Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa
File:                     04a03306-2f12-3d10-806c-44f9debc1d75.roa (raw, json)
Hash identifier:          redtGyyK/UwCDF6JhcVhYXjPwN6RvONkXDtncGZQlYo=
Subject key identifier:   63:2E:D2:FD:20:B5:62:79:7E:88:59:59:15:36:39:1B:69:76:D4:27
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D4E0C3003EFD9B929FAF0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.58.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:4e:0c:30:03:ef:d9:b9:29:fa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=a011c222-8690-4956-b38b-acdc6243ac32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:69:e4:fd:2d:af:ee:7e:36:c6:97:ab:36:
                    0c:d0:4e:58:18:90:96:da:11:7b:78:89:ad:8b:bc:
                    59:6a:2f:cb:09:93:9d:53:51:1e:78:fa:7b:a2:4f:
                    d1:93:a0:97:8b:f0:9a:7f:1b:8b:52:f2:6a:41:0e:
                    f7:46:8e:c9:48:95:c3:f0:12:6d:ed:52:67:89:42:
                    17:c2:98:19:e2:b6:eb:17:86:e8:d6:9c:5e:8e:bb:
                    93:36:01:35:61:53:60:7d:da:54:61:17:36:73:bb:
                    8d:bc:45:c0:a8:da:40:14:75:df:34:2e:65:65:8b:
                    78:c5:9c:99:13:30:48:00:3f:71:34:c8:bd:89:76:
                    5a:95:16:10:08:a9:8d:0a:ed:17:76:8e:ff:25:18:
                    03:8e:6f:7c:7c:d8:d0:6f:55:bb:f7:0f:00:b1:bb:
                    d9:17:23:33:c4:d1:ce:cf:11:30:15:90:38:83:f5:
                    8c:5d:11:cb:35:40:d5:02:ae:80:02:4a:ff:69:7b:
                    13:3d:44:2f:78:cd:2a:a8:9b:dc:31:b8:7b:80:b6:
                    c8:e8:41:c6:8b:5a:98:1c:c7:af:f2:cf:f2:a3:e8:
                    50:88:f1:85:fc:d8:60:1c:89:83:b2:3f:d2:98:a6:
                    37:c8:e5:8b:21:e2:46:97:0e:80:3c:3e:45:0d:14:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2E:D2:FD:20:B5:62:79:7E:88:59:59:15:36:39:1B:69:76:D4:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.58.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:fe:6f:f8:de:c1:6c:af:48:61:3b:dd:2c:c8:15:e3:d1:
         2c:8c:f3:f0:55:69:02:e0:df:99:9d:39:87:e2:8e:dc:1f:3b:
         71:9c:05:58:51:ec:58:49:cb:bb:28:c7:c5:aa:08:86:36:6f:
         e8:b7:21:94:06:5c:92:5a:eb:14:89:4c:1f:7b:ea:ff:1d:76:
         3c:82:9b:ac:4f:b9:6b:5c:8c:da:1c:9b:0a:af:6d:7f:db:4f:
         7e:97:99:02:22:d7:27:9a:d6:e5:a1:06:35:12:a9:e2:96:f5:
         eb:bc:f6:03:ab:49:a8:f9:4e:b8:0b:71:dd:25:88:86:3f:cc:
         5f:b6:13:33:50:48:2b:82:80:ef:47:0a:ce:2a:67:38:01:d2:
         1c:ab:cb:e4:d6:ef:f3:ad:05:8d:49:67:f3:dd:f2:98:a2:c1:
         de:e9:a5:f5:30:57:00:78:8e:26:7d:0b:4a:eb:a3:54:b8:60:
         e3:df:5a:53:ce:c0:d0:3e:27:9d:b9:8d:d9:ac:da:9d:08:88:
         27:52:2b:0c:f8:df:a5:a7:ef:ef:64:d8:60:71:f1:64:ca:21:
         76:bf:4e:85:61:0d:33:fa:f3:d1:d9:c2:35:a6:28:f6:96:5e:
         a9:37:e8:c6:df:e3:5f:de:9d:91:70:32:5e:00:ee:90:22:a6:
         74:71:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:24 2026 by rpki-client