Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa
File:                     72dda1b5-1896-3122-a9fd-3eadfa41596d.roa (raw, json)
Hash identifier:          ijoCKincYq24ic66iGIVUusNU/y2t/aP3jLo0pj9yZ4=
Subject key identifier:   37:5C:19:D8:FE:FF:DB:D0:C3:B5:C2:D1:F5:11:24:0D:5A:31:F3:D0
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B1AE6DCEEC916E79D5180
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.34.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:1a:e6:dc:ee:c9:16:e7:9d:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=719b18b5-f63b-4b2f-b222-67807720e157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:d4:b6:8f:77:d1:79:ae:c2:75:75:cb:15:
                    bd:d7:d9:08:7d:d0:9d:42:fd:26:22:16:7d:81:11:
                    a7:cb:36:46:0a:f9:fe:58:54:d9:23:d9:04:a3:83:
                    68:6b:49:1d:55:fb:30:57:12:4d:2a:f4:fe:0f:31:
                    e6:88:22:64:45:ef:d4:b5:b7:4a:44:43:8a:19:4d:
                    7f:16:af:4a:be:52:38:27:08:9f:df:8c:e4:ec:f4:
                    46:c2:3d:67:2e:e3:44:e1:bd:e8:0f:53:da:a7:94:
                    19:79:6a:dd:36:c8:5f:b4:af:35:a3:df:65:65:9f:
                    35:ea:f8:92:65:db:f4:16:20:69:4c:74:8a:33:47:
                    0b:ba:b5:0a:b8:13:15:d0:06:a4:8e:3a:d2:99:87:
                    3e:56:3f:3c:a7:64:5c:5b:07:15:68:37:a8:4a:82:
                    7d:32:fb:e0:74:64:1e:94:f5:d4:57:b1:07:4f:e6:
                    4c:38:78:79:e6:dc:2a:0b:f2:7e:a4:a3:c6:61:9f:
                    2c:60:7b:f9:df:21:f8:e1:90:d3:54:a2:2e:ba:44:
                    c3:a0:59:75:a8:12:c8:a5:80:17:98:b1:eb:64:f6:
                    a0:f3:7d:9d:b2:e6:62:b0:1c:50:b5:db:f5:56:37:
                    af:77:12:eb:65:c9:a4:59:f8:cf:92:b3:4b:44:42:
                    35:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5C:19:D8:FE:FF:DB:D0:C3:B5:C2:D1:F5:11:24:0D:5A:31:F3:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72dda1b5-1896-3122-a9fd-3eadfa41596d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:06:db:9c:49:e2:36:c9:aa:42:b5:ed:a6:23:fb:e2:f9:d9:
         37:fb:8b:fc:8c:60:dc:00:6d:9d:54:c8:81:1b:a3:37:99:c1:
         93:19:82:33:4e:04:56:58:a1:a6:77:f6:1e:b8:b1:fc:7a:c3:
         4c:1c:fa:1f:64:eb:2c:29:d8:91:ad:5b:e4:24:63:38:45:ca:
         c8:5b:bd:d1:ad:02:94:1c:3e:a2:0f:83:38:d2:45:cd:bc:83:
         ab:32:bb:7b:9a:05:2a:cb:2c:20:52:9a:7a:d5:83:e6:0f:1f:
         e0:92:04:c8:04:c0:db:73:c6:16:bc:24:88:bc:a6:cd:07:25:
         5b:db:22:a4:92:0f:41:50:5a:c1:3d:9e:ce:f4:a8:02:9b:c7:
         e5:46:12:cb:68:57:f7:26:5c:e6:f7:e1:35:3f:5a:9c:12:a5:
         11:34:fb:ff:b3:99:eb:ff:80:39:92:27:af:0c:bf:de:b5:0a:
         48:62:7c:02:a2:0c:2f:27:48:e2:23:42:9f:00:40:5c:61:dd:
         89:9a:a6:9b:33:b5:2f:3d:1a:c3:59:d5:10:8e:03:c1:e3:7b:
         a2:31:9f:1f:25:7b:19:23:3d:f2:8d:5a:93:6a:13:d2:74:0f:
         4f:b3:f9:5c:cd:c9:25:00:95:b8:4f:cb:55:52:34:5f:56:ae:
         17:c2:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:57 2026 by rpki-client