Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a7d64815-4db9-307b-aa0f-90cad02fc0bf.roa
File:                     a7d64815-4db9-307b-aa0f-90cad02fc0bf.roa (raw, json)
Hash identifier:          4ZrxpI7sxr7ySgAKqjyF6oT9a/UtvXyw8HqY8yXrBDo=
Subject key identifier:   B6:F0:5B:C9:19:EA:AB:8E:07:7A:4E:A0:73:92:B1:69:FF:6C:7F:D1
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B64577A5C760DF2394800
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a7d64815-4db9-307b-aa0f-90cad02fc0bf.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.62.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:64:57:7a:5c:76:0d:f2:39:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=b865e11d-87ef-4bab-824f-9142cad8f79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:c6:20:86:8e:02:96:1b:3e:5a:89:f1:82:
                    72:b4:55:c9:ca:ad:7f:bf:d5:91:76:fc:87:99:88:
                    ae:47:a6:00:bd:48:4b:dd:de:05:2a:c9:65:a0:a0:
                    89:0c:d9:71:1f:eb:6f:58:d4:50:03:c2:fb:e1:dc:
                    2d:48:27:53:36:1a:db:6c:f2:80:5f:7a:10:6e:5f:
                    33:e6:3f:5b:19:23:22:41:5c:c2:5c:f9:55:87:e4:
                    33:22:b6:b8:cd:3a:8d:44:0c:17:c6:e0:01:1a:c3:
                    e5:d6:94:6e:a3:57:14:da:66:26:42:8b:e0:f2:7c:
                    b1:2a:70:00:e7:4d:9a:7c:99:1a:34:57:cf:70:26:
                    b2:ca:e8:bf:f9:00:fb:80:57:4f:26:f2:3c:0f:aa:
                    9b:c8:b4:59:02:1b:e4:3d:b2:22:e8:ad:1c:0c:be:
                    58:a7:95:24:11:7f:57:67:9c:03:82:07:e3:aa:0a:
                    60:95:c3:1d:1c:f6:55:78:e3:78:ff:22:1b:ff:ac:
                    77:61:3f:d3:3b:29:02:aa:d8:1d:24:80:da:40:83:
                    24:83:c4:54:2f:1e:8b:ca:9c:ee:b6:9a:81:cf:fc:
                    e2:61:0b:eb:49:97:39:a4:e8:59:27:40:de:71:1f:
                    4a:47:35:2a:fe:4b:96:10:b6:4b:c4:f9:d3:69:66:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F0:5B:C9:19:EA:AB:8E:07:7A:4E:A0:73:92:B1:69:FF:6C:7F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a7d64815-4db9-307b-aa0f-90cad02fc0bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:78:de:a0:49:ed:53:a3:dd:43:fe:84:e7:9e:5a:ef:2f:35:
         fc:77:fe:68:c9:5d:87:27:41:6d:25:7c:46:f4:5c:45:1a:dd:
         78:89:64:3e:6a:35:2f:a6:be:37:48:9e:f6:7d:dc:7b:aa:72:
         0a:97:71:9f:e8:42:dd:42:24:6d:00:67:30:f7:b0:38:ca:4c:
         b5:af:f3:b1:b8:cf:71:d4:54:28:ae:c8:8a:68:28:29:48:28:
         4d:a1:e3:f4:0e:bb:05:82:53:93:11:4b:46:b8:89:7f:49:9a:
         62:30:72:90:f7:6d:ec:21:b4:c2:5a:5c:e5:cf:4f:7c:82:ff:
         b1:99:b2:d1:0d:c1:7c:0e:75:75:d4:41:7e:70:f2:dd:f2:14:
         02:df:e7:da:47:50:de:b1:99:b2:9b:09:6b:28:01:e0:9e:03:
         d4:f1:31:b0:af:bb:f0:21:b2:f5:14:6f:c6:83:c9:15:83:7a:
         d8:70:21:d3:d1:8a:b6:03:4a:57:77:87:28:fe:d1:a7:2e:35:
         55:7e:bf:7b:e1:4d:bc:ff:b4:7d:3f:62:d6:e9:04:b9:e9:3b:
         e2:5d:21:be:18:26:56:29:34:b4:8b:0e:e3:0f:45:d4:4e:11:
         5a:c1:a4:95:9b:fc:dc:08:20:df:c3:87:8f:2c:ba:2c:38:dd:
         f7:45:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:39:04 2026 by rpki-client