Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa
File:                     6fd4acdc-dcae-3060-9289-fccba0d195f6.roa (raw, json)
Hash identifier:          e4q8h/OJY4EhErnBnP4DRWoGKROXgrWUfLVy83r4tnU=
Subject key identifier:   2D:5A:FB:54:BE:03:6A:83:CE:26:58:3F:9B:91:96:00:69:9F:BF:14
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B552ACA6A0DD18C172C00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.61.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:55:2a:ca:6a:0d:d1:8c:17:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=3b71b607-c9f9-4d2d-9137-15068c5b9c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:17:8e:42:60:fb:e4:f5:3b:c4:a5:61:3e:
                    fa:39:2c:6b:6d:95:90:cc:d1:8d:af:80:7b:30:c5:
                    13:9c:36:9e:48:06:34:13:98:55:f3:02:a8:1a:d2:
                    13:26:e3:c9:9a:41:40:7c:bf:75:02:1b:db:d7:f3:
                    13:c8:b0:73:5b:99:fd:82:58:3e:1f:88:04:c2:80:
                    12:06:dc:5c:08:99:b6:4e:f7:e7:41:c2:df:88:b9:
                    de:5a:42:37:01:fb:c3:0d:b3:c1:9c:cd:36:24:ca:
                    ef:3d:80:48:47:d7:e4:fb:5a:95:7b:3e:09:44:29:
                    b3:62:3e:17:1a:c4:88:34:44:3f:27:03:65:7d:6e:
                    fc:8c:6c:e7:6f:ef:7b:2a:50:61:e9:a4:61:08:74:
                    ef:c6:51:00:9a:02:92:02:cc:00:4b:36:58:63:01:
                    bd:8f:05:fd:4b:5b:6d:95:3d:ee:b3:a4:30:4e:80:
                    67:57:e0:99:04:41:6a:fb:89:e6:a4:80:1c:03:08:
                    48:22:7c:67:90:02:36:99:9a:dc:9c:4d:8a:20:12:
                    3f:b5:b5:9e:48:9c:d6:83:72:50:d0:73:e3:40:a8:
                    d4:10:1f:0e:f5:37:24:6c:9e:a2:c1:3d:54:70:06:
                    de:b1:5f:61:5f:4b:e8:0f:2a:2c:40:16:84:7e:86:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5A:FB:54:BE:03:6A:83:CE:26:58:3F:9B:91:96:00:69:9F:BF:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a0:1c:bd:86:2d:9c:4b:4e:a3:32:dc:ab:3c:b6:0b:54:b3:
         6b:04:01:14:96:66:72:e8:51:5d:4e:2e:e4:2b:a8:8d:3f:f9:
         d6:ca:0a:d0:07:1f:19:f8:43:32:eb:5e:ad:b0:de:8f:b8:de:
         ae:dc:b6:5b:88:52:a5:ea:66:9e:2c:fe:02:d6:78:e8:ef:98:
         00:30:4f:71:ee:de:3f:77:b3:a6:00:5f:88:13:46:d1:1d:4a:
         68:73:cc:31:02:b2:74:38:6f:41:79:7c:e6:2d:08:77:3e:91:
         d4:24:64:90:f1:62:9e:20:d2:65:5b:3d:be:41:60:4f:ea:38:
         be:94:f3:c7:07:77:cf:f2:45:40:08:7d:f7:1d:36:10:bc:ad:
         b0:aa:0f:0b:21:b5:06:0f:51:44:df:ec:1d:8d:9d:49:f9:c7:
         fa:a2:50:95:60:1c:0e:26:ad:09:90:fc:0d:0f:5d:cc:1f:08:
         d5:01:96:32:d2:82:ea:fb:ac:20:b9:16:3a:f8:95:a0:88:94:
         aa:2f:86:20:a7:70:ed:bb:ee:29:71:e1:76:0a:e2:58:9b:56:
         fe:3c:15:56:ca:54:ca:60:c8:fa:d2:66:57:a7:ef:b2:b1:7e:
         18:80:b8:65:de:80:6d:1d:04:c1:7e:e4:cd:25:d1:0d:9e:22:
         93:e2:ec:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:40:29 2026 by rpki-client