Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/58a8f4b8-461a-3dda-8a4d-e716b0eb71c2.roa
File:                     58a8f4b8-461a-3dda-8a4d-e716b0eb71c2.roa (raw, json)
Hash identifier:          pLSVbuQ1hC22WbIvAA+CLnKAfv0Ht5uKyLsr4NcHd54=
Subject key identifier:   A5:48:FA:7D:9D:55:48:21:15:69:96:3E:A7:F9:92:C2:85:07:2B:14
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D1B1A690A6918ADD3B4A4C400
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/58a8f4b8-461a-3dda-8a4d-e716b0eb71c2.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     16591
IP address blocks:        136.60.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:69:0a:69:18:ad:d3:b4:a4:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=e499f4b3-dd00-4f00-a935-c9eff33e13d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:ce:4c:07:65:0c:ab:d1:68:45:1b:d8:4d:
                    63:fe:b3:32:fe:4e:89:9f:45:6e:41:10:ce:43:75:
                    39:ef:3a:61:f0:ca:83:ce:41:2f:25:c3:71:c6:ea:
                    a8:0f:11:12:3c:ab:ba:01:dd:b9:6d:12:4f:d6:6d:
                    e9:f0:5c:1c:08:23:8a:fb:ab:ae:b4:98:51:c0:78:
                    75:20:a2:48:76:86:7b:84:d4:af:38:e8:29:a5:c9:
                    fa:f4:80:2f:40:65:af:e2:a0:7a:7d:cb:a1:d8:18:
                    a4:45:e5:10:42:c6:42:60:f3:28:fc:65:20:0f:79:
                    49:63:2f:7b:51:23:37:ab:ff:a2:b1:7a:1c:3e:d4:
                    a5:82:de:08:ae:82:81:a2:a3:82:5a:3a:ec:05:ee:
                    bb:84:b4:8a:b9:35:e6:ca:c5:c2:c9:53:07:79:39:
                    3d:5a:93:05:84:f7:06:73:a6:14:c4:23:c6:44:f3:
                    cd:5f:37:af:fe:3d:b8:a4:90:7e:c6:ec:e5:91:fc:
                    e2:7b:b2:79:d5:08:53:96:db:ba:3f:d8:dd:76:ef:
                    66:f6:0a:52:00:bd:89:86:c0:7e:56:d2:4d:aa:af:
                    ef:c4:7b:85:30:f0:e4:31:36:d0:07:6c:ff:fa:34:
                    50:3f:91:d5:e6:d3:7c:f7:e1:53:7e:1e:9e:a0:70:
                    2c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:48:FA:7D:9D:55:48:21:15:69:96:3E:A7:F9:92:C2:85:07:2B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/58a8f4b8-461a-3dda-8a4d-e716b0eb71c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.60.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:f1:c7:43:5e:43:12:3f:34:72:84:9e:69:6e:95:33:e0:
         70:4f:66:b3:ff:a2:ce:0a:cf:4d:df:30:c9:25:74:69:e9:f2:
         c8:a0:78:7a:54:ec:3a:00:58:bf:7e:b7:93:10:56:ba:40:77:
         a2:96:87:91:29:5a:f2:7a:2a:01:b6:61:8e:0d:ab:67:7f:60:
         a2:af:4d:09:d3:44:2f:32:6b:4e:4e:07:8c:f2:33:36:14:84:
         57:86:da:ed:a7:4e:cc:50:9b:b7:8c:93:21:9a:a9:9e:23:1d:
         04:87:73:80:1b:f7:48:38:ec:fe:a0:4d:22:c5:77:2f:61:a1:
         a7:be:b1:0b:63:19:19:9d:d5:bc:bf:60:ad:d1:15:52:24:e7:
         c1:4b:cb:08:78:32:07:fd:df:8f:bf:9d:7b:39:a8:88:22:7d:
         61:64:78:dd:ec:5a:38:b5:7f:bc:6d:52:6e:db:62:79:d0:0b:
         a4:77:8c:3e:c8:92:6f:5f:ee:e6:87:12:d2:02:53:fa:07:ed:
         c8:54:df:8e:16:ea:9d:61:c7:7b:7a:a1:0b:fb:e1:e5:2f:9c:
         2a:9f:2d:ac:46:d4:9b:11:9d:9f:2b:fb:cd:45:54:fa:bb:a7:
         77:f0:48:1d:96:a7:04:f3:11:de:03:ee:bb:42:0c:bb:ec:35:
         44:c9:95:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:33:35 2026 by rpki-client