Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa
File:                     b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa (raw, json)
Hash identifier:          aGx1ov2pnlQgmALcOZCBVg6unKTPKUshgWS4WkseSXw=
Subject key identifier:   2B:B3:DF:5C:DC:13:DD:D5:09:6A:C3:B3:BB:A4:AA:CD:D7:23:C7:2B
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B6502CD19E938DD04B480
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.32.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:65:02:cd:19:e9:38:dd:04:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=99db502a-c6ac-4a55-b55d-4fbe84acf6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:15:03:3a:e0:17:9d:81:76:d6:23:ce:74:11:
                    e6:0d:9c:8f:49:b8:eb:7f:32:ab:91:fa:b8:54:a6:
                    c3:91:3c:a5:a9:be:dd:e0:22:45:45:a2:a9:be:e3:
                    93:c0:60:fd:64:64:13:5a:34:74:0e:35:28:56:fd:
                    88:67:50:b7:1e:24:16:b6:04:05:ba:95:f5:a2:e0:
                    f7:4e:7d:b3:37:96:c6:a6:ff:70:a3:83:f7:44:44:
                    0c:21:c3:35:01:f6:bd:23:70:74:d3:68:df:6e:1b:
                    8e:a1:0d:21:c6:6d:a5:00:e4:b5:63:04:d4:d4:9a:
                    32:8c:ba:7d:b6:9b:83:e3:8a:c3:a2:ca:ba:58:2d:
                    c9:71:b2:f5:4b:df:9b:68:35:ef:0c:df:50:d8:39:
                    a0:0a:da:8e:5d:9c:f7:13:2a:9f:3d:6c:8b:d0:58:
                    ea:e4:22:47:b2:c0:a4:3e:19:84:49:6d:78:5c:00:
                    b6:c0:c9:b3:55:25:ae:3e:c0:bb:a0:43:a3:b9:0e:
                    d0:20:54:a3:44:10:e4:5b:a0:3a:18:26:74:f5:39:
                    a0:1c:2b:3c:fe:27:3c:ca:83:45:b2:43:d4:15:82:
                    d2:9e:dc:9d:1a:5f:10:fd:b8:76:09:ae:5b:3b:df:
                    fa:6a:08:28:0f:72:a8:74:ea:97:06:1b:b8:d9:f0:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B3:DF:5C:DC:13:DD:D5:09:6A:C3:B3:BB:A4:AA:CD:D7:23:C7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:0c:c9:ef:7c:37:8b:f8:52:e8:11:70:df:81:34:84:78:0c:
         22:86:f2:f6:55:ce:71:ec:1d:6a:cc:f5:19:67:78:83:86:99:
         be:54:33:41:96:99:cd:9f:39:29:08:6c:2b:c7:08:a8:07:dd:
         16:3f:1d:5e:71:0c:79:3f:da:ee:dc:e1:32:4b:93:01:78:03:
         72:bf:c5:d6:de:63:8d:59:d7:a6:43:a7:dc:6d:78:33:06:1f:
         84:96:84:62:e3:b4:92:fe:09:83:d5:dd:66:cd:ac:8a:41:52:
         76:de:25:72:01:4b:04:f8:ce:86:3c:e0:bd:4b:e8:d5:81:cd:
         09:38:d1:00:df:ad:14:74:02:12:59:46:eb:e1:f9:0d:1c:8f:
         51:d5:d8:60:14:e9:ab:9c:10:81:9f:41:bd:fe:fa:09:a4:4b:
         ce:8b:ab:8a:c9:64:08:fe:e4:89:1e:25:bb:51:fa:b9:cf:3a:
         48:f3:77:12:f0:4d:0c:b1:7d:47:8d:d6:98:81:26:8b:0b:66:
         a2:36:ec:49:64:a0:bd:c1:e7:4a:d8:33:37:1b:83:f0:23:c2:
         24:37:ed:94:11:1e:ae:8b:18:ca:17:0c:b8:89:9a:ad:96:13:
         9f:88:6b:c4:1b:17:e0:37:8a:eb:ba:b2:c3:36:f1:02:a4:e0:
         e6:01:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:29:05 2026 by rpki-client