Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa
File:                     8503825e-5495-3576-a211-aae2c1171607.roa (raw, json)
Hash identifier:          5zbT2RsYW0dl1s3sPbnK8tyoT07GvJcNgiAUiB+I/aQ=
Subject key identifier:   00:3C:49:0F:0C:C3:BD:35:1D:0F:09:17:5A:23:A4:0F:21:A7:BD:68
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B2DA471D25300B0B23660
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.32.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:2d:a4:71:d2:53:00:b0:b2:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=928498db-d68d-4bf6-8269-e812fa71832f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b8:58:ad:e3:03:ad:e6:68:6c:fb:e5:a7:e9:
                    f7:91:f4:d1:5c:77:72:04:2f:9a:98:ee:21:74:ca:
                    6d:62:a0:d2:22:0a:78:c6:f6:a8:c9:de:8a:d2:e4:
                    5a:0a:d8:d2:fe:86:9d:4c:52:a8:7b:fd:b3:7b:3b:
                    44:c4:85:ce:91:12:4b:ea:a2:59:3c:2a:c7:da:5d:
                    da:7a:a7:09:72:40:0d:ca:13:67:5a:55:49:15:b9:
                    52:48:ce:85:43:50:21:e7:18:ca:f8:54:e4:f8:ec:
                    b5:33:5a:af:9f:2d:66:c6:b9:6a:6a:81:db:c9:d2:
                    d2:61:03:da:f7:39:e8:ef:8d:91:76:ec:56:f5:94:
                    e9:38:18:68:25:6f:6a:1d:46:ea:9b:67:3e:b6:81:
                    b5:ab:ee:a4:b5:a1:fe:b6:d5:3e:fb:0f:81:ba:35:
                    b3:75:70:5d:05:06:63:56:0a:42:3e:08:65:80:b8:
                    69:a7:8c:ab:d3:85:ae:30:bf:ce:99:9b:2b:ed:17:
                    30:15:94:1c:9c:3d:bd:99:26:96:d4:3a:d1:32:b7:
                    1c:9a:b7:b2:02:03:46:d6:83:30:c3:78:1b:1d:c0:
                    78:f5:e5:7a:ee:6d:86:44:ff:b4:0f:95:a2:4a:b4:
                    54:b2:54:e7:5d:a7:a5:75:5b:1b:37:e7:e5:7e:d0:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3C:49:0F:0C:C3:BD:35:1D:0F:09:17:5A:23:A4:0F:21:A7:BD:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8503825e-5495-3576-a211-aae2c1171607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ab:44:ed:ff:58:cc:4e:ab:46:cd:85:f4:64:99:0c:f5:2b:
         87:ff:a8:1a:b0:ff:cf:8b:0a:c8:ed:30:b3:be:3a:e1:46:5d:
         20:87:f3:ba:70:e7:e3:f8:9c:9a:a7:55:36:7b:60:a6:5d:7f:
         42:e2:4c:c7:1c:90:f2:23:36:74:fc:8d:1d:a9:84:96:4a:4b:
         f5:9a:b6:a4:98:ee:11:60:17:83:0f:96:d7:d5:30:5e:42:84:
         7e:b4:cc:0c:ab:f3:ba:04:18:10:b8:e1:58:01:67:e2:1b:01:
         8d:60:dc:47:11:7b:73:1d:37:b2:48:40:0d:e6:e9:07:70:b6:
         80:38:ec:22:13:b2:d8:07:27:46:29:a1:9b:68:d2:50:13:83:
         e7:0a:8a:12:05:a3:17:93:2f:c5:e4:bd:f9:a6:ef:0c:cc:39:
         d4:bb:8a:0f:ca:08:76:fb:7e:97:f2:09:64:fb:3b:cf:24:30:
         b3:09:c1:cd:4e:ec:30:2f:12:de:10:e3:f9:df:f1:79:c7:53:
         73:65:7c:cc:06:a7:18:60:75:c8:75:a8:90:f3:5d:9b:21:9c:
         54:72:43:f6:a0:f7:c3:9d:22:eb:cf:ba:ea:67:d3:57:a2:5c:
         61:91:5d:b4:cd:9b:00:8a:d9:bb:de:f3:15:0a:50:57:c6:25:
         01:61:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:40:24 2026 by rpki-client