Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72385118-a579-3512-aed4-269c991627a3.roa
File:                     72385118-a579-3512-aed4-269c991627a3.roa (raw, json)
Hash identifier:          sfY0DNNhWSHtEn//yODPqBuxtldcOY+KwZCreiNqH4U=
Subject key identifier:   92:3B:A8:6F:6D:91:67:52:BF:90:50:40:85:11:5C:8F:6A:5D:13:B0
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584ECBD1BEA462B19C27DA769410
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72385118-a579-3512-aed4-269c991627a3.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     16591
IP address blocks:        136.57.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:be:a4:62:b1:9c:27:da:76:94:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=75edbc66-183d-4818-a310-3b32f53958ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:19:dc:2a:66:42:9e:ae:7c:25:7e:68:0d:
                    4e:87:fb:9e:85:01:2a:c6:67:15:a0:ff:20:4d:32:
                    d5:64:17:db:4d:1c:52:be:7b:c7:3f:b1:ef:0a:24:
                    9d:e1:9c:55:c2:5a:b1:2d:35:ff:4d:3b:9e:8d:d6:
                    8f:eb:04:44:c7:aa:59:59:b4:f6:47:ed:4c:78:a3:
                    1a:e9:4a:8f:bb:91:66:d1:58:6f:93:25:94:d6:d7:
                    99:85:1c:77:3b:69:91:a2:74:0f:17:42:8c:2c:dc:
                    35:03:75:f6:fc:7b:34:25:89:34:ec:8b:99:e7:ca:
                    1b:0b:c4:71:a6:33:93:62:64:69:b6:7b:c0:e8:96:
                    65:2a:fa:21:c9:f4:5b:44:f0:93:5a:b9:67:62:25:
                    66:37:2c:fe:dc:a5:ef:d3:3b:64:4d:7b:18:e1:d9:
                    10:f6:14:59:d7:0b:d1:24:fc:bd:57:86:aa:20:8c:
                    04:5d:d4:92:08:bc:c7:b1:53:76:4f:48:8b:c1:80:
                    ca:1f:84:3b:ca:93:c1:72:8b:a6:85:00:08:0d:be:
                    a9:ce:94:46:09:49:54:ae:2b:57:ab:b2:63:77:74:
                    8b:da:39:6a:bc:04:30:87:37:59:8f:53:f1:28:02:
                    45:72:a5:f1:f1:4c:44:7f:01:3e:2c:5c:2c:22:ad:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3B:A8:6F:6D:91:67:52:BF:90:50:40:85:11:5C:8F:6A:5D:13:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72385118-a579-3512-aed4-269c991627a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:45:66:49:fc:28:24:be:2a:e0:5f:b6:79:e3:04:ee:1f:cb:
         75:f2:9d:1a:a1:22:fa:8e:14:ad:49:e4:d1:b9:be:0c:18:e3:
         77:3f:c8:f3:53:51:27:5d:ff:c6:14:92:9e:b2:ed:16:08:d2:
         92:d9:0c:11:fe:90:55:2e:a5:d7:92:b9:e2:b4:a8:4a:92:09:
         d3:1b:58:c1:e4:5b:ef:88:1c:80:61:4d:7f:ca:b2:1b:1f:1c:
         1a:d0:df:9a:83:d2:61:5d:94:88:3f:53:b5:f4:aa:46:e5:0e:
         49:e0:e2:af:24:0a:45:02:ca:9a:e8:ee:c8:38:f6:d8:1f:b8:
         33:08:b5:f6:92:fe:90:b6:13:fd:18:a3:ff:1a:2b:89:96:ef:
         d9:02:d0:44:4e:0c:fd:32:de:31:d3:12:06:f3:2c:86:16:96:
         fd:db:3d:a3:7d:e7:d6:4a:8f:22:96:27:1a:f2:83:b8:fe:d5:
         5e:83:d2:81:eb:f7:af:14:f2:56:34:b2:c3:cb:a4:f2:8a:61:
         b3:d2:27:59:38:33:7b:41:b2:b5:12:13:89:e1:52:e7:e2:3e:
         a8:8d:17:99:97:3c:86:86:bf:3e:a3:42:29:ac:13:70:af:9c:
         b9:8d:6a:27:a5:5c:d0:d9:9d:2e:35:da:a3:f8:da:33:b3:0c:
         48:cc:1d:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0b6kYrGcJ9p2lBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
NzVlZGJjNjYtMTgzZC00ODE4LWEzMTAtM2IzMmY1Mzk1OGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE4Z3CpmQp6ufCV+aA1Oh/uehQEqxmcVoP8g
TTLVZBfbTRxSvnvHP7HvCiSd4ZxVwlqxLTX/TTuejdaP6wREx6pZWbT2R+1MeKMa
6UqPu5Fm0VhvkyWU1teZhRx3O2mRonQPF0KMLNw1A3X2/Hs0JYk07IuZ58obC8Rx
pjOTYmRptnvA6JZlKvohyfRbRPCTWrlnYiVmNyz+3KXv0ztkTXsY4dkQ9hRZ1wvR
JPy9V4aqIIwEXdSSCLzHsVN2T0iLwYDKH4Q7ypPBcoumhQAIDb6pzpRGCUlUritX
q7Jjd3SL2jlqvAQwhzdZj1PxKAJFcqXx8UxEfwE+LFwsIq0rOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJI7qG9tkWdSv5BQQIURXI9qXROwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzIzODUxMTgtYTU3OS0z
NTEyLWFlZDQtMjY5Yzk5MTYyN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBFZkn8KCS+KuBftnnjBO4fy3XynRqhIvqOFK1J5NG5vgwY43c/yPNT
USdd/8YUkp6y7RYI0pLZDBH+kFUupdeSueK0qEqSCdMbWMHkW++IHIBhTX/Kshsf
HBrQ35qD0mFdlIg/U7X0qkblDkng4q8kCkUCypro7sg49tgfuDMItfaS/pC2E/0Y
o/8aK4mW79kC0ERODP0y3jHTEgbzLIYWlv3bPaN959ZKjyKWJxryg7j+1V6D0oHr
968U8lY0ssPLpPKKYbPSJ1k4M3tBsrUSE4nhUufiPqiNF5mXPIaGvz6jQimsE3Cv
nLmNaielXNDZnS412qP42jOzDEjMHeY=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:56 2026 by rpki-client