Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e5103ed5-341b-3991-b338-56f2db1f3a9e.roa
File:                     e5103ed5-341b-3991-b338-56f2db1f3a9e.roa (raw, json)
Hash identifier:          Enmt2Yxg9lvRY3AQRwMUADk4Xqh5RgjtSm5CTzWINXk=
Subject key identifier:   C8:E3:B8:F0:8B:7F:AC:10:31:9F:4A:53:F9:57:DB:24:41:61:AC:7F
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B2814E8584BCB3E55F400
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e5103ed5-341b-3991-b338-56f2db1f3a9e.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.32.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:28:14:e8:58:4b:cb:3e:55:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=74f52029-50c2-46db-ae72-d47a62783ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:6e:44:98:ff:af:33:c6:30:35:63:4e:1d:
                    21:0e:30:10:61:19:bd:70:62:ca:b0:a8:7f:be:8c:
                    ca:0c:8f:66:2f:14:c9:a9:0a:6c:0c:10:bb:e9:23:
                    78:5c:64:7d:b4:65:30:f1:20:39:25:cf:6d:fd:dc:
                    cb:77:e7:42:2a:7e:d9:9f:8e:5d:2b:31:1f:08:4d:
                    9a:23:bf:af:c2:69:4e:48:d7:f1:42:fe:98:54:7f:
                    62:16:07:1e:2e:02:80:8a:72:b5:28:fc:e6:78:b4:
                    9b:66:c1:53:74:d4:22:1b:45:ae:7a:a3:af:bd:23:
                    62:81:5f:ce:50:6b:db:51:d0:b4:40:f5:bb:80:dc:
                    7e:12:c5:df:f6:73:bc:2e:a8:ad:51:46:d3:fc:f7:
                    00:bf:ab:67:e1:62:7c:4a:b6:34:93:fb:44:0b:bd:
                    5f:0f:5c:40:43:a5:8c:b6:4b:11:78:08:48:15:bc:
                    c4:44:75:4f:78:25:21:9c:dc:d0:e7:a0:ee:d7:7c:
                    f9:07:f0:cf:04:a1:39:4f:29:47:22:c1:3d:13:33:
                    12:0f:39:55:d1:2b:e0:ab:14:c2:0d:93:d8:1b:ff:
                    37:46:14:dc:59:d4:37:86:b3:2f:c0:82:b5:35:72:
                    2c:04:1e:4d:2c:20:c9:fb:0c:ee:4d:16:e8:6d:48:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E3:B8:F0:8B:7F:AC:10:31:9F:4A:53:F9:57:DB:24:41:61:AC:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e5103ed5-341b-3991-b338-56f2db1f3a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.32.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:29:eb:c7:1a:cd:8f:ea:5d:9d:b6:78:36:c8:1e:84:00:
         c3:40:5a:ae:41:2d:23:73:6f:8a:d9:2b:32:55:dc:5f:1d:ac:
         70:c6:b1:63:d0:d2:72:f1:b3:bb:8c:c0:05:46:b4:05:c8:be:
         36:ba:77:55:d9:d8:1a:53:1f:0f:9b:95:b4:4a:7c:fa:e3:94:
         a0:b3:f0:74:12:22:f4:23:c9:27:dc:d9:a9:58:4e:17:55:57:
         42:22:c6:cd:ce:ae:9e:b5:f4:97:82:30:69:f6:37:69:5b:84:
         82:b9:18:d0:ae:83:a4:e0:a9:dc:bc:50:70:c0:b6:84:ec:5a:
         29:8b:6e:67:2c:51:e4:69:03:2c:bc:6f:b4:24:40:b9:d9:90:
         6f:8a:92:e6:e0:78:9e:cc:47:d5:8b:0a:c2:bb:a0:2f:87:00:
         83:aa:a0:a2:ef:7d:3c:4d:52:cc:ce:0a:42:06:ff:c4:8c:39:
         1d:a6:79:d9:a4:a6:c9:88:fd:6a:93:bf:28:ec:7a:b4:22:4f:
         0e:6b:00:a7:33:7f:d2:4f:db:11:b1:48:8c:97:8b:87:3a:5e:
         08:aa:22:e9:9b:e1:04:a4:1e:cc:79:58:5d:32:05:fe:a5:50:
         fc:5f:3c:9e:e2:aa:28:45:f6:6d:b1:44:1b:aa:d7:d5:b6:05:
         17:d1:f4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:59 2026 by rpki-client