Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1511a50d-8ea4-35df-aca9-5531e4cc2ecd.roa
File:                     1511a50d-8ea4-35df-aca9-5531e4cc2ecd.roa (raw, json)
Hash identifier:          IK9X1v6tf6bdIbqwubFSGMo2Vge14x+7249Fnf7NKy0=
Subject key identifier:   32:21:00:F0:52:17:CA:6A:E8:5E:0A:B3:B7:12:0B:81:BE:D6:09:4E
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584EA791347B57D23695E6A64A00
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1511a50d-8ea4-35df-aca9-5531e4cc2ecd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16591
IP address blocks:        136.50.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:34:7b:57:d2:36:95:e6:a6:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df20e142-1eb1-4772-9b0c-a8153d1e278e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:40:f2:b0:77:e5:c2:97:2d:db:da:7f:7b:
                    e9:b8:4c:f3:16:78:a9:14:28:b6:91:e3:ea:8f:e5:
                    a7:69:9c:09:66:1d:57:99:8c:6d:f8:b0:28:0a:dc:
                    8b:c3:dc:24:3f:7d:d1:ef:6a:70:39:0e:d6:7c:1c:
                    57:15:1c:4e:27:94:3f:72:11:b4:17:c0:a5:0f:73:
                    c9:e5:f0:4a:ac:37:01:24:d4:ec:52:fd:eb:4a:8a:
                    1f:5c:a1:df:c5:0e:ee:18:f2:97:87:cd:c9:17:a2:
                    f6:c9:05:f1:17:2c:b1:03:ea:92:0e:42:a5:f9:41:
                    b4:3f:1a:65:30:d1:0a:a9:5f:e5:b1:6e:ef:40:57:
                    05:b8:0f:61:cd:c7:f3:63:b2:c7:4c:c4:47:8d:43:
                    67:20:31:39:ea:e2:46:66:a9:e1:95:f5:48:db:d7:
                    ec:37:d2:32:e6:1d:97:06:6b:2d:61:c5:3e:45:f6:
                    11:a1:0f:f4:24:9f:56:d5:aa:a7:db:39:95:c0:30:
                    1d:79:83:6d:2e:76:45:37:ad:1f:53:26:7f:6f:29:
                    19:46:82:d1:48:b0:11:ad:fb:eb:e8:32:6c:f9:fa:
                    35:be:20:0f:e8:08:3a:3b:28:54:ac:13:ab:69:e1:
                    76:2b:b7:75:d1:20:03:d1:a9:27:46:6a:8a:18:dc:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:21:00:F0:52:17:CA:6A:E8:5E:0A:B3:B7:12:0B:81:BE:D6:09:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1511a50d-8ea4-35df-aca9-5531e4cc2ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:73:b9:77:4f:df:db:b5:7b:99:52:95:c4:9d:74:f4:a7:b2:
         5c:9e:0b:45:b4:fa:bf:92:be:22:ed:c4:53:79:f1:4d:59:48:
         5f:2d:9e:a7:4f:71:51:6b:86:b7:8a:ad:92:e4:25:67:de:c5:
         d9:95:7a:3c:85:9a:e3:a9:56:ae:ae:f9:11:3d:f0:6b:cd:cf:
         6b:cb:fb:c6:fc:71:18:4d:f7:b3:f4:fa:ec:ac:04:0b:f3:a6:
         67:80:9e:af:e4:e1:9a:2f:53:14:0f:8d:24:37:d2:05:21:52:
         6c:83:20:93:bb:85:fd:0e:52:7d:76:5c:ab:cc:02:ac:c1:42:
         ee:88:0e:c5:a4:f3:30:49:53:dd:cb:6b:4b:3a:74:e6:01:82:
         51:33:83:71:9e:b2:5d:e6:49:4b:b7:15:d3:b2:bf:c8:d2:46:
         1c:ae:05:c9:ec:6f:99:12:c1:79:9c:1f:72:95:43:04:17:3b:
         f6:2f:b0:34:f1:fc:d7:89:a5:a8:88:0e:13:10:eb:29:fe:7f:
         db:1c:8d:ad:41:e0:e9:61:25:56:3a:1c:01:9e:c6:fd:11:7e:
         11:33:cf:51:67:87:82:66:2f:85:78:fd:7b:41:f3:27:9a:07:
         ff:c0:31:f2:a3:b4:59:60:5b:53:70:81:db:05:a0:74:3a:9a:
         a4:11:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:48 2026 by rpki-client