Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa
File:                     980080a2-72d2-314d-82d9-d9da50db7505.roa (raw, json)
Hash identifier:          DSSLpOeDTsvx/9mTy+H7wd673get0nNYyVeAgfSimtE=
Subject key identifier:   87:F1:1B:6B:2A:2C:70:4F:AC:E2:E9:BD:D8:5A:E2:CC:D5:B4:F1:AA
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EC7A1C4E52C849FCE4F024900
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     16591
IP address blocks:        136.58.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c4:e5:2c:84:9f:ce:4f:02:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=a358e42e-d14f-48f2-9d49-03db82d9bc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:50:8b:ee:e6:3a:b2:19:d7:36:93:b2:9a:2f:
                    08:73:c0:f3:91:ba:19:d3:d1:c0:2b:b0:6d:4b:25:
                    0c:37:3f:12:2a:1c:71:42:8f:84:e1:2b:02:5b:58:
                    98:b6:e9:26:7f:2d:61:ae:93:b6:7a:95:4b:15:c6:
                    f1:23:5c:ca:ad:95:ad:d9:a7:7d:8f:70:b4:b3:d7:
                    63:04:d1:29:8d:89:75:93:b4:d7:45:62:19:39:23:
                    e5:78:57:66:e3:53:42:45:d9:2b:21:e5:ff:b0:ab:
                    92:72:d3:5d:6a:bf:7a:e3:db:a3:e0:ea:60:5b:e1:
                    36:7e:5d:7e:0d:23:2d:b1:22:3f:62:fe:c2:23:e7:
                    e1:8f:b0:11:45:57:e4:a1:e7:13:d9:64:ce:a3:e0:
                    d6:b4:eb:c2:27:6b:d6:36:75:52:df:1e:ef:98:8b:
                    5e:d2:d0:97:9b:c4:76:10:2b:33:58:d5:31:ea:60:
                    0b:a8:bc:03:c3:33:a6:ae:21:7a:5c:f3:00:83:ac:
                    6a:4b:04:fb:c5:30:1d:4b:18:10:03:f4:66:77:85:
                    1f:dc:33:bb:bb:3f:41:e9:fc:2e:f1:03:a9:b6:a0:
                    83:fe:0f:58:a7:22:66:cb:46:d7:15:5d:57:87:d9:
                    ee:64:26:4f:12:ea:38:ae:b4:ea:a8:fb:95:9e:f8:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F1:1B:6B:2A:2C:70:4F:AC:E2:E9:BD:D8:5A:E2:CC:D5:B4:F1:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.58.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:96:8a:f1:52:dc:31:aa:54:db:72:91:1f:2f:e0:b6:52:4a:
         f5:22:26:ba:e9:09:98:b1:b9:22:86:ca:1e:58:38:65:45:46:
         a1:e4:e3:62:5d:71:18:3c:da:76:fd:51:c1:bf:3d:8d:51:6e:
         e9:31:97:6b:fc:4d:1d:48:c7:ca:1c:4a:00:33:d6:02:d8:dd:
         de:3e:1e:84:67:34:34:ab:71:c6:fb:12:bb:0e:13:f9:3a:ca:
         55:41:49:b4:7b:6d:b5:8f:a9:e6:b1:51:12:35:2c:1d:ca:a2:
         b7:fc:a9:a6:39:30:7b:fd:6d:5d:4d:40:f6:57:1f:c5:a8:fc:
         8a:76:e3:02:1d:18:33:0d:be:05:f3:15:4f:ef:a7:5f:6f:63:
         96:f3:71:ae:32:f0:5a:d2:55:68:05:ad:f0:88:d7:91:a5:cb:
         7e:cd:71:33:c1:56:13:ac:e0:1b:d1:02:54:0e:c3:a2:4f:6f:
         52:2a:65:97:5c:5c:e7:1b:1c:b4:55:58:5d:db:3e:2a:32:1a:
         04:07:2c:6f:9b:b5:f6:7e:d3:24:b9:85:2d:36:b7:fb:ff:f3:
         9a:4d:81:f5:d7:e2:a6:3a:18:ee:9b:c7:ac:2c:df:95:38:41:
         c8:9f:7a:98:e9:97:8c:3c:e4:f8:69:60:c1:0e:69:5a:fc:6a:
         0c:5b:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:03:06 2026 by rpki-client