Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e9389dcf-c052-3af2-9392-ae74c3cde8f0.roa
File:                     e9389dcf-c052-3af2-9392-ae74c3cde8f0.roa (raw, json)
Hash identifier:          gic82TGUbtJ8nKMG9Zg2IhzUUwTfXRH47oU3wjECLXc=
Subject key identifier:   B6:BA:EA:00:C0:12:B6:DB:6D:5E:2B:EA:44:6D:1B:0C:25:51:8C:7C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B19F7CA24F0A390FEDA40
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e9389dcf-c052-3af2-9392-ae74c3cde8f0.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.50.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:19:f7:ca:24:f0:a3:90:fe:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=466a9600-df7f-48cf-81eb-22d1be1f8fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:28:74:ef:91:1e:3e:3e:f3:82:0e:6e:fe:
                    39:7f:96:f9:96:d4:5f:dc:c6:20:cb:2a:50:33:82:
                    da:12:cd:de:91:70:de:29:15:ad:bc:c7:21:c7:3a:
                    f0:ea:ce:66:9e:8c:64:82:c4:c8:be:43:1f:3b:82:
                    dc:3a:ee:07:87:f3:e1:d9:a7:c1:98:7c:c1:da:a4:
                    78:a9:e2:0b:39:5d:1d:b5:46:f1:63:ef:4b:60:70:
                    9e:bd:81:bf:7a:c0:63:3a:01:bb:ce:12:31:48:14:
                    c1:46:81:fa:fe:e0:74:5d:e9:78:80:04:93:29:fc:
                    37:0b:c6:db:ee:4a:86:1e:c5:e6:97:7f:49:12:2a:
                    38:21:70:90:57:81:13:d7:09:2b:5b:7f:cf:9b:80:
                    74:14:dc:31:93:1d:89:21:0c:15:ef:7c:ad:33:ae:
                    41:dc:8f:14:d5:d6:f1:ed:3f:c3:ea:54:b1:4c:51:
                    c2:60:50:c9:c4:35:c7:bc:58:a0:f9:fb:e4:b1:ab:
                    0c:85:8b:da:7c:70:6d:0d:32:55:c4:9b:e1:54:72:
                    b7:91:b3:80:13:73:89:8d:18:c1:19:27:cd:c9:59:
                    e2:f7:94:6a:0d:3e:e5:87:3c:4a:b3:5f:77:28:05:
                    d2:cc:09:5c:7e:59:4c:e8:80:ee:f7:79:4d:46:ed:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BA:EA:00:C0:12:B6:DB:6D:5E:2B:EA:44:6D:1B:0C:25:51:8C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e9389dcf-c052-3af2-9392-ae74c3cde8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:97:71:e0:91:c2:81:c4:c4:08:d1:32:0f:cb:4b:d2:93:52:
         00:b7:a3:c5:e0:97:c5:a1:60:b9:9f:dc:c8:b5:65:ad:4d:2a:
         06:42:55:60:c2:70:c6:c5:6e:1a:db:3a:d2:b0:40:52:c0:99:
         2b:b5:d1:4d:ab:48:e3:81:cc:40:ab:20:46:ea:f6:a5:b9:a8:
         25:0b:24:14:63:99:64:cb:ea:89:3a:95:6b:86:51:49:5e:30:
         f7:34:a1:56:2d:ce:c9:ea:ef:c5:f0:98:d6:34:84:15:5d:53:
         d8:10:01:58:01:f3:ee:78:8c:57:41:88:02:99:4b:4d:fb:6d:
         1d:f8:99:3e:69:c3:09:d3:22:0f:32:e0:f5:31:4e:3e:cb:0c:
         39:12:f9:b5:6f:29:36:a5:36:ca:39:0f:0b:5d:f5:9f:73:36:
         54:49:a2:f0:09:d8:91:98:a1:9c:65:10:ea:f5:2a:f3:b6:77:
         fe:68:ff:84:13:c5:f8:c8:b4:24:38:5c:3e:ae:9f:5d:c7:8b:
         be:dc:d9:df:d8:bb:a7:9b:9d:88:96:c9:a7:19:61:96:3c:1c:
         e5:5e:22:29:0b:84:47:b6:91:88:88:30:ef:7d:c5:c7:67:43:
         ea:d6:3f:43:e4:57:9a:4b:0e:da:84:94:11:9c:77:ae:b5:31:
         64:9e:76:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:43 2026 by rpki-client