Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa
File:                     d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa (raw, json)
Hash identifier:          NRn12RVDXFF0lgkGIdSghePVNEmiH0Gh64RhPQ9TWoQ=
Subject key identifier:   6D:9A:78:5A:4B:A1:AE:7A:32:6B:BA:92:F3:AC:00:99:3A:38:40:33
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B57ED2768A78B100ACB00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.62.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:57:ed:27:68:a7:8b:10:0a:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=fe309427-30b8-494c-8a41-6bf96ae64cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:70:f1:5f:58:2d:6d:21:7c:69:15:c9:cb:
                    85:25:17:d5:ea:d3:31:4c:f5:aa:4c:fb:e3:ba:39:
                    c6:96:b0:3d:06:8a:ee:59:77:5e:0b:1d:f5:44:4d:
                    fa:a4:90:2c:87:a9:be:08:a7:41:7f:34:19:45:d6:
                    fd:b2:58:c8:58:27:87:66:de:a6:8d:93:5f:51:2d:
                    61:75:83:f4:35:20:c7:fb:0d:96:a0:73:ba:89:42:
                    90:5a:60:18:60:6b:94:4d:df:75:59:8f:78:ed:cd:
                    5c:e1:9e:bd:84:29:14:0c:a9:82:90:e0:a4:66:9d:
                    5a:2f:04:98:97:29:f2:d6:3e:cc:06:54:c6:09:4d:
                    a7:b0:6d:2c:d9:f6:29:73:e7:14:02:10:a2:72:69:
                    fb:6c:f2:04:5e:56:75:dc:5a:13:d9:0b:e9:5a:b2:
                    7c:cf:d8:43:9f:99:a3:46:2f:77:32:f6:69:22:53:
                    2c:1f:89:87:d1:53:d8:8e:d1:76:44:d0:11:d4:4b:
                    4a:5b:c9:53:f8:e7:9c:67:8b:0f:f3:5a:1a:50:5f:
                    d6:ca:26:c0:3d:76:0b:71:e9:06:b6:cd:61:54:e8:
                    60:59:cd:e3:23:ff:cc:20:f3:fa:ac:39:d3:89:d3:
                    07:56:fa:41:9b:01:93:8f:2d:3f:cf:c6:13:01:fa:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9A:78:5A:4B:A1:AE:7A:32:6B:BA:92:F3:AC:00:99:3A:38:40:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.62.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f2:d7:cc:5c:c6:0e:68:73:51:6c:4c:0c:8d:7f:06:37:6b:
         ff:46:70:0a:54:6b:8e:01:c0:dc:41:1e:0c:63:b4:e5:f9:80:
         64:43:52:8f:a2:1d:99:81:8b:8c:4d:0e:dd:4a:8b:01:56:63:
         60:72:95:13:5f:00:3e:ea:ab:f0:1a:92:52:5f:18:a7:14:35:
         d6:26:bf:6c:07:cf:00:34:98:f8:64:82:e9:bb:1d:65:96:ba:
         44:07:bc:14:2b:da:96:fa:98:42:e4:3f:9e:fa:44:a7:5b:66:
         9d:ea:d0:7f:d8:dc:a1:57:67:0f:cf:ab:d0:62:db:64:e9:2d:
         8f:bc:65:b7:c2:1a:cf:83:38:99:5c:cf:74:a0:ad:e6:65:73:
         32:ca:03:77:9f:85:f2:7c:9b:0d:96:f0:49:1e:0a:7e:15:7a:
         be:20:eb:0b:fa:73:0f:4b:2e:e8:6d:e7:c0:31:15:11:18:6b:
         75:c5:06:7c:ee:98:88:1b:23:c8:63:89:82:60:0d:20:dc:2d:
         6d:f0:d9:7c:6c:e4:bd:3d:20:95:aa:0e:20:23:76:52:e0:07:
         b4:d6:d4:ed:bb:01:a7:07:2a:e0:d3:72:3f:d7:50:8f:78:2c:
         5d:05:d4:5a:97:ca:e2:1a:e8:ca:e0:28:0d:b7:d1:d0:cf:fd:
         0c:90:1f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:56 2026 by rpki-client