Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/66bc59b1-30e4-3238-bddf-2e2606e11d34.roa
File:                     66bc59b1-30e4-3238-bddf-2e2606e11d34.roa (raw, json)
Hash identifier:          tAE73Jel4MNcJhy4CCQdGXBue37gbvBpirNKCmz5yNk=
Subject key identifier:   CD:76:33:4A:E9:C5:70:1E:F4:00:9C:D6:5B:EC:1D:4C:F3:9B:E9:97
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B1A1CB0AFBF42DE30F580
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/66bc59b1-30e4-3238-bddf-2e2606e11d34.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.61.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:1a:1c:b0:af:bf:42:de:30:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=07c78ecd-2f49-460f-87a1-4d629247ed7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:d2:07:d9:ef:5e:d6:43:60:11:9b:6f:5b:
                    3b:0f:83:96:5f:92:d6:36:42:fe:b1:8f:d6:f7:b2:
                    20:fe:1e:92:b6:d5:2d:82:42:a2:6a:59:c8:24:b6:
                    ee:84:d1:bb:56:93:0c:d1:3a:7d:3e:d0:a8:22:08:
                    70:71:f5:2b:db:a6:15:ab:5b:09:98:2d:4e:4f:8d:
                    0b:6d:8e:c8:71:08:d0:37:95:69:64:09:f1:90:7f:
                    09:91:11:49:49:36:0c:70:aa:f0:c9:f9:09:43:29:
                    e2:a2:5b:c4:60:28:5c:79:2d:c0:0d:7e:63:a7:ba:
                    3f:1d:56:55:3e:b1:27:34:da:7d:5f:61:90:8c:64:
                    3b:b2:b1:8b:87:65:3f:41:70:90:e6:45:d5:20:19:
                    2f:12:34:8c:d2:b6:a2:29:da:87:e8:59:53:78:7e:
                    50:de:67:48:9c:e7:a4:46:f7:60:43:6e:b7:04:f8:
                    83:36:1c:79:86:9d:75:f4:89:15:97:6c:d6:c3:42:
                    15:44:8e:77:e1:da:63:a1:bc:93:c1:6e:dc:aa:63:
                    f3:d2:de:c3:59:a8:d1:ce:3d:b1:be:3d:c5:90:49:
                    5f:b6:ee:f9:35:43:0f:06:21:66:bb:e4:0b:ff:6e:
                    44:99:c4:dd:b0:84:a2:22:d2:c8:cb:a4:87:0c:11:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:76:33:4A:E9:C5:70:1E:F4:00:9C:D6:5B:EC:1D:4C:F3:9B:E9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/66bc59b1-30e4-3238-bddf-2e2606e11d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:bb:75:15:76:91:ab:27:09:33:6b:b2:ab:e7:48:56:30:1e:
         f8:72:dd:7d:ba:26:a9:c8:7e:b3:7a:7d:12:a2:b0:70:a8:35:
         d5:ba:c9:a2:db:83:c3:f1:d3:2e:6a:13:7e:d3:f9:fc:1b:7e:
         3e:81:a7:b1:40:8f:36:4c:26:5a:6a:5c:44:dd:7c:72:91:0d:
         c2:9e:1b:76:ee:57:f3:4e:07:42:68:40:0c:97:74:eb:3f:4d:
         fd:71:49:03:92:88:1f:3a:2e:d4:c3:f3:b2:d0:8f:67:56:df:
         82:6f:a8:1d:dc:f8:03:44:b1:8d:75:10:3a:7e:18:34:43:3e:
         4a:f9:b3:12:eb:d9:39:02:60:db:29:68:87:bc:4d:8d:35:86:
         d7:7f:d7:43:45:39:7c:ee:8b:79:2d:f7:94:d8:71:fc:e5:4d:
         0f:58:79:e3:5b:00:00:32:99:6e:64:d5:00:35:21:16:3f:3f:
         8d:ff:8f:1c:c8:37:5d:33:05:e0:bf:a6:fb:32:3b:18:f0:79:
         b8:e3:63:c7:23:32:f0:7e:62:5b:d1:14:16:66:00:5f:27:52:
         e8:ec:34:1a:6d:19:bd:78:74:ec:24:ea:85:f7:ed:f5:f2:4d:
         9d:81:78:f7:97:90:a0:f1:0b:97:ff:36:7c:ad:70:33:d5:0b:
         18:c7:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:42 2026 by rpki-client