Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/02120b07-4e5b-3f74-bfd4-d2e84d17c8df.roa
File:                     02120b07-4e5b-3f74-bfd4-d2e84d17c8df.roa (raw, json)
Hash identifier:          QzO7IfGR8kSzVTLqWzqt33ZYLKlFRXDMcbCgtiJb3mM=
Subject key identifier:   63:35:C7:B4:27:9D:3E:6D:59:63:3F:3D:77:56:19:54:6C:85:E3:17
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA79098A3F2A5F4BE926CBE00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/02120b07-4e5b-3f74-bfd4-d2e84d17c8df.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.34.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:98:a3:f2:a5:f4:be:92:6c:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=57698281-143e-4bf7-88eb-4ef5c857449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6b:fb:8e:83:c7:3c:de:7b:16:99:ba:86:a3:
                    24:fc:5d:54:d1:c3:df:90:46:04:2f:46:3a:6a:4c:
                    6a:e1:b9:96:b1:94:ce:e4:b7:13:a1:69:04:b2:bc:
                    27:7d:a6:ac:28:cf:56:3f:a6:11:82:85:5f:9c:56:
                    52:dd:12:87:1f:7d:7c:c2:01:a4:59:13:87:c5:e2:
                    a8:e2:29:38:ab:ff:2d:20:39:63:2b:bd:b1:3a:d3:
                    9e:35:bf:ad:5a:97:af:38:30:96:aa:d8:d0:01:0f:
                    8e:dd:17:9e:db:98:15:51:63:c0:22:79:3a:a1:16:
                    ce:9f:a2:c3:11:14:07:53:11:cc:1c:f9:6e:c3:f5:
                    73:92:08:6a:ad:38:b8:e5:2f:97:7b:f2:85:64:dc:
                    a7:4a:13:bd:8d:48:f5:30:0a:8f:38:63:ac:70:40:
                    01:29:f4:e8:6c:60:da:88:f1:bf:fc:6a:1a:d3:c9:
                    f0:37:6e:5d:08:e7:3d:8a:c2:89:84:59:ad:28:43:
                    6b:33:ac:f8:44:e2:da:c1:33:e6:a8:af:15:91:66:
                    c8:4a:6a:9a:52:77:3c:72:ae:c9:ae:35:78:f4:bf:
                    1b:91:fb:9e:8a:c4:70:e3:9f:b1:23:40:20:05:53:
                    c6:31:91:fe:d8:8c:9f:a4:ea:15:a5:d2:83:0f:ed:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:35:C7:B4:27:9D:3E:6D:59:63:3F:3D:77:56:19:54:6C:85:E3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/02120b07-4e5b-3f74-bfd4-d2e84d17c8df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.34.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:2b:48:e4:3b:18:58:72:96:a2:dc:4b:3e:3a:bf:7d:da:
         ce:11:30:a0:3e:f7:00:f1:50:3a:c9:8b:c5:4b:c0:1b:f0:cd:
         88:a4:50:97:e4:c8:4f:11:4d:74:45:1a:cd:9e:19:33:eb:4f:
         56:0e:b6:4c:12:1c:c9:72:da:10:8b:22:1e:1c:fa:18:98:61:
         c5:11:90:1a:e0:cf:3d:a4:a3:e6:11:0d:25:61:2f:37:9f:90:
         59:0d:af:12:52:88:c3:9f:f3:a7:8e:a2:85:4f:fb:c2:eb:9b:
         7e:6f:51:ad:8f:e3:ce:36:c6:e4:bd:4d:43:d3:35:ac:23:02:
         5c:12:39:32:31:56:4f:36:1e:bf:b4:0b:7a:f2:7e:40:43:36:
         42:5b:e1:15:3a:0e:ec:21:9f:69:27:b5:fe:b4:3c:c3:04:07:
         2f:11:fb:18:65:0a:62:fc:cc:7e:cb:6a:d7:b0:ce:15:b0:63:
         c2:b1:0f:54:ab:c1:df:3a:ee:f7:8c:e8:d5:54:6c:c9:00:7b:
         a7:37:a2:8f:08:8d:60:87:0a:c8:eb:93:a3:5b:87:64:ed:ad:
         41:36:5c:61:5f:de:07:c9:a4:0e:83:aa:8e:5b:a4:11:4a:90:
         b4:a6:a3:f8:63:62:30:a3:08:2e:53:04:e2:72:4e:18:63:93:
         e2:6e:b7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:04 2026 by rpki-client