Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17535935-7967-35a4-a1a8-331ed65046f3.roa
File:                     17535935-7967-35a4-a1a8-331ed65046f3.roa (raw, json)
Hash identifier:          abgGQoXAkm0gBH8yV5edvu/VwWNyWjan7i5gLbDmSIc=
Subject key identifier:   40:76:43:C3:27:49:1E:52:A4:2E:5D:BD:4B:26:27:CE:5A:F3:E2:E1
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D556550FC1A8CEA39B500
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17535935-7967-35a4-a1a8-331ed65046f3.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.50.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:55:65:50:fc:1a:8c:ea:39:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=9a8fe432-ea80-49bf-831f-8373066b4024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:e4:23:f3:76:f1:97:f5:07:b5:01:9c:d5:
                    06:29:98:58:c6:06:80:4d:c7:a7:13:c6:d1:e3:51:
                    0b:7f:f3:04:3d:d5:34:72:f1:55:61:f2:78:3f:4b:
                    91:9d:3d:83:e1:62:9c:73:1c:d5:4e:15:8b:15:ec:
                    75:6e:e5:13:aa:25:c5:7e:f7:fe:0f:31:48:40:0b:
                    4b:67:4f:5e:c4:42:90:fe:c0:c7:eb:d4:20:7f:eb:
                    46:74:ac:68:55:2a:cb:a5:67:b5:0e:93:43:81:92:
                    10:e9:b8:b2:e9:6b:d9:3a:ef:11:5b:f9:98:a7:71:
                    2b:2b:53:60:eb:c5:c4:44:3b:39:b5:61:7a:2f:60:
                    67:d0:72:f2:12:60:c8:19:69:0f:7f:8b:62:b4:3d:
                    d0:b1:fd:76:63:aa:8b:2e:4c:35:89:70:0a:a2:9b:
                    03:15:cb:8b:7b:95:dc:a1:7a:2d:25:15:38:9f:95:
                    dd:6a:b5:71:6e:01:81:29:9e:87:f1:62:c6:a5:ac:
                    d1:54:15:2a:33:9a:3a:57:8d:a7:75:cb:c3:bd:94:
                    4a:8e:da:27:9a:93:f5:58:28:03:cc:96:95:66:41:
                    8d:cd:e0:8a:9a:ee:67:cc:92:d1:4f:d9:f8:37:77:
                    a0:82:f4:da:77:65:77:3b:c1:a3:c9:59:3c:cf:8d:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:76:43:C3:27:49:1E:52:A4:2E:5D:BD:4B:26:27:CE:5A:F3:E2:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/17535935-7967-35a4-a1a8-331ed65046f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a2:09:76:85:53:97:17:fe:d7:51:28:73:b1:f9:ad:14:f1:
         4a:ff:99:0b:98:d1:54:44:29:86:35:77:f2:eb:f3:ff:35:d5:
         41:90:06:be:83:68:18:ad:56:12:f9:b2:c5:cf:bf:48:2b:97:
         09:bd:09:ff:66:a1:03:b7:32:67:c9:7b:98:e7:88:fa:01:05:
         49:14:71:ac:d0:b3:51:67:ad:6e:1b:29:30:cd:b4:43:c5:c0:
         ed:7a:99:d1:99:0a:2d:0f:c8:02:14:9f:75:a7:20:ab:6d:05:
         f9:52:4f:d2:f4:3a:c6:cc:a1:c8:cb:d2:e5:97:0d:ab:1a:2c:
         12:32:15:56:78:56:5a:ea:5c:82:89:a7:41:d5:4a:98:fb:8b:
         37:49:9f:a5:b5:20:63:46:1e:4d:4f:05:49:05:0f:14:51:80:
         0a:0b:b8:aa:13:dc:24:26:a0:ba:3e:3a:6b:d1:a3:0e:05:f9:
         04:2e:c4:95:af:93:16:a2:24:b4:f0:4a:31:51:15:62:55:7b:
         e9:a1:a7:08:57:45:cc:bb:dd:f1:b5:3e:53:07:d8:52:11:a5:
         c8:35:c5:08:23:dd:51:45:5e:b3:0c:7e:36:f0:43:cf:0d:90:
         7a:44:48:75:4b:d7:54:9c:14:df:ac:39:10:60:8f:66:b4:d1:
         1b:2e:38:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:44 2026 by rpki-client