Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8016833-1a9f-3123-af81-bdd2ececb2bb.roa
File:                     d8016833-1a9f-3123-af81-bdd2ececb2bb.roa (raw, json)
Hash identifier:          DdrzGkCAmaHskMNwaxDaUNgRCMXA8z5IfOzuv/lhxlU=
Subject key identifier:   0E:8C:4A:B5:07:C9:E9:61:AC:9E:06:AD:3D:31:CE:62:3B:B6:B7:D5
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B214131CBEF352E503680
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8016833-1a9f-3123-af81-bdd2ececb2bb.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.61.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:21:41:31:cb:ef:35:2e:50:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=4e1abe76-0b22-49e8-92c0-aeb5afcf7860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:aa:66:ab:33:b0:8f:c0:89:59:33:95:5c:1b:
                    34:d0:a6:ca:3e:a2:94:48:8a:df:01:bf:b2:8f:f1:
                    bc:90:59:56:7a:da:ed:6b:cf:de:4c:69:70:83:21:
                    81:b0:e3:1a:de:5d:b6:69:9e:05:bd:39:12:d1:36:
                    d2:95:ca:bb:62:ee:58:8c:2b:af:65:78:fa:47:a5:
                    30:e6:27:ca:c4:4e:2c:12:3f:c9:93:86:3c:75:4a:
                    59:1e:5f:b7:97:3c:aa:ff:ab:e5:d3:7b:22:9a:70:
                    7d:2e:15:ab:e7:4e:b9:53:c3:66:0b:9f:f0:28:69:
                    2e:e9:11:12:7e:21:e8:47:98:44:7f:f6:a8:e5:a9:
                    e1:84:62:b6:a2:91:84:c0:9e:cc:4b:94:86:ca:73:
                    46:77:12:a0:5c:d1:50:5e:a3:6d:51:d7:93:07:e9:
                    04:1b:e9:b3:ea:bb:d0:44:00:c2:44:f3:c0:2d:25:
                    4e:ee:8a:27:83:60:3b:83:86:38:82:10:f4:81:09:
                    d0:ac:90:72:5b:01:8a:97:ea:36:29:c1:63:7d:81:
                    cb:31:e6:eb:d6:94:e3:5c:25:1d:5a:77:8c:99:38:
                    52:15:9b:33:31:e8:77:8d:b9:8b:98:95:7c:82:f6:
                    be:68:75:4f:ce:05:55:96:3e:ac:b1:b8:3b:61:9a:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8C:4A:B5:07:C9:E9:61:AC:9E:06:AD:3D:31:CE:62:3B:B6:B7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8016833-1a9f-3123-af81-bdd2ececb2bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:fa:5a:6f:e8:34:bd:4a:62:e1:30:a3:3f:d6:f3:38:f1:90:
         ef:61:a6:e8:61:c2:71:4c:a6:73:5d:22:7e:06:df:2c:99:67:
         dc:0b:e8:9b:f2:7b:04:85:de:48:ff:6c:52:9d:a0:b6:79:3d:
         b8:03:04:f0:c1:0a:f9:fa:8b:99:7a:37:52:ff:a0:41:e0:05:
         d1:29:8c:8e:38:fd:6a:db:2d:2b:f5:c7:12:e0:c1:e9:bf:aa:
         a4:46:f0:fe:05:ac:dc:7f:55:63:fa:c8:3f:35:16:e9:83:1b:
         ae:0c:50:3b:1d:3f:e2:9e:eb:ca:e8:2e:65:39:ef:da:30:27:
         ab:e9:31:c3:6f:e9:89:df:ca:93:f0:54:9c:69:08:48:32:22:
         f0:11:d8:16:95:7e:48:e2:fc:98:17:7e:c0:3f:43:f6:5c:bd:
         73:0c:44:76:fc:e3:c9:9c:43:ca:1f:35:f4:0a:45:db:eb:0b:
         e4:b3:70:cc:b7:fa:e5:76:c6:41:86:41:af:5c:73:2d:49:4e:
         03:e5:e5:16:8b:6d:0d:2e:a0:1d:41:67:c5:ec:4e:9f:ca:05:
         28:dd:99:7d:4a:2d:ca:af:63:3e:55:4c:a5:6f:44:ec:47:69:
         82:a2:79:70:2f:20:57:2c:fa:b8:ab:79:6b:73:4e:48:04:c4:
         da:af:3a:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyFBMcvvNS5QNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
NGUxYWJlNzYtMGIyMi00OWU4LTkyYzAtYWViNWFmY2Y3ODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiapmqzOwj8CJWTOVXBs00KbKPqKUSIrfAb+y
j/G8kFlWetrta8/eTGlwgyGBsOMa3l22aZ4FvTkS0TbSlcq7Yu5YjCuvZXj6R6Uw
5ifKxE4sEj/Jk4Y8dUpZHl+3lzyq/6vl03simnB9LhWr5065U8NmC5/wKGku6RES
fiHoR5hEf/ao5anhhGK2opGEwJ7MS5SGynNGdxKgXNFQXqNtUdeTB+kEG+mz6rvQ
RADCRPPALSVO7oong2A7g4Y4ghD0gQnQrJByWwGKl+o2KcFjfYHLMebr1pTjXCUd
WneMmThSFZszMeh3jbmLmJV8gva+aHVPzgVVlj6ssbg7YZoZvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA6MSrUHyelhrJ4GrT0xzmI7trfVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDgwMTY4MzMtMWE5Zi0z
MTIzLWFmODEtYmRkMmVjZWNiMmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/6Wm/oNL1KYuEwoz/W8zjxkO9hpuhhwnFMpnNdIn4G3yyZZ9wL6Jvy
ewSF3kj/bFKdoLZ5PbgDBPDBCvn6i5l6N1L/oEHgBdEpjI44/WrbLSv1xxLgwem/
qqRG8P4FrNx/VWP6yD81FumDG64MUDsdP+Ke68roLmU579owJ6vpMcNv6YnfypPw
VJxpCEgyIvAR2BaVfkji/JgXfsA/Q/ZcvXMMRHb848mcQ8ofNfQKRdvrC+SzcMy3
+uV2xkGGQa9ccy1JTgPl5RaLbQ0uoB1BZ8XsTp/KBSjdmX1KLcqvYz5VTKVvROxH
aYKieXAvIFcs+rireWtzTkgExNqvOvo=
-----END CERTIFICATE-----
Generated at Fri May 22 17:38:12 2026 by rpki-client