Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6f8b0381-08ad-3ccb-a2a4-d7ab11bb5f39.roa
File:                     6f8b0381-08ad-3ccb-a2a4-d7ab11bb5f39.roa (raw, json)
Hash identifier:          P6C17x+Y3GxCONUkFpQX58FdOPHgq/zKYhCPEkH/JjU=
Subject key identifier:   67:78:57:5F:88:16:D3:66:1C:B7:9E:2E:59:18:BB:21:7C:92:F0:D4
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B1E04D8E5ABDD23CFE840
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6f8b0381-08ad-3ccb-a2a4-d7ab11bb5f39.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.37.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:1e:04:d8:e5:ab:dd:23:cf:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=9324b00e-faa8-4379-b697-d8dd928a8811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:f4:20:49:14:2d:8d:d9:9c:d7:5a:81:0e:
                    82:47:04:39:59:e1:d3:87:05:41:25:42:c9:80:36:
                    03:2f:7d:40:c2:ae:0c:6b:5a:13:36:ae:73:3a:12:
                    45:93:d2:01:48:97:62:ff:54:9d:fe:fa:86:eb:e7:
                    d4:48:dd:77:8e:4a:ab:03:87:e9:c3:6e:e1:9a:e3:
                    72:1a:49:6e:67:4a:de:bc:14:eb:f4:09:0e:1e:23:
                    73:7a:e8:78:31:9e:8c:fe:fc:0c:17:44:8f:c0:06:
                    5b:2b:1f:1b:15:29:2c:96:60:2c:1b:bb:55:c7:d3:
                    19:00:60:6c:ad:84:66:95:a0:08:53:f3:da:f8:01:
                    66:7a:41:a4:41:cc:70:78:1f:96:8c:e5:bd:03:ac:
                    d9:13:a3:1a:1f:38:e8:15:1a:df:77:05:3a:4c:fa:
                    8e:43:f1:92:c8:9f:6b:a3:76:3c:73:2e:85:c1:28:
                    08:9f:08:aa:97:9c:e1:26:19:b1:e5:18:8f:af:d1:
                    5a:c3:1a:44:5c:e2:03:f2:a7:8c:8c:c2:0b:57:37:
                    29:32:25:15:f9:9c:a7:09:c3:31:6d:77:86:7a:1b:
                    67:eb:e7:a9:d2:72:17:9b:8f:b5:c3:6a:e8:74:85:
                    6b:99:63:fc:78:50:9b:1e:66:21:c8:6e:d0:51:22:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:78:57:5F:88:16:D3:66:1C:B7:9E:2E:59:18:BB:21:7C:92:F0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6f8b0381-08ad-3ccb-a2a4-d7ab11bb5f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.37.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:41:d1:02:5f:d4:75:84:4f:ce:05:4c:6e:cb:eb:b0:1b:83:
         1e:84:d0:03:37:e2:ec:2b:a9:a4:51:55:a3:7f:d8:5a:bf:82:
         e2:1b:8b:29:e0:09:4b:c7:e7:3b:5d:1b:0e:0d:5a:a6:9b:01:
         fd:d5:20:f9:d7:7a:5f:3d:9f:de:59:8f:8a:fd:c0:2f:59:d4:
         04:4a:4e:be:f2:af:96:18:e4:c5:c5:e0:ab:5d:1f:24:c6:5c:
         15:13:47:27:e6:de:50:57:ac:2d:1b:8a:cd:ae:7c:05:79:eb:
         07:4c:30:26:44:36:6e:67:11:50:f6:1e:24:29:67:7b:a2:02:
         7c:e5:5c:13:66:a9:31:5e:28:26:f5:92:28:eb:89:14:1f:22:
         a5:0f:eb:1c:12:ae:10:10:2e:80:2e:40:20:67:0b:5f:6d:c7:
         e7:74:60:c5:55:b5:23:c5:15:47:6f:ca:aa:9a:0c:3d:b1:ba:
         82:b0:cd:36:c1:55:de:52:7f:eb:64:cb:f0:74:60:cf:e0:0e:
         04:d4:c3:95:2b:9f:bb:7b:7d:cf:9c:3d:36:a1:74:c5:8a:23:
         54:d4:2f:de:7e:18:23:3f:2b:fd:71:fe:47:bc:a2:e6:9d:76:
         50:e0:4e:d2:8d:fb:f9:9f:6e:2e:ea:7d:54:07:90:86:86:82:
         12:72:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:39:05 2026 by rpki-client