Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c2b6c31-b131-3373-a252-3605cb811b06.roa
File:                     1c2b6c31-b131-3373-a252-3605cb811b06.roa (raw, json)
Hash identifier:          A8v1c+oFH30XBmPXVrK3FfX43LWCkg2MMGY3e1ScJK0=
Subject key identifier:   E1:0A:41:21:61:83:2E:67:A7:66:32:BD:5E:CD:E0:9B:45:70:45:B4
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584CD82101EDB30389F755A82A50
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c2b6c31-b131-3373-a252-3605cb811b06.roa
Signing time:             Fri 13 Feb 2026 01:15:45 +0000
ROA not before:           Fri 13 Feb 2026 01:15:45 +0000
ROA not after:            Thu 14 May 2026 00:15:45 +0000
asID:                     16591
IP address blocks:        136.54.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:21:01:ed:b3:03:89:f7:55:a8:2a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 13 01:15:45 2026 GMT
            Not After : May 14 00:15:45 2026 GMT
        Subject: CN=b57f780b-5742-42ac-85e3-48260f5ab01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:07:fe:b2:d2:1b:6e:81:1b:97:0f:82:be:
                    bb:4d:4f:7d:9c:4b:13:11:d1:a4:2e:3b:ab:cc:9d:
                    6f:ac:dc:6a:69:71:f4:63:c5:a5:fb:b7:d6:8d:fc:
                    2c:af:39:12:b5:be:6b:8a:54:99:e9:4d:87:4d:9f:
                    ca:30:d5:99:a6:8d:a5:56:2e:88:11:9e:65:cd:9e:
                    a4:50:c9:9d:c8:aa:d8:cd:b1:a6:d7:5b:0d:9d:5d:
                    0b:a7:51:62:f1:a4:97:20:cd:84:88:85:78:ee:21:
                    83:bc:d1:16:9d:75:c9:01:29:f2:75:9a:9b:50:84:
                    10:df:c0:af:f5:4a:4d:e0:2c:bc:93:05:1d:28:53:
                    e9:85:f1:21:59:93:91:bf:2a:34:2b:14:d6:51:41:
                    fb:65:22:68:3f:ba:f9:e9:2e:09:a7:99:29:62:68:
                    b9:b6:1d:4a:7d:15:31:e3:f7:db:9b:51:4c:e3:2f:
                    9e:14:7f:7c:63:36:8f:02:1f:58:96:46:fb:be:95:
                    57:4b:ce:86:30:62:fe:9c:b0:e5:39:7b:fe:af:19:
                    da:88:ae:fd:89:8c:3f:9d:c2:e5:17:26:19:51:53:
                    2f:02:41:71:59:b3:4b:0a:1e:30:ae:ad:d2:4c:e6:
                    ba:67:b3:38:f8:09:0a:2b:85:4e:8e:4b:7e:1c:75:
                    f1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0A:41:21:61:83:2E:67:A7:66:32:BD:5E:CD:E0:9B:45:70:45:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c2b6c31-b131-3373-a252-3605cb811b06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.54.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:48:c7:85:cc:15:4d:38:ba:86:87:c1:a5:9f:d5:53:5b:33:
         74:11:48:d3:2a:b1:a3:fd:18:cb:9a:44:6d:94:73:f4:d9:5a:
         ae:8d:20:e8:88:55:24:b4:10:e9:3e:8b:16:d3:5d:ce:91:d0:
         b2:70:de:a5:2c:de:2c:cd:ce:42:8e:44:66:6d:91:b0:dd:87:
         69:ae:23:aa:6b:77:ff:2c:5f:71:68:5b:74:bc:dc:d7:e6:29:
         e5:06:00:8f:bb:4b:50:f9:65:c8:15:b4:c2:4d:30:77:8d:a4:
         7f:8a:ec:01:2d:47:69:bd:32:9b:df:be:cb:a2:97:20:3c:9a:
         3a:94:a7:c9:c9:c6:c5:5c:3a:20:a5:e9:d7:10:92:a2:33:e6:
         89:2f:91:47:74:c4:f5:83:28:34:95:b7:9d:f3:c7:00:ec:34:
         ae:99:99:95:3e:a6:8d:81:86:2f:4c:eb:5a:8e:84:49:0e:5d:
         b6:39:a6:23:2c:84:73:95:ee:14:4f:e1:e0:e6:e7:07:e2:b9:
         ee:57:d8:87:0d:41:04:7c:96:90:62:4b:d7:26:56:64:65:12:
         e4:b6:fa:d6:38:5e:c6:60:c8:40:1d:fc:fa:dc:5e:ce:15:7a:
         b3:53:22:ef:dc:f4:a4:28:19:ca:4e:c5:95:35:38:2d:9d:c7:
         6d:99:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:46 2026 by rpki-client