Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91b04ad5-a3b1-371f-9c97-ece4da211d20.roa
File:                     91b04ad5-a3b1-371f-9c97-ece4da211d20.roa (raw, json)
Hash identifier:          BAXyfPl5Ecln47FrD6rBf9ynRrWXHxC8l+hExbU35IM=
Subject key identifier:   B4:2E:6D:25:51:42:C1:1D:20:DB:28:60:E6:22:DF:8E:9F:CC:41:3A
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DEF460460A90B3B4723311F00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91b04ad5-a3b1-371f-9c97-ece4da211d20.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     16591
IP address blocks:        136.59.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:04:60:a9:0b:3b:47:23:31:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=5a43ebd2-6c3c-40e4-90c4-92a54a6edfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:e6:54:55:8f:db:dd:0f:61:f0:04:ea:01:
                    31:32:e0:45:2a:eb:1a:2f:df:c4:52:74:0e:11:0b:
                    d9:c3:f5:25:ac:b1:81:71:8b:61:4e:12:c5:1f:c9:
                    54:fe:fa:db:4d:e1:a2:35:eb:d2:31:db:e4:92:eb:
                    8c:57:ad:3c:a8:aa:68:93:68:ff:7c:6e:f5:3d:0b:
                    7e:01:7d:7f:f3:6c:89:86:2f:8e:80:d0:a0:86:9c:
                    50:b6:a7:c3:1f:9a:a2:be:79:32:c4:80:2f:3a:d4:
                    64:55:10:27:0d:ce:21:a2:a7:bd:f0:a8:8f:ed:dc:
                    26:89:e7:0d:53:46:f6:b0:78:d2:ca:0a:6d:5c:00:
                    c2:94:3e:89:d8:00:6f:10:57:3c:df:80:39:55:a2:
                    3c:11:83:36:87:27:b0:99:36:58:69:9e:a1:3d:dd:
                    33:5e:93:27:70:26:9e:7d:38:c9:15:84:ad:88:e1:
                    8a:32:77:a3:93:ab:2f:59:2f:3e:fa:62:e1:7d:d3:
                    bd:7e:28:20:5d:4e:42:08:7b:f9:72:3e:f1:17:bc:
                    b4:85:9f:81:24:09:30:e7:d4:ff:0f:8c:e2:90:b5:
                    bc:d2:8b:83:de:a2:a3:c0:88:08:20:15:6a:a0:4e:
                    8b:38:38:07:2b:cc:91:ff:66:2f:27:3b:b3:df:e0:
                    e9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:6D:25:51:42:C1:1D:20:DB:28:60:E6:22:DF:8E:9F:CC:41:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91b04ad5-a3b1-371f-9c97-ece4da211d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.59.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:c5:05:d7:c6:42:bf:cb:bd:82:8d:50:c7:c5:c0:36:ef:
         5d:02:df:bb:b2:39:ad:7e:f6:86:93:82:6b:9e:9f:31:46:6f:
         02:fd:c8:9b:09:7f:9f:3f:82:9d:67:35:bf:04:ea:5a:d6:06:
         4b:60:2a:e5:7a:f9:2d:59:7a:ee:35:98:a3:97:ad:3b:e4:90:
         6f:a3:f5:5e:4e:3f:e7:c5:5a:43:78:9f:54:09:bb:b5:7a:93:
         dc:ad:75:98:48:7a:3d:78:90:80:6e:48:eb:3f:f4:0b:fb:5d:
         7f:ee:87:c3:f6:bd:94:5a:73:75:d5:55:45:ae:ff:0a:a4:f4:
         23:ce:73:cb:f3:3e:4b:31:f3:99:63:35:ee:81:6c:45:41:b3:
         bd:09:20:a2:b9:7d:8b:47:9d:de:7c:47:e8:4a:ff:a3:78:bd:
         33:ba:90:ad:9b:c9:91:22:06:74:a3:91:a2:06:ff:e7:fe:71:
         ce:cc:0b:00:5d:ed:c9:ab:a6:c8:82:c0:eb:05:4c:38:20:15:
         34:95:2b:f0:2b:c2:21:76:b9:77:24:5b:f1:c9:2f:d5:e8:7d:
         f3:b2:96:a0:74:f6:e5:55:a4:9f:43:a5:0a:6c:31:62:36:29:
         01:bd:d2:11:a3:da:37:33:cc:01:50:e4:29:3d:46:eb:a2:16:
         06:f3:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:37:40 2026 by rpki-client