Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa
File:                     d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa (raw, json)
Hash identifier:          w9Ce/og0TnNtC/c6P6qZ7DTE+DC+Py18CoIDIkXPdH8=
Subject key identifier:   34:FD:4B:8E:85:2C:32:18:37:46:74:29:71:35:4A:68:07:94:E1:65
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B28C1D5CFD9361C453E80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.53.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:28:c1:d5:cf:d9:36:1c:45:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=5905b035-bdfc-407e-b84b-9be04f2642fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2f:d9:8a:d8:ca:b0:7a:da:64:d5:9b:9b:0e:
                    ca:3b:ca:cb:da:fb:b5:96:64:3a:05:15:e0:43:cc:
                    92:fc:63:9b:4a:02:01:f6:e4:62:34:0a:fd:25:e5:
                    74:7c:64:8a:c2:d3:36:6e:f1:23:df:d5:00:fc:82:
                    9a:96:bb:85:ea:bc:a2:f3:a1:3e:4b:ed:25:ca:3b:
                    05:59:45:bd:f5:47:13:cd:bc:50:c5:dc:a3:b6:4f:
                    74:bb:52:81:38:9e:b5:1f:fe:d0:0a:0d:6b:d0:25:
                    37:df:71:cf:64:ea:9e:87:12:d9:c4:76:bc:6f:4e:
                    29:fa:7f:c0:b0:da:6d:9d:8d:10:b9:f2:da:dc:df:
                    4f:c4:89:77:e6:0d:06:4b:3c:bc:a4:56:95:46:46:
                    ee:92:0f:15:53:7d:e2:e7:a0:8c:ed:01:3b:c7:0e:
                    56:8f:3e:dc:e0:33:5e:e4:42:0b:43:cd:76:a1:fb:
                    2f:bc:51:ab:cd:71:f7:bd:bc:1d:11:56:e2:f5:82:
                    d0:3b:41:95:3b:32:0a:4f:f9:31:59:f0:92:0f:4f:
                    c4:d0:8d:3a:22:cb:6c:30:b1:13:3b:db:c9:ba:20:
                    13:e7:40:60:a8:29:4d:5b:52:61:b8:b6:f5:00:09:
                    ac:b5:78:c2:03:5c:7f:7b:a4:d4:65:7e:9f:8f:dd:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FD:4B:8E:85:2C:32:18:37:46:74:29:71:35:4A:68:07:94:E1:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.53.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:f9:2d:28:0f:b4:73:f7:da:cb:4f:b3:69:79:4f:fd:1e:
         b7:d2:60:6a:41:24:da:27:17:16:80:d5:3a:99:3a:f5:de:01:
         13:25:73:7e:fe:0c:77:5f:6a:d3:4e:cf:36:61:a5:6e:fe:3e:
         4e:53:6f:a1:f1:32:07:a9:34:88:99:9c:c8:fd:7d:2a:bf:ac:
         d1:52:f8:a5:7a:bb:33:5b:33:81:92:91:21:ba:9c:a8:72:a2:
         e7:7c:22:d0:2e:e2:fe:45:d5:c1:b9:66:cb:c4:ec:24:f0:b8:
         ae:f0:06:3c:be:9e:44:cb:ec:1a:ed:60:21:39:58:b5:cc:2b:
         c6:c6:cb:d8:77:9b:dd:bd:26:2e:e7:63:d0:58:da:c7:be:24:
         5f:9a:2a:ee:f7:62:40:3c:4a:04:9c:38:57:57:2e:a6:69:f1:
         dd:4c:d4:a6:39:a6:b8:d5:a0:76:49:fc:35:f6:a8:df:f4:e2:
         43:34:21:d2:c2:09:d6:40:b1:64:e2:24:19:9d:68:3b:45:ff:
         7e:49:16:ab:59:2c:77:00:43:0b:74:0c:be:f5:ae:38:cd:17:
         a6:54:5c:57:72:3d:cf:ad:f1:1e:13:15:c1:23:d8:2d:dc:b7:
         42:f9:49:a5:6e:6c:af:e7:b6:82:6e:c0:7a:c8:ec:41:ac:40:
         4b:f5:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:39:04 2026 by rpki-client