Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa
File:                     c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa (raw, json)
Hash identifier:          eNTxMCHcvhpY+n8XG4DYMvcyBB+7ltpVZnW7o/PreAE=
Subject key identifier:   75:2F:14:6B:CF:47:87:C1:B5:55:7C:7F:00:24:4B:88:D4:83:1E:22
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B1C63685BDE9B45E252E0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.32.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:1c:63:68:5b:de:9b:45:e2:52:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=512a398c-dc1b-4e70-bcf6-a1d4d313df65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:94:a8:a7:91:5b:9c:89:95:50:0e:44:fd:
                    7d:c3:d4:c1:1a:27:c1:a6:4b:ea:ac:b0:d4:fd:0e:
                    88:ef:ca:4a:6e:8e:1d:19:91:bb:10:69:91:db:49:
                    ba:2a:d3:3e:b5:70:33:f2:c2:e6:3b:33:fa:fb:1d:
                    46:6a:8b:76:ce:bd:7b:64:a8:d7:db:53:70:5f:bc:
                    d5:94:7c:a0:e2:45:30:b0:42:ca:5e:f4:61:ca:77:
                    6e:81:d3:7f:4a:53:55:9a:b0:71:40:5f:94:86:28:
                    a2:c4:03:c6:e9:fc:cd:a3:33:b0:77:70:56:fa:06:
                    95:86:04:3e:6f:1e:46:bb:7c:e3:50:2a:40:1a:8f:
                    ae:67:ef:a2:dc:00:32:c7:20:90:bd:37:e3:88:bf:
                    ff:9c:d1:e5:c9:3f:6c:e6:67:e5:b6:d2:41:b2:f4:
                    1b:78:f4:ca:15:73:df:64:01:a5:32:7d:5a:cb:ca:
                    61:12:bb:40:6a:41:aa:98:76:38:af:0f:f0:2f:33:
                    ee:e0:30:9c:86:fb:1d:54:44:5a:ca:69:1f:a6:3b:
                    26:2d:87:e5:ce:46:d8:62:9a:09:74:37:ca:00:23:
                    71:e3:28:91:86:72:5d:be:49:5b:17:0f:34:52:3b:
                    28:37:4e:63:b3:41:91:67:8a:55:80:92:88:09:59:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2F:14:6B:CF:47:87:C1:B5:55:7C:7F:00:24:4B:88:D4:83:1E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:97:37:9e:6e:6e:ed:1b:77:b5:a9:e1:51:6d:f4:b5:c5:
         24:45:dd:34:16:9e:24:99:3c:59:f2:00:7e:9c:ad:34:15:49:
         60:75:01:df:d5:97:f0:0c:de:14:29:8c:d4:d5:ce:b2:7c:91:
         40:f4:97:64:86:68:28:0e:3e:41:e8:a4:df:21:c9:24:85:5f:
         26:07:a5:40:3f:04:58:a5:de:0b:14:03:24:19:25:27:fc:32:
         d8:06:84:1e:96:f9:8b:a3:08:03:4b:ce:39:a6:73:10:e8:a1:
         82:48:4e:c2:43:04:9e:6a:f4:b0:38:ed:dc:d2:1e:fd:8e:1a:
         3f:5f:93:18:0a:dd:ed:9c:7b:39:9e:8a:9f:6a:78:5d:aa:2c:
         74:b5:a9:1b:9a:e0:f1:1b:70:e2:65:29:3d:61:5d:7c:a2:81:
         9a:0a:e1:8f:c3:30:50:89:5a:6b:fd:59:da:5a:ad:03:90:5e:
         4d:c6:f6:c2:57:c1:01:52:60:72:9f:81:34:67:39:0e:23:3c:
         d0:99:09:ce:34:d2:6c:85:2d:a0:9f:90:fa:2c:79:69:be:ff:
         8f:df:d6:bb:12:6d:ea:b6:ce:8b:47:66:3d:c2:20:b9:47:3a:
         34:c9:29:01:02:46:ee:2e:13:57:61:ad:ba:32:dc:3f:0c:bf:
         f2:f1:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:07 2026 by rpki-client