Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bcd61b03-c7b5-3c2a-b5ab-5b85dca88efe.roa
File:                     bcd61b03-c7b5-3c2a-b5ab-5b85dca88efe.roa (raw, json)
Hash identifier:          U6DVrYLyZiEKWA4luojVcfdn7zLSF3dE7GhBn2X8DPM=
Subject key identifier:   97:6E:39:F6:0A:10:76:25:6A:DF:10:2F:E0:23:6C:49:6D:B4:8F:24
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B5E9B79FF16DE80D70380
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bcd61b03-c7b5-3c2a-b5ab-5b85dca88efe.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.34.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5e:9b:79:ff:16:de:80:d7:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=58f54254-6a73-4083-8611-3b9f01b6b04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:93:b5:55:db:3d:b9:ae:0e:fb:bb:3d:d3:f3:
                    bd:a8:6b:e7:78:7f:e7:66:ce:df:66:2d:0b:50:8a:
                    9f:f6:10:a5:28:e3:86:a4:3a:f7:74:ec:1a:46:86:
                    75:1e:c1:ff:b5:78:f0:9b:67:96:c3:9f:9e:f8:c9:
                    c4:33:3b:fb:23:4d:c9:8b:8c:f3:4c:8a:d7:0f:91:
                    d4:db:1e:de:ba:55:b1:8d:e4:39:8b:3e:ff:63:35:
                    32:70:97:13:10:de:5b:fd:d2:75:dc:54:92:6d:11:
                    c2:58:9c:0a:5e:d2:9b:9a:f6:87:00:47:3a:d9:f4:
                    55:17:c5:6a:3d:57:be:75:a0:4b:41:11:fa:67:59:
                    90:bf:07:9a:25:53:43:42:d5:88:ae:15:f2:4f:c0:
                    db:e0:cb:f6:0d:c2:af:86:4b:5a:dc:0a:f3:0b:fc:
                    bf:ec:de:96:29:45:f9:ba:64:e2:7c:9c:51:e7:b9:
                    24:f2:29:0a:e7:46:ef:60:2c:00:d7:4a:02:31:6f:
                    a0:08:9a:9c:70:3b:90:ab:c9:b9:e9:20:0b:ae:c9:
                    12:51:d0:3c:19:89:f2:c4:38:dd:72:09:07:e1:90:
                    3f:86:c4:39:9e:23:6a:72:a0:85:83:bf:a0:25:38:
                    19:8d:00:5c:66:5e:bf:0f:7d:f6:85:98:07:59:a5:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:39:F6:0A:10:76:25:6A:DF:10:2F:E0:23:6C:49:6D:B4:8F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bcd61b03-c7b5-3c2a-b5ab-5b85dca88efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:56:98:09:31:34:3a:7b:eb:95:51:fd:24:d1:10:6f:0c:ff:
         5b:31:5e:f1:74:15:12:0d:7f:f9:16:71:06:fc:d4:97:60:3a:
         87:30:c6:40:22:ad:88:6c:55:de:d4:65:76:e3:35:9d:1b:8c:
         6c:f7:ea:09:3a:7c:3a:46:40:89:9a:7c:1d:36:59:dd:b3:c1:
         a2:7b:0d:32:f8:62:49:3a:21:05:81:8a:d3:ab:61:f5:ad:02:
         50:3f:c7:67:30:38:5c:19:a8:17:f7:fb:0c:4a:f9:e1:b2:bc:
         34:da:ec:cd:12:9c:77:0f:28:b4:b1:ec:5c:d9:37:85:0f:cb:
         1a:bd:37:02:cb:54:17:4d:3b:6c:25:e6:94:80:db:06:dc:7b:
         b7:cc:8b:f7:98:97:1a:01:e3:83:7b:1a:d6:cb:08:33:73:3a:
         80:aa:f3:55:e5:c2:0f:33:8f:c4:e8:b8:ac:c1:de:a2:6e:20:
         a1:44:04:66:d4:13:2e:6e:55:1c:1a:b2:4f:d5:b3:be:b9:a5:
         21:d7:90:03:c2:18:60:0d:c0:8a:8c:1f:6b:ec:0c:c0:d0:a2:
         27:d9:fb:13:a2:55:d7:b0:53:eb:90:9a:02:5e:58:a6:41:7a:
         1d:b5:36:44:e4:93:c4:d1:b4:f7:76:65:67:27:cb:eb:e1:57:
         ba:2e:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:37:59 2026 by rpki-client