Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fe440bcd-f40d-3515-b016-e0aed3c9cd2a.roa
File:                     fe440bcd-f40d-3515-b016-e0aed3c9cd2a.roa (raw, json)
Hash identifier:          kLedtC9Dwkv93NeX9PP99vLC8IgL7OkKlQyCfj73his=
Subject key identifier:   43:70:AB:EF:FC:AF:3F:53:CC:2A:20:A7:43:33:D5:97:22:C0:B7:BC
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584DE41B5C8695DAE3A6B9852440
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fe440bcd-f40d-3515-b016-e0aed3c9cd2a.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     16591
IP address blocks:        136.57.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5c:86:95:da:e3:a6:b9:85:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=fe1f5ef1-ebd6-4bae-b45c-25f5c00942e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:e6:e3:16:8c:38:80:05:5c:d9:83:1f:8f:
                    4e:93:5f:69:37:70:ad:17:97:c5:f7:3a:c6:d9:8d:
                    36:4a:d7:5f:08:c1:7e:f2:64:2d:93:d5:4f:a5:8d:
                    fa:5a:a7:f3:10:25:be:c3:75:72:29:cc:6d:66:63:
                    5c:e4:e8:50:50:93:4d:9c:10:ac:5d:c0:2b:d8:b4:
                    ec:48:71:62:46:77:d9:f6:f7:df:08:f6:0c:cb:ef:
                    ef:6a:37:42:95:55:e5:7e:0b:76:c9:64:f2:cf:cb:
                    69:23:5e:bc:ec:b9:f5:1b:4b:b6:8c:ce:30:50:b3:
                    cf:69:6c:ef:e2:43:af:ac:e6:25:e9:ec:a9:9b:85:
                    5d:80:4c:67:47:95:1d:20:ad:02:71:72:f9:2c:75:
                    42:cc:29:4d:c4:8c:0d:82:20:1c:52:4b:57:f2:3b:
                    5f:7b:a9:e7:95:53:78:64:56:9a:db:83:4b:ac:a9:
                    a1:ff:04:4f:51:50:e1:99:e8:de:ff:af:b8:68:ac:
                    b6:11:f8:ab:81:14:03:7f:14:06:0c:2f:cb:41:ef:
                    01:c0:e5:43:64:ae:8e:20:41:bf:04:46:f0:70:1e:
                    3f:8c:8e:06:49:89:6b:2e:02:6c:96:76:93:b6:05:
                    8f:56:51:14:9e:fc:99:c7:88:55:42:59:b8:54:32:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:70:AB:EF:FC:AF:3F:53:CC:2A:20:A7:43:33:D5:97:22:C0:B7:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fe440bcd-f40d-3515-b016-e0aed3c9cd2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:d1:6b:57:23:69:80:c5:2d:41:83:df:a3:bc:4d:35:44:
         58:0c:db:13:23:ad:4e:c0:d3:89:5a:a5:ef:ca:57:16:86:79:
         72:cf:7c:22:b9:35:a4:1b:5b:f1:74:ef:84:75:56:b2:09:63:
         0f:f4:40:c7:0d:c2:8d:ff:59:05:34:ae:cf:0c:e3:7a:c4:f8:
         6f:be:0d:14:b0:f3:f9:fb:f8:5d:ea:45:41:1f:30:cc:0d:24:
         ee:d4:ce:fc:73:b1:95:aa:7b:0f:ef:cc:e6:3f:e6:e4:5d:1b:
         7b:1b:67:8b:9f:4b:e8:bd:89:86:15:1a:dd:81:70:9b:24:7f:
         7d:a1:05:66:a2:ba:49:94:55:38:46:a0:59:0d:a1:4f:dc:78:
         03:c3:4e:bd:c9:f0:4e:3f:75:2a:0b:50:43:18:3c:1d:32:fb:
         3b:9a:39:4d:80:80:a8:cb:f5:8d:c8:39:7c:be:58:d7:4d:0d:
         2e:d1:ac:4f:4b:1c:5a:70:07:d8:31:ba:b1:5f:fb:52:11:6d:
         9e:19:28:6e:5f:52:00:69:1a:4d:5f:6f:b4:bf:d4:f0:6a:bc:
         11:bd:c9:81:7c:11:52:c5:d5:be:46:8d:23:5c:19:11:6a:3c:
         eb:b0:6d:8b:91:20:92:42:cc:2d:72:d6:53:52:ca:ee:45:da:
         9d:e4:e6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:33 2026 by rpki-client