Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6301cd49-1728-3c66-a563-311faa8c9843.roa
File:                     6301cd49-1728-3c66-a563-311faa8c9843.roa (raw, json)
Hash identifier:          mIhJVc5MH38GNWIqNJS8e5PZ9Gof73uROE+zzybl188=
Subject key identifier:   AD:7C:5B:AC:44:5C:68:2B:31:A8:14:0F:3B:75:17:6C:FD:AD:C4:67
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B61268C2D34972297FB00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6301cd49-1728-3c66-a563-311faa8c9843.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.56.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:61:26:8c:2d:34:97:22:97:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=52152618-a772-4b9f-a766-2d5f634cd2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:08:63:8c:60:db:87:8d:96:02:5e:76:80:
                    95:e3:9e:b1:6a:d4:66:4c:e4:55:6f:4a:e2:73:40:
                    82:a7:00:45:29:71:d1:0f:d0:06:7e:92:94:d7:de:
                    50:3d:0c:92:d5:e9:ef:29:b3:b5:7d:64:6a:7b:05:
                    9f:70:a9:08:5d:6b:41:54:c8:85:8e:0e:22:ea:88:
                    19:e7:4d:5f:61:25:61:b0:3f:23:87:f8:c6:70:5d:
                    c2:39:80:ae:c8:f1:70:18:1e:b2:9b:52:14:08:72:
                    97:63:0e:f5:d3:6a:a9:9c:27:5d:1d:fa:0c:3a:9c:
                    45:fd:58:93:5a:5c:97:f4:4c:b9:17:e5:61:eb:b0:
                    ec:79:8c:dd:3e:7a:9d:9d:c9:90:63:04:73:d0:0f:
                    18:a1:9b:8d:9a:09:86:87:1d:4b:1f:99:e6:3a:c5:
                    e0:e7:7b:45:a3:9c:4e:35:b1:0f:7d:73:84:a0:13:
                    1b:cd:d3:fd:4b:5f:54:af:1c:b8:a0:64:b6:d6:15:
                    ad:60:07:af:59:a0:09:e3:8c:eb:a4:fb:f5:4f:73:
                    40:f4:42:56:2a:0b:c1:02:e8:8e:f7:1b:b3:81:d5:
                    48:e2:f6:d5:0c:1c:a0:62:cb:a4:73:13:17:3d:cf:
                    38:fc:a6:04:fa:7d:39:a3:96:b3:65:ca:db:0a:d1:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7C:5B:AC:44:5C:68:2B:31:A8:14:0F:3B:75:17:6C:FD:AD:C4:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6301cd49-1728-3c66-a563-311faa8c9843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.56.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1d:71:25:45:2b:a9:e2:a0:94:fd:9e:2c:57:e1:c9:96:96:
         1a:6f:8a:b5:33:77:20:04:e3:05:f2:89:4d:18:f3:2b:95:16:
         ae:02:75:a7:2f:c8:a2:4d:e7:20:3a:a1:4e:29:0c:20:52:0e:
         54:ae:91:07:3b:2e:3f:2d:aa:5e:07:f8:9b:51:f5:4b:82:bb:
         ed:37:7e:e8:2c:b7:22:d2:ff:34:8c:d3:5f:73:a9:7d:65:d4:
         1a:6a:a5:fe:43:b4:f9:26:85:26:a6:6a:3f:6d:1d:b5:be:74:
         64:ca:79:d1:ab:d3:35:fb:f5:da:1a:1e:91:f4:0d:87:55:23:
         1d:0f:ac:88:19:e6:4c:6b:c0:0b:5d:0b:ec:91:b5:5c:1e:12:
         93:e5:8b:34:cd:a4:82:24:f4:4f:ce:05:3c:0c:0a:aa:b2:11:
         3d:51:ac:c4:1a:77:c7:30:6e:56:59:28:92:31:87:1b:ae:61:
         40:cd:47:b3:23:58:e6:96:f8:09:18:88:cf:29:ba:90:46:82:
         dc:dd:94:84:44:4a:3d:83:14:5e:93:3e:86:0e:2d:6c:ed:d6:
         33:92:a9:77:14:fa:f4:47:bd:92:f9:df:b9:2a:99:11:d1:cd:
         00:e1:e2:1c:1e:61:99:1f:05:1d:9d:44:32:91:c6:34:31:06:
         ec:d0:b4:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG2EmjC00lyKX+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
NTIxNTI2MTgtYTc3Mi00YjlmLWE3NjYtMmQ1ZjYzNGNkMmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHUIY4xg24eNlgJedoCV456xatRmTORVb0ri
c0CCpwBFKXHRD9AGfpKU195QPQyS1envKbO1fWRqewWfcKkIXWtBVMiFjg4i6ogZ
501fYSVhsD8jh/jGcF3COYCuyPFwGB6ym1IUCHKXYw7102qpnCddHfoMOpxF/ViT
WlyX9Ey5F+Vh67DseYzdPnqdncmQYwRz0A8YoZuNmgmGhx1LH5nmOsXg53tFo5xO
NbEPfXOEoBMbzdP9S19Urxy4oGS21hWtYAevWaAJ44zrpPv1T3NA9EJWKgvBAuiO
9xuzgdVI4vbVDBygYsukcxMXPc84/KYE+n05o5azZcrbCtH5kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK18W6xEXGgrMagUDzt1F2z9rcRnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjMwMWNkNDktMTcyOC0z
YzY2LWE1NjMtMzExZmFhOGM5ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkdcSVFK6nioJT9nixX4cmWlhpvirUzdyAE4wXyiU0Y8yuVFq4Cdacv
yKJN5yA6oU4pDCBSDlSukQc7Lj8tql4H+JtR9UuCu+03fugstyLS/zSM019zqX1l
1Bpqpf5DtPkmhSamaj9tHbW+dGTKedGr0zX79doaHpH0DYdVIx0PrIgZ5kxrwAtd
C+yRtVweEpPlizTNpIIk9E/OBTwMCqqyET1RrMQad8cwblZZKJIxhxuuYUDNR7Mj
WOaW+AkYiM8pupBGgtzdlIRESj2DFF6TPoYOLWzt1jOSqXcU+vRHvZL537kqmRHR
zQDh4hweYZkfBR2dRDKRxjQxBuzQtOQ=
-----END CERTIFICATE-----
Generated at Fri May 22 17:40:27 2026 by rpki-client