Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5db13a3b-52ef-3dcb-a11b-45500c04afa5.roa
File:                     5db13a3b-52ef-3dcb-a11b-45500c04afa5.roa (raw, json)
Hash identifier:          NP/SjFRN6ugt13F6lq5rlQY1cs/qzChc6bwyS0uXFc0=
Subject key identifier:   06:C5:05:73:D8:40:61:CB:E2:A6:E8:BF:0B:54:92:CE:D7:50:23:33
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584F5EFDD5B12C1910BAA366D2E0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5db13a3b-52ef-3dcb-a11b-45500c04afa5.roa
Signing time:             Fri 02 Oct 2026 18:12:53 +0000
ROA not before:           Fri 02 Oct 2026 18:12:53 +0000
ROA not after:            Thu 31 Dec 2026 19:12:53 +0000
asID:                     16591
IP address blocks:        136.52.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:fd:d5:b1:2c:19:10:ba:a3:66:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Oct  2 18:12:53 2026 GMT
            Not After : Dec 31 19:12:53 2026 GMT
        Subject: CN=6f3354e4-1ad3-4065-9b45-57f745202cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:c7:56:a5:a2:65:c0:61:92:b0:b0:40:b7:
                    b9:1b:50:22:47:d7:d6:f9:93:87:ce:6d:23:19:fc:
                    9e:19:85:7d:ea:a9:bc:a4:4c:c2:4a:dd:7d:5d:b4:
                    6c:ff:5c:85:ee:4f:d3:e8:eb:7a:16:b9:49:62:da:
                    71:f4:d5:29:31:f4:dc:d0:50:f4:df:c9:1a:5a:dc:
                    b4:c2:80:5b:00:f5:88:ba:78:b3:35:c5:1f:4b:20:
                    57:28:6f:9b:02:e9:60:50:ad:d1:bf:d3:16:c5:ef:
                    46:e2:c0:8a:a4:0b:ef:b2:4c:94:b0:14:11:fc:06:
                    44:3d:15:09:c6:20:a7:c4:28:6c:9c:96:10:71:09:
                    41:47:5e:0d:ea:eb:e0:83:c2:6d:94:26:17:34:88:
                    97:a5:c8:fd:fe:f5:73:f4:74:11:cc:5a:45:c5:f1:
                    2c:2d:99:38:77:23:0f:6b:58:ad:73:2e:08:68:4a:
                    d4:5c:6f:a1:62:7d:57:07:be:e4:79:f0:1f:db:0e:
                    b3:ca:d9:ff:13:74:0c:c9:4b:9a:c2:88:b5:5d:cf:
                    4c:34:90:67:26:22:83:41:d1:6e:48:f9:d2:8e:1e:
                    18:5a:59:08:00:73:a5:f1:de:ec:ce:67:7f:94:2b:
                    17:c0:83:b5:82:a6:5e:96:a4:90:b6:b1:b5:59:6b:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C5:05:73:D8:40:61:CB:E2:A6:E8:BF:0B:54:92:CE:D7:50:23:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5db13a3b-52ef-3dcb-a11b-45500c04afa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.52.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:cd:32:3d:ff:99:6a:5d:9c:f3:72:60:13:cf:8d:65:ba:
         f0:af:4f:72:50:5f:c6:a6:1b:b1:ee:ce:11:18:7f:b5:10:1f:
         bd:8d:65:10:21:69:b3:6d:6b:06:5d:13:46:f6:eb:c5:51:d7:
         f9:d7:b9:dd:a4:88:5a:66:8d:d8:04:b5:ad:e4:09:c1:d5:17:
         70:07:77:11:3a:0a:cd:63:e8:54:75:d8:4b:a0:91:d1:00:7f:
         0f:bb:e5:28:be:e8:2b:a1:4c:02:64:aa:e1:d4:46:c1:06:dd:
         3e:d3:1d:41:95:6b:48:83:01:34:d2:25:82:2d:52:0d:f3:3b:
         c9:78:54:c2:19:1c:2b:9d:e4:4f:48:2e:4a:6b:a5:d6:4e:a3:
         6f:31:30:c9:e5:78:e6:b4:5b:99:3b:d4:b2:61:1e:fe:61:f4:
         2f:88:1b:3e:8d:c1:dc:09:4d:72:50:a7:2c:6a:ed:86:9f:98:
         b6:00:d2:f8:4d:97:0a:6f:51:85:c4:d8:00:6e:92:ce:42:c1:
         53:f6:9c:f3:ca:44:f9:28:ab:ae:da:96:5a:16:5e:bc:3a:fd:
         b8:86:63:7d:9f:44:3d:e3:8f:31:34:91:d9:00:cc:42:63:c0:
         0e:7a:41:83:df:3b:07:f9:ce:80:b0:b9:71:46:61:6a:8e:d2:
         f0:80:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:56:26 2026 by rpki-client