Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/428c695f-b851-3ba7-bd48-9c9714ffd37a.roa
File:                     428c695f-b851-3ba7-bd48-9c9714ffd37a.roa (raw, json)
Hash identifier:          ViAdYTT83FlZN4mbduMg8eZRhOwIJPPDnexEkLh+hEk=
Subject key identifier:   4C:29:B0:85:E4:1D:98:89:B0:F2:62:27:74:B9:62:E4:75:BC:BC:D7
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B2A8D85D0719AEE481DA0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/428c695f-b851-3ba7-bd48-9c9714ffd37a.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.37.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:2a:8d:85:d0:71:9a:ee:48:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=3038f04f-bc27-4b1e-b0f7-9a6998cc9834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:0d:6b:cd:b8:32:93:67:2c:bc:66:74:21:
                    48:aa:f9:0d:55:db:33:0d:c2:39:18:ae:cf:c9:0f:
                    bd:11:73:57:6e:5c:27:89:16:aa:6b:04:3c:2e:0e:
                    12:a4:82:cc:f8:60:e0:74:68:24:f9:e4:d6:1f:85:
                    49:57:a9:53:82:e3:94:58:7c:48:88:c4:18:e5:ba:
                    9b:3f:9c:19:72:0d:38:71:e0:8e:ba:63:c9:b6:22:
                    75:37:bf:e5:9e:ba:b5:1b:a4:8e:04:0b:1c:ff:21:
                    33:91:af:74:0d:06:ab:82:a6:91:6b:7c:80:52:2e:
                    8c:3a:7c:5e:80:fa:e3:00:b6:b2:bd:06:e3:d4:08:
                    3c:2a:0b:3c:b4:22:e8:48:53:0c:53:63:f1:3a:42:
                    6c:a2:47:89:df:a9:3f:6e:9e:35:0d:2f:a2:80:d2:
                    2b:a5:3f:bd:a0:e7:e2:ca:66:fd:98:6f:21:8c:6e:
                    ff:59:df:c5:5a:25:07:fa:24:f7:67:36:93:09:60:
                    db:cd:9f:b5:d3:dc:8c:77:77:6c:d1:f1:9f:bd:31:
                    76:a0:22:71:66:23:99:8d:cf:71:10:ff:2f:88:d2:
                    78:e7:82:49:be:be:9a:8a:89:2d:ad:9e:f4:86:86:
                    d9:cc:80:51:6b:5d:07:19:0f:f2:26:ad:1b:50:51:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:29:B0:85:E4:1D:98:89:B0:F2:62:27:74:B9:62:E4:75:BC:BC:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/428c695f-b851-3ba7-bd48-9c9714ffd37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:55:9f:93:e6:6b:e9:07:e9:05:bb:43:7a:f2:05:c4:80:cb:
         e6:a8:87:01:58:45:70:f6:db:d7:a3:02:c0:2f:8b:bf:84:78:
         8b:cc:5d:69:7a:a3:f7:12:4e:60:c4:cd:2b:2b:48:15:3f:5d:
         3d:62:cf:38:d2:ed:4b:66:4f:96:5a:98:51:4c:8f:4b:89:c7:
         c1:f7:a8:35:1b:18:df:9a:b2:8f:c7:c5:2a:f6:34:ac:08:c5:
         fb:92:78:01:d7:8d:f0:52:1f:80:42:10:57:b5:1e:c8:62:f4:
         9e:f8:ff:8e:88:40:12:ac:7e:6d:fe:37:0a:ce:6b:36:07:48:
         2a:82:58:46:86:66:ea:43:5a:50:d9:e0:0f:21:fd:a9:39:95:
         da:d3:28:0f:77:34:b3:7b:13:7f:5a:42:a1:4d:1b:6f:bb:09:
         61:7f:1b:2c:7f:41:71:34:75:1e:fe:9a:cc:ba:0f:d6:b5:52:
         7a:94:71:a7:da:40:0e:a2:60:02:40:3e:a1:56:85:e1:8d:22:
         43:bd:56:cb:b3:e8:dc:21:de:7a:57:61:c9:d8:95:38:53:e7:
         9c:99:a0:c8:f2:79:99:c3:03:54:3d:d6:83:0b:3a:2f:b2:44:
         66:8d:df:df:e5:0d:f4:b8:3a:1a:c8:2c:e5:34:bf:43:28:eb:
         4d:b9:bb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:30:54 2026 by rpki-client