Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6c9790d-bd4b-32c3-a8a7-8526c66fe08a.roa
File:                     d6c9790d-bd4b-32c3-a8a7-8526c66fe08a.roa (raw, json)
Hash identifier:          EyBlT1Y+cJP5KLSfWDgHFa+kLtpTT5ZOHzBxA4daNj8=
Subject key identifier:   00:68:72:6F:7C:DB:F0:6E:7B:FA:60:76:6C:DF:6B:22:51:D8:0D:71
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B1C203B31DE3135BCC700
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6c9790d-bd4b-32c3-a8a7-8526c66fe08a.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.49.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:1c:20:3b:31:de:31:35:bc:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=52dfdeec-c093-4ce2-a4a4-702434485fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:13:af:3c:3a:01:ca:68:21:b6:54:83:30:
                    fc:85:a1:85:6b:5f:a9:92:15:39:aa:21:85:ba:65:
                    56:1b:15:81:d2:4f:d0:be:d7:14:27:cf:c2:da:f7:
                    03:a8:82:c5:eb:5f:b9:b6:88:71:86:f9:6b:0e:c9:
                    15:ff:d6:28:83:b3:cf:66:d7:c6:0b:26:d4:32:2e:
                    36:6a:31:f7:35:5c:2b:d1:30:03:35:3c:89:fa:06:
                    ed:e7:cd:8c:71:16:3e:18:6b:fb:f7:fc:61:1f:33:
                    fe:57:5f:4c:6b:f5:1a:9b:10:08:1f:91:71:e8:6a:
                    3b:5f:07:7a:80:cc:df:cd:86:fa:b8:90:70:08:6b:
                    ee:32:01:99:56:83:0e:dd:02:86:c9:57:ae:70:78:
                    7f:31:50:d0:ec:49:46:a4:75:6f:33:4c:d5:13:f8:
                    75:d1:fe:c3:b5:35:dd:03:9d:51:45:53:e1:c5:a0:
                    c2:de:16:77:2c:a4:c9:8f:f4:96:81:f2:3c:dd:4a:
                    02:3a:6d:0f:ba:11:76:d2:35:da:8d:69:b7:f1:49:
                    7c:cd:1e:a1:3d:9a:e6:77:0a:61:f5:68:d0:f5:48:
                    24:37:02:25:ea:00:1b:c4:8f:a2:dc:7f:bf:c5:33:
                    28:b1:36:3e:72:d0:0b:95:6a:cc:08:2d:42:c1:9c:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:68:72:6F:7C:DB:F0:6E:7B:FA:60:76:6C:DF:6B:22:51:D8:0D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6c9790d-bd4b-32c3-a8a7-8526c66fe08a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.49.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:b3:78:bb:be:41:a7:82:27:43:ec:50:5c:1f:f6:73:55:
         99:d0:22:58:0e:d7:03:1f:8e:13:43:14:91:88:c1:7e:9b:4b:
         3a:4f:cd:ac:4a:d5:ba:4f:52:bd:f1:a8:e7:dd:ff:f7:cf:11:
         72:47:19:3a:cb:1d:34:d8:ba:06:5b:43:f9:80:d0:56:97:5c:
         2e:a5:2e:40:b3:b7:db:40:1b:7a:be:87:e0:b1:47:66:e5:05:
         c2:81:c3:18:5e:d7:3c:e4:49:37:13:b6:88:e5:48:ce:24:e8:
         6f:0b:82:df:a7:c8:5e:8c:66:6d:6f:81:d7:b0:49:39:9a:a2:
         51:05:3a:1a:3b:5a:91:39:69:83:ab:35:2b:8e:7a:5c:d6:c8:
         15:09:2f:3e:da:a3:9c:c8:cc:1f:d9:b5:f5:2c:b8:d3:be:2b:
         75:8f:6e:11:74:85:2f:88:c5:ef:51:89:3f:1e:6b:c1:3c:ef:
         32:a0:13:79:ff:cf:1c:0b:5e:85:ca:96:51:a1:13:09:5f:54:
         5d:0c:f0:18:53:8f:d1:71:c1:6d:f8:a9:fb:e8:7a:76:3f:8a:
         f5:ba:39:df:f7:f1:2d:7d:e2:72:1f:ec:23:01:87:70:06:43:
         a3:49:d1:d1:9f:88:e2:61:a5:8e:0f:11:48:8c:ff:87:da:10:
         53:e3:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:58 2026 by rpki-client