Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/457728f7-f101-3968-af04-bee701511c93.roa
File:                     457728f7-f101-3968-af04-bee701511c93.roa (raw, json)
Hash identifier:          hWDVWWLoVkYLHXH98L9XekQ2FbF9y0POJq5nyOVAp0A=
Subject key identifier:   25:C3:55:17:38:62:15:50:45:86:66:E8:83:40:75:5B:30:AC:B5:8A
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B5B1450A66B5C2E370CE0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/457728f7-f101-3968-af04-bee701511c93.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.48.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5b:14:50:a6:6b:5c:2e:37:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=fdab7040-0ab4-46c2-b5ef-d7c009fa94b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:96:10:eb:84:66:d2:e6:4c:49:53:a5:6b:
                    29:29:9a:83:c9:b3:ae:04:2c:29:f4:55:0c:34:72:
                    36:4f:9b:ca:e7:f5:3a:9e:5e:9e:dd:60:b8:98:bd:
                    63:81:93:2e:45:ae:dd:e9:58:8c:28:b0:75:d2:bd:
                    5b:98:ac:67:b8:78:14:f8:c7:50:65:f2:da:2b:ef:
                    a3:3d:a6:5c:35:c2:b5:56:05:38:d9:d4:6b:18:cd:
                    e2:4a:a2:48:aa:35:f2:11:b6:a4:f9:2d:6d:cb:2a:
                    dc:f9:26:f8:2d:9f:57:6c:5f:85:91:67:84:d3:c3:
                    13:a2:cf:ad:62:cd:78:b9:d0:c3:49:db:68:7c:e2:
                    32:c3:5b:69:3d:b2:eb:b0:5b:7f:59:fb:11:10:f5:
                    96:f2:91:05:5d:ba:ba:ba:0f:ce:56:d3:13:5d:2e:
                    94:46:f6:f0:5d:57:82:72:b5:f2:a6:43:80:5b:b7:
                    53:8e:84:2c:08:bd:e7:29:25:71:26:e5:8f:8e:51:
                    ac:39:db:36:9b:03:43:90:5e:47:a5:68:64:b0:c1:
                    8e:30:99:e4:2d:20:d3:77:9f:c6:9a:de:19:4a:77:
                    5e:d9:e8:54:2f:08:2d:d9:7f:67:4a:51:5e:d8:09:
                    62:69:ef:1e:82:87:53:a0:e9:5d:6c:fa:fa:2f:4a:
                    d4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:55:17:38:62:15:50:45:86:66:E8:83:40:75:5B:30:AC:B5:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/457728f7-f101-3968-af04-bee701511c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.48.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:db:22:73:3d:a2:b9:03:6c:c9:97:80:19:5b:78:04:71:
         25:d6:ab:11:fa:87:db:e3:e6:9a:36:89:cb:16:e2:c0:e7:ce:
         18:28:73:fd:aa:76:37:2d:52:6e:b4:c2:2b:34:41:24:40:da:
         5e:2a:92:e0:b8:b3:57:52:bb:50:7f:76:4a:d6:6a:2f:8b:c6:
         1e:22:96:66:6d:bc:1f:ab:88:87:ba:70:2d:d1:ac:69:01:60:
         4e:ea:a4:22:a7:98:f6:75:63:47:a3:c2:87:4c:7c:9d:35:d3:
         10:36:be:29:69:78:03:b3:e2:44:49:e8:37:fc:23:81:f5:25:
         87:31:a7:47:74:54:30:b3:99:1a:45:77:12:7d:38:30:43:9f:
         5c:07:5d:9c:a8:38:74:15:f8:93:89:6a:ac:4e:5a:28:12:29:
         aa:f1:59:36:b0:35:e8:09:e8:20:27:ab:e1:8c:b4:38:e4:88:
         c7:f2:fa:5d:4c:50:90:d3:8a:99:44:ba:3d:a1:b6:6a:b4:ec:
         33:39:c7:23:28:03:5b:01:e6:03:23:03:91:e6:7c:4b:9c:59:
         ee:ef:81:20:db:7e:a9:65:5d:a2:a7:8a:c5:be:d3:13:a5:54:
         72:e0:e5:18:8e:b2:60:96:85:59:fb:34:87:4a:0a:bb:7d:ba:
         ce:c6:bf:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1sUUKZrXC43DOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
ZmRhYjcwNDAtMGFiNC00NmMyLWI1ZWYtZDdjMDA5ZmE5NGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE6WEOuEZtLmTElTpWspKZqDybOuBCwp9FUM
NHI2T5vK5/U6nl6e3WC4mL1jgZMuRa7d6ViMKLB10r1bmKxnuHgU+MdQZfLaK++j
PaZcNcK1VgU42dRrGM3iSqJIqjXyEbak+S1tyyrc+Sb4LZ9XbF+FkWeE08MTos+t
Ys14udDDSdtofOIyw1tpPbLrsFt/WfsREPWW8pEFXbq6ug/OVtMTXS6URvbwXVeC
crXypkOAW7dTjoQsCL3nKSVxJuWPjlGsOds2mwNDkF5HpWhksMGOMJnkLSDTd5/G
mt4ZSnde2ehULwgt2X9nSlFe2Aliae8egodToOldbPr6L0rUsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXDVRc4YhVQRYZm6INAdVswrLWKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDU3NzI4ZjctZjEwMS0z
OTY4LWFmMDQtYmVlNzAxNTExYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOn2yJzPaK5A2zJl4AZW3gEcSXWqxH6h9vj5po2icsW4sDnzhgoc/2q
djctUm60wis0QSRA2l4qkuC4s1dSu1B/dkrWai+Lxh4ilmZtvB+riIe6cC3RrGkB
YE7qpCKnmPZ1Y0ejwodMfJ010xA2vilpeAOz4kRJ6Df8I4H1JYcxp0d0VDCzmRpF
dxJ9ODBDn1wHXZyoOHQV+JOJaqxOWigSKarxWTawNegJ6CAnq+GMtDjkiMfy+l1M
UJDTiplEuj2htmq07DM5xyMoA1sB5gMjA5HmfEucWe7vgSDbfqllXaKnisW+0xOl
VHLg5RiOsmCWhVn7NIdKCrt9us7Gv2w=
-----END CERTIFICATE-----
Generated at Fri May 22 17:40:57 2026 by rpki-client