:9a:51:d9:75:
                    0e:65:7f:16:05:ef:1c:29:bd:fb:51:74:93:88:ca:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E7:02:2B:2F:88:7B:BC:73:C7:56:FC:37:AD:D0:4A:4D:24:3A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.63.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:c8:08:7b:6d:23:75:04:7e:73:32:d3:30:2e:12:ec:ef:
         a9:6e:89:42:32:81:e7:92:b4:93:e6:f7:3f:d6:cc:f9:6f:32:
         99:81:2b:1f:57:5d:4b:a3:ff:37:35:a0:ba:cf:09:89:75:63:
         f7:05:a9:2d:5f:72:4a:5f:26:4e:5b:fa:55:21:80:f7:08:c6:
         04:ac:9e:2c:e5:14:5d:f9:f1:49:5d:76:c6:56:c1:7c:a9:95:
         d2:17:05:e5:20:ba:fd:8b:ad:c1:9e:06:36:e8:4b:32:e5:0b:
         fb:ab:24:45:08:71:88:18:98:39:13:95:db:64:f5:61:bd:0b:
         d6:9e:08:68:e0:59:58:1b:40:33:3a:25:c0:83:66:5a:41:cf:
         31:d9:98:98:36:2e:17:29:94:c9:bb:db:9a:56:29:71:20:7f:
         de:ed:17:d6:56:ad:b3:e1:0a:7a:e6:5e:1a:c1:e0:f1:b2:29:
         3d:6a:b6:70:02:db:8e:9f:b7:53:29:bb:dc:37:5c:30:f0:40:
         db:5d:b1:e0:09:42:0e:74:65:01:62:08:f9:4a:64:8f:da:bb:
         1b:9c:03:17:43:14:50:26:29:31:db:15:7f:fc:9c:60:be:2c:
         4a:af:fb:d8:66:38:05:82:35:b6:cb:dc:26:e2:b3:f5:5b:ee:
         3e:fe:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:07 2026 by rpki-client