Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa
File:                     a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa (raw, json)
Hash identifier:          AAEkzXcvSYN4t1Q1W70MybwzqnzrUvT/kmzdF2HLZeE=
Subject key identifier:   15:11:B4:C3:53:F9:BE:48:A8:61:20:BC:91:03:4F:48:85:EC:9E:11
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B5A09A03300CBAC1B3100
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.57.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5a:09:a0:33:00:cb:ac:1b:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=aa3c3a58-eb09-41d1-acb6-2614dfe3d2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:56:57:ca:97:ca:76:c3:fb:62:ce:6e:80:
                    7f:60:94:19:33:79:01:18:5f:d2:5e:67:69:6b:3e:
                    6f:c4:27:22:20:9e:ef:b4:44:23:14:0a:2d:d3:87:
                    60:0a:14:18:05:b0:d6:84:cd:c5:af:52:ab:c0:b9:
                    74:cc:5c:ab:f4:80:66:71:3a:ff:6b:22:28:0f:13:
                    ba:fa:90:ac:a7:9c:12:c6:e9:5d:f6:39:e6:88:89:
                    c4:b3:e8:6b:14:4a:8a:ae:a3:a4:2a:0e:92:c0:dd:
                    08:8e:3d:45:a6:24:0e:fe:29:e5:12:b2:aa:42:00:
                    4f:9a:91:cd:66:8d:2d:10:f4:d5:19:82:f8:77:a2:
                    56:1e:13:4c:6c:54:7a:6c:0a:68:dc:ef:c6:1c:91:
                    86:68:ec:53:7c:31:da:af:ed:f8:da:86:ba:0b:30:
                    9c:ce:d3:34:28:63:e6:e0:ad:60:bd:52:4a:ca:1e:
                    52:1a:24:0e:b1:b8:f5:e6:3f:8a:7a:9a:df:2c:42:
                    7c:c0:d2:53:c9:28:75:ff:7d:1d:c0:8d:ea:f0:85:
                    5e:20:87:70:44:76:c6:69:c7:7d:40:97:39:4f:48:
                    0d:45:41:d5:12:34:9b:ef:a2:89:62:35:96:be:fb:
                    81:b8:86:d1:fe:fd:be:33:e4:62:87:23:54:2e:fd:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:11:B4:C3:53:F9:BE:48:A8:61:20:BC:91:03:4F:48:85:EC:9E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a2091dbe-0412-3f1a-9898-f8d8dd235ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:ff:16:3f:94:45:1c:64:33:38:9f:ae:ba:74:28:d4:8f:
         01:ab:e2:95:b8:24:79:8a:6a:63:cd:dd:4d:a0:3a:c0:79:87:
         59:cd:67:f2:55:f9:56:46:52:f1:8f:cc:70:2d:86:07:09:91:
         67:53:0c:13:49:67:d0:f1:80:87:cc:19:e1:49:47:ec:f3:9f:
         d4:29:02:c7:7f:96:26:7c:d0:58:dd:99:f9:81:bf:3f:82:24:
         7f:9f:41:bf:ca:06:9e:d5:17:23:bf:9b:2f:83:76:54:11:01:
         c7:af:b3:21:8b:4d:52:b5:b6:f7:f2:f1:b1:59:0d:f1:9f:0d:
         0a:04:ff:78:ec:32:75:d4:d8:aa:3b:32:af:17:42:cd:b5:30:
         2e:3f:48:50:d2:bd:37:60:ca:e7:13:e7:06:ed:bb:95:4c:c6:
         bd:f4:e2:ac:53:0d:cd:2d:8d:bd:ed:b8:78:e7:21:18:7a:ae:
         56:4d:96:51:ce:28:05:ef:c0:a1:06:a1:65:69:b2:08:8d:f1:
         7b:d8:b8:6d:99:8e:bd:14:67:07:84:9b:cd:b3:c5:e6:09:a1:
         5c:00:a1:ec:fc:c7:bc:54:6f:c6:93:74:24:0f:28:43:4d:9f:
         3d:6e:58:ec:e3:a3:a5:bb:d5:a3:7c:0b:a8:35:48:80:57:84:
         a5:c0:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:41:05 2026 by rpki-client