Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/694aff20-4eab-4cd7-8352-08173627a7e8/19f1bb9f-c353-3641-a6a0-b0842c677b13.roa
File:                     19f1bb9f-c353-3641-a6a0-b0842c677b13.roa (raw, json)
Hash identifier:          1ULPeOn7sZXADsAmxa+jbpg/o3QSnmiEaqNwGJwmHG4=
Subject key identifier:   65:7E:F2:A1:7D:AA:5D:BD:2E:82:66:E3:89:0E:97:21:6D:02:8C:71
Certificate issuer:       /CN=694aff20-4eab-4cd7-8352-08173627a7e8
Certificate serial:       010D0C9F4328584ED002127C6A039888EB399910
Authority key identifier: 98:9C:09:C4:39:85:E8:9A:DA:C5:27:94:29:A7:5B:F9:D5:0B:15:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/694aff20-4eab-4cd7-8352-08173627a7e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/694aff20-4eab-4cd7-8352-08173627a7e8/19f1bb9f-c353-3641-a6a0-b0842c677b13.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     401917
IP address blocks:        137.36.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/694aff20-4eab-4cd7-8352-08173627a7e8/694aff20-4eab-4cd7-8352-08173627a7e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/694aff20-4eab-4cd7-8352-08173627a7e8/694aff20-4eab-4cd7-8352-08173627a7e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/694aff20-4eab-4cd7-8352-08173627a7e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:12:7c:6a:03:98:88:eb:39:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694aff20-4eab-4cd7-8352-08173627a7e8
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=5a83bb41-e3e3-4b73-94f4-b840a3bcff27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8a:b4:2f:d0:57:e3:97:e6:8e:e4:53:7c:37:
                    97:9b:5b:35:5a:df:18:6d:7d:07:0e:30:a6:3f:18:
                    b1:80:23:ba:cb:40:56:e6:62:a5:63:e5:a9:ba:82:
                    22:75:5f:c2:4f:4d:ee:89:50:98:63:6f:71:23:03:
                    0b:ed:dd:8f:79:16:f8:d8:92:70:65:f1:4b:78:72:
                    08:86:6d:3a:90:6d:05:9d:b8:9f:c2:36:75:94:79:
                    7e:1f:a6:d5:0d:f6:d6:73:d4:6c:02:45:a6:3d:61:
                    fb:58:b5:24:19:f5:f9:b5:9a:f8:b7:18:d7:c1:ae:
                    f5:ec:d9:ee:32:88:92:0d:5a:45:4a:48:6f:d8:bf:
                    2c:1a:7c:81:6a:4f:3f:51:e6:76:b6:8a:bf:4b:75:
                    89:90:ea:8f:57:93:19:41:23:ab:34:77:34:26:e2:
                    41:e5:b5:4f:8a:62:f9:72:39:54:98:ee:56:fd:c3:
                    fd:73:7e:fd:79:87:d2:86:86:7b:17:4b:d4:b8:ae:
                    dd:b0:24:3c:15:35:11:f7:e8:fe:d7:c1:db:df:a2:
                    71:d1:ba:ee:64:e9:78:c4:c1:b7:b9:08:7e:ef:0c:
                    88:a1:c2:04:36:da:e2:7f:d7:31:b6:65:a4:8e:4c:
                    29:83:ab:91:8d:14:00:2e:b9:91:9b:8e:38:6e:28:
                    ed:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7E:F2:A1:7D:AA:5D:BD:2E:82:66:E3:89:0E:97:21:6D:02:8C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/694aff20-4eab-4cd7-8352-08173627a7e8/19f1bb9f-c353-3641-a6a0-b0842c677b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/694aff20-4eab-4cd7-8352-08173627a7e8/694aff20-4eab-4cd7-8352-08173627a7e8.crl

            X509v3 Authority Key Identifier:
                keyid:98:9C:09:C4:39:85:E8:9A:DA:C5:27:94:29:A7:5B:F9:D5:0B:15:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/694aff20-4eab-4cd7-8352-08173627a7e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.36.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:6e:ce:cb:7e:b3:e1:48:57:9f:8b:0a:03:0f:05:e7:97:
         ca:02:bc:db:25:5f:ef:d5:af:51:73:8f:89:e1:48:c2:8c:af:
         ba:be:68:91:c0:61:ea:36:e9:97:de:aa:c4:11:76:b5:64:a2:
         49:ed:47:9c:50:8f:c1:3d:e2:ac:1b:1f:f2:a4:63:0d:85:79:
         44:52:3d:fa:08:c5:f2:8a:42:d8:05:75:ad:95:bb:ee:3b:67:
         a6:62:c9:c9:67:9b:4a:4e:07:3b:90:43:b0:65:a4:bf:76:60:
         a9:f4:bd:69:63:5e:bf:47:72:74:68:87:32:c9:d0:97:f6:b6:
         a5:cf:3d:8b:fb:5b:9d:64:12:0a:78:46:9b:e0:87:d2:9a:a1:
         24:09:37:c4:0f:13:d8:3e:04:52:19:dc:50:f9:cd:26:54:2a:
         29:b6:11:d6:a3:8b:f3:ca:73:b2:a0:89:3d:33:60:ae:88:5e:
         82:5f:78:76:37:34:65:a6:69:ae:24:1c:fb:6a:ab:40:46:8c:
         04:dd:c0:7d:81:e9:86:20:2a:9d:6c:4d:d3:87:4a:90:6b:2d:
         ab:cc:08:ca:83:a3:04:7d:38:a0:6c:97:13:99:af:57:a5:b9:
         0b:94:0d:f1:6e:0c:26:cd:8b:0e:e6:c2:60:d9:69:ce:4c:a8:
         54:42:5c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:04:14 2026 by rpki-client