Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a9ce0901-d438-3fd8-8fe1-7e0de927735d.roa
File:                     a9ce0901-d438-3fd8-8fe1-7e0de927735d.roa (raw, json)
Hash identifier:          2amZlort/njkaRqkTeoGJBj/KH2mIzyFXnDtXkHaduE=
Subject key identifier:   E3:06:9B:E1:9C:C6:3E:AF:42:49:26:42:28:C9:6B:29:4A:C0:3B:CF
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584ED5AE89FB35A30FB538AC5680
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a9ce0901-d438-3fd8-8fe1-7e0de927735d.roa
Signing time:             Fri 14 Aug 2026 13:47:22 +0000
ROA not before:           Fri 14 Aug 2026 13:47:22 +0000
ROA not after:            Thu 12 Nov 2026 14:47:22 +0000
asID:                     16591
IP address blocks:        136.39.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:ae:89:fb:35:a3:0f:b5:38:ac:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Aug 14 13:47:22 2026 GMT
            Not After : Nov 12 14:47:22 2026 GMT
        Subject: CN=b06258db-537b-44bb-a383-8306b51e5f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:e2:04:b5:34:13:57:19:5e:8e:53:ef:87:
                    6b:e0:17:e0:b6:86:ce:44:6a:af:37:54:1a:a7:41:
                    e5:f4:af:ce:8a:11:ad:4c:3d:2f:ea:e0:47:1e:14:
                    de:30:31:d7:fd:d4:01:41:ac:8a:0d:e1:f4:bb:b6:
                    d8:8c:4c:df:dd:7b:eb:0e:02:0e:fc:cc:f1:3e:e5:
                    8b:b3:83:02:55:fd:63:c7:e1:6d:eb:46:f1:83:28:
                    06:3b:6a:d1:61:e1:1b:6a:a0:ce:d6:9b:73:b2:d6:
                    38:66:8f:d4:fc:b5:90:79:37:8b:17:c2:49:8e:2a:
                    e0:4d:02:a0:31:ac:3c:6a:09:eb:7e:f1:20:dc:e4:
                    04:b4:5d:c5:a0:71:b3:4c:54:38:92:c1:19:dc:62:
                    8a:d1:ea:21:35:7e:d6:d3:db:31:13:77:38:1f:59:
                    8c:ee:53:1d:df:d8:86:6b:d4:d0:43:89:00:41:13:
                    c0:8e:02:99:aa:bf:47:c3:15:1c:21:16:a5:f7:84:
                    8d:e1:15:e5:0b:21:8d:64:e0:4c:2a:06:d4:f4:c9:
                    ab:cc:38:0f:d6:15:d8:61:19:8a:6e:a1:56:33:73:
                    88:51:46:a4:cd:62:69:23:7e:26:1a:42:fc:bb:a8:
                    cb:03:56:01:3d:a0:e9:36:ef:d7:61:cf:96:ad:22:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:06:9B:E1:9C:C6:3E:AF:42:49:26:42:28:C9:6B:29:4A:C0:3B:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a9ce0901-d438-3fd8-8fe1-7e0de927735d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.39.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:67:c7:cc:fa:56:a2:70:b6:ef:31:c9:b0:4b:a3:7e:72:50:
         96:ff:40:75:06:23:e1:a9:3b:5b:78:26:b2:31:fa:86:c5:15:
         79:3d:55:2c:25:ce:2a:48:73:c7:2f:a2:90:61:8c:c7:90:f6:
         33:2b:de:1f:2d:85:20:1a:c7:89:c3:d5:a1:82:cd:62:87:06:
         6d:9d:7f:26:3f:54:58:90:c9:c8:59:b0:27:0d:36:34:46:03:
         2c:d1:89:d1:51:a1:93:65:ec:ba:2e:7f:89:03:b9:f5:9c:78:
         76:db:31:71:1f:9f:0a:4e:0a:49:b4:f4:1d:8c:9a:56:72:38:
         20:00:59:ce:60:52:0f:31:05:bc:c0:b8:0c:ad:88:2a:41:02:
         ae:f7:4b:99:3b:c1:bf:4b:8d:11:79:16:3c:28:7d:eb:b9:9b:
         0e:0e:c9:2a:79:0b:10:21:9d:f9:76:46:8c:33:5c:69:fd:27:
         80:80:0d:61:d7:1d:da:c7:6d:92:49:8c:1c:4d:61:c4:fa:05:
         05:29:6a:d8:c6:42:7d:16:65:bf:49:09:bd:86:11:89:00:83:
         cf:d0:12:f7:02:af:95:ee:e8:e2:00:ac:42:33:c5:18:c5:a0:
         ef:50:8a:a2:a7:d7:0a:40:63:db:e6:f9:0a:44:22:0b:24:1e:
         ae:7c:6b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:00:42 2026 by rpki-client